[2025-08-21 00:01:46][351088371305376][1 ms][INFO] === Request start ===
[2025-08-21 00:01:46][351088371305376][2 ms][DEBUG] START check_frida
[2025-08-21 00:01:46][351088371305376][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:01:46][351088371305376][298 ms][DEBUG] SU: done in 296 ms; outroot         20950     1 2279504   4360 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:01:46][351088371305376][298 ms][DEBUG] check_frida: running
[2025-08-21 00:01:46][351088371305376][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 00:01:46][351088371305376][299 ms][DEBUG] START check_scloud
[2025-08-21 00:01:46][351088371305376][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:01:46][351088371305376][611 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23627712 73348 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:01:46][351088371305376][611 ms][DEBUG] targetPkg: running
[2025-08-21 00:01:46][351088371305376][611 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 00:01:46][351088371305376][611 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:01:46][351088371305376][611 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDg4MzcxMzA1Mzc2IiwibW9kZWwiOiJTTS1NNjI1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFI5MDBRSk1IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODI1In0='" -e "main()" -q"
[2025-08-21 00:01:46][351088371305376][611 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:01:46][351088371305376][611 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDg4MzcxMzA1Mzc2IiwibW9kZWwiOiJTTS1NNjI1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFI5MDBRSk1IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODI1In0='" -e "main()" -q"
[2025-08-21 00:01:49][351088371305376][3188 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDg4MzcxMzA1Mzc2IiwibW9kZWwiOiJTTS1NNjI1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFI5MDBRSk1IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODI1In0="\r\n
[2025-08-21 00:01:52][351088371305376][6328 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95348c3d-6e8f-4512-a585-d43b6214a312","id":"QR_95348c3d-6e8f-4512-a585-d43b6214a312","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:01:52][351088371305376][6328 ms][DEBUG] proc_open done in 5717 ms; code=0; res.len=3152
[2025-08-21 00:01:52][351088371305376][6328 ms][DEBUG] END   runCmdUntilRes#1 in 5717 ms
[2025-08-21 00:01:52][351088371305376][6328 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:06:08][353026647705548][1 ms][INFO] === Request start ===
[2025-08-21 00:06:08][353026647705548][2 ms][DEBUG] START check_frida
[2025-08-21 00:06:08][353026647705548][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:06:09][353026647705548][245 ms][DEBUG] SU: done in 243 ms; outroot         20950     1 2263084   4420 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:06:09][353026647705548][245 ms][DEBUG] check_frida: running
[2025-08-21 00:06:09][353026647705548][245 ms][DEBUG] END   check_frida in 244 ms
[2025-08-21 00:06:09][353026647705548][245 ms][DEBUG] START check_internet
[2025-08-21 00:06:09][353026647705548][245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 00:06:09][353026647705548][807 ms][DEBUG] SU: done in 562 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.326/202.326/202.326/0.000 ms\n
[2025-08-21 00:06:09][353026647705548][807 ms][DEBUG] check_internet: online
[2025-08-21 00:06:09][353026647705548][807 ms][DEBUG] END   check_internet in 562 ms
[2025-08-21 00:06:09][353026647705548][807 ms][DEBUG] START check_scloud
[2025-08-21 00:06:09][353026647705548][807 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:06:10][353026647705548][1073 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23627744 73924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:06:10][353026647705548][1073 ms][DEBUG] targetPkg: running
[2025-08-21 00:06:10][353026647705548][1073 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 00:06:10][353026647705548][1073 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:06:10][353026647705548][1073 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI2NjQ3NzA1NTQ4IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MkcwQjFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTUzIn0='" -e "main()" -q"
[2025-08-21 00:06:10][353026647705548][1073 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:06:10][353026647705548][1073 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI2NjQ3NzA1NTQ4IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MkcwQjFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTUzIn0='" -e "main()" -q"
[2025-08-21 00:06:12][353026647705548][3713 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDI2NjQ3NzA1NTQ4IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MkcwQjFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTUzIn0="\r\n
[2025-08-21 00:06:16][353026647705548][7337 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f38233ee-e867-4acf-b3ec-3ee7e9ac55e2","id":"QR_f38233ee-e867-4acf-b3ec-3ee7e9ac55e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:06:16][353026647705548][7337 ms][DEBUG] proc_open done in 6264 ms; code=0; res.len=3152
[2025-08-21 00:06:16][353026647705548][7337 ms][DEBUG] END   runCmdUntilRes#1 in 6264 ms
[2025-08-21 00:06:16][353026647705548][7337 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:08:07][351240644149871][0 ms][INFO] === Request start ===
[2025-08-21 00:08:07][351240644149871][1 ms][DEBUG] START check_frida
[2025-08-21 00:08:07][351240644149871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:08:07][351240644149871][259 ms][DEBUG] SU: done in 258 ms; outroot         20950     1 2278492   4420 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:08:07][351240644149871][260 ms][DEBUG] check_frida: running
[2025-08-21 00:08:07][351240644149871][260 ms][DEBUG] END   check_frida in 259 ms
[2025-08-21 00:08:07][351240644149871][260 ms][DEBUG] START check_internet
[2025-08-21 00:08:07][351240644149871][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 00:08:08][351240644149871][728 ms][DEBUG] SU: done in 468 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.399/203.399/203.399/0.000 ms\n
[2025-08-21 00:08:08][351240644149871][728 ms][DEBUG] check_internet: online
[2025-08-21 00:08:08][351240644149871][728 ms][DEBUG] END   check_internet in 468 ms
[2025-08-21 00:08:08][351240644149871][728 ms][DEBUG] START check_scloud
[2025-08-21 00:08:08][351240644149871][728 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:08:08][351240644149871][962 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23627776 73876 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:08:08][351240644149871][963 ms][DEBUG] targetPkg: running
[2025-08-21 00:08:08][351240644149871][963 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 00:08:08][351240644149871][963 ms][DEBUG] rawBody.length=1161
[2025-08-21 00:08:08][351240644149871][963 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQ0MTQ5ODcxIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDlRVkpEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg1OSJ9'" -e "main()" -q"
[2025-08-21 00:08:08][351240644149871][963 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:08:08][351240644149871][963 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQ0MTQ5ODcxIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDlRVkpEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg1OSJ9'" -e "main()" -q"
[2025-08-21 00:08:11][351240644149871][3587 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQ0MTQ5ODcxIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDlRVkpEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg1OSJ9"\r\n
[2025-08-21 00:08:13][351240644149871][5774 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7becc45e-a231-4f66-9e57-98ebd09dcf45","id":"QR_7becc45e-a231-4f66-9e57-98ebd09dcf45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:08:13][351240644149871][5774 ms][DEBUG] proc_open done in 4811 ms; code=0; res.len=3152
[2025-08-21 00:08:13][351240644149871][5774 ms][DEBUG] END   runCmdUntilRes#1 in 4811 ms
[2025-08-21 00:08:13][351240644149871][5774 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:08:21][350455581569649][1 ms][INFO] === Request start ===
[2025-08-21 00:08:21][350455581569649][1 ms][DEBUG] START check_frida
[2025-08-21 00:08:21][350455581569649][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:08:21][350455581569649][304 ms][DEBUG] SU: done in 303 ms; outroot         20950     1 2279504   4408 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:08:21][350455581569649][304 ms][DEBUG] check_frida: running
[2025-08-21 00:08:21][350455581569649][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 00:08:21][350455581569649][304 ms][DEBUG] START check_internet
[2025-08-21 00:08:21][350455581569649][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 00:08:22][350455581569649][601 ms][DEBUG] SU: done in 297 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.435/204.435/204.435/0.000 ms\n
[2025-08-21 00:08:22][350455581569649][601 ms][DEBUG] check_internet: online
[2025-08-21 00:08:22][350455581569649][601 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 00:08:22][350455581569649][601 ms][DEBUG] START check_scloud
[2025-08-21 00:08:22][350455581569649][601 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:08:22][350455581569649][899 ms][DEBUG] SU: done in 298 ms; outu0_a118      20979 10674 23627808 73388 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:08:22][350455581569649][899 ms][DEBUG] targetPkg: running
[2025-08-21 00:08:22][350455581569649][899 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 00:08:22][350455581569649][899 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:08:22][350455581569649][900 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDU1NTgxNTY5NjQ5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2ME5BWU5OIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzg1In0='" -e "main()" -q"
[2025-08-21 00:08:22][350455581569649][900 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:08:22][350455581569649][900 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDU1NTgxNTY5NjQ5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2ME5BWU5OIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzg1In0='" -e "main()" -q"
[2025-08-21 00:08:25][350455581569649][3538 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDU1NTgxNTY5NjQ5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2ME5BWU5OIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzg1In0="\r\n
[2025-08-21 00:08:36][350455581569649][15113 ms][DEBUG] proc_open done in 14213 ms (timeout); code=0; out.len=0 err.len=11
[2025-08-21 00:08:36][350455581569649][15113 ms][DEBUG] END   runCmdUntilRes#1 in 14213 ms
[2025-08-21 00:08:36][350455581569649][15113 ms][ERROR] NO RESULT; code=124 out.len=0 err.len=11
[2025-08-21 00:08:38][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 00:08:38][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 00:08:38][][42 ms][DEBUG] ADB: done in 41 ms; out
[2025-08-21 00:08:38][][42 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 00:08:38][][104 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 00:08:38][][104 ms][DEBUG] END   check_boot_completed in 104 ms
[2025-08-21 00:08:38][350455581569649][104 ms][INFO] === Request start ===
[2025-08-21 00:08:38][350455581569649][104 ms][DEBUG] START check_frida
[2025-08-21 00:08:38][350455581569649][104 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:08:38][350455581569649][354 ms][DEBUG] SU: done in 250 ms; outroot         20950     1 2279504   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:08:38][350455581569649][354 ms][DEBUG] check_frida: running
[2025-08-21 00:08:38][350455581569649][354 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 00:08:38][350455581569649][354 ms][DEBUG] START check_internet
[2025-08-21 00:08:38][350455581569649][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 00:08:38][350455581569649][651 ms][DEBUG] SU: done in 297 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.311/205.311/205.311/0.000 ms\n
[2025-08-21 00:08:38][350455581569649][651 ms][DEBUG] check_internet: online
[2025-08-21 00:08:38][350455581569649][651 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 00:08:38][350455581569649][651 ms][DEBUG] START check_scloud
[2025-08-21 00:08:38][350455581569649][651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:08:39][350455581569649][886 ms][DEBUG] SU: done in 235 ms; outu0_a118      20979 10674 23627840 73964 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:08:39][350455581569649][887 ms][DEBUG] targetPkg: running
[2025-08-21 00:08:39][350455581569649][887 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 00:08:39][350455581569649][887 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:08:39][350455581569649][887 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDU1NTgxNTY5NjQ5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2ME5BWU5OIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzg1In0='" -e "main()" -q"
[2025-08-21 00:08:39][350455581569649][887 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:08:39][350455581569649][887 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDU1NTgxNTY5NjQ5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2ME5BWU5OIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzg1In0='" -e "main()" -q"
[2025-08-21 00:08:41][350455581569649][3494 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDU1NTgxNTY5NjQ5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2ME5BWU5OIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzg1In0="\r\n
[2025-08-21 00:08:44][350455581569649][5962 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3520cb1d-d330-4e40-a618-1956d3214dd5","id":"QR_3520cb1d-d330-4e40-a618-1956d3214dd5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:08:44][350455581569649][5962 ms][DEBUG] proc_open done in 5075 ms; code=0; res.len=3152
[2025-08-21 00:08:44][350455581569649][5962 ms][DEBUG] END   runCmdUntilRes#1 in 5075 ms
[2025-08-21 00:08:44][350455581569649][5962 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:22:21][359766796606112][1 ms][INFO] === Request start ===
[2025-08-21 00:22:21][359766796606112][2 ms][DEBUG] START check_frida
[2025-08-21 00:22:21][359766796606112][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:22:22][359766796606112][305 ms][DEBUG] SU: done in 303 ms; outroot         20950     1 2262072   4420 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:22:22][359766796606112][305 ms][DEBUG] check_frida: running
[2025-08-21 00:22:22][359766796606112][305 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 00:22:22][359766796606112][305 ms][DEBUG] START check_internet
[2025-08-21 00:22:22][359766796606112][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 00:22:22][359766796606112][851 ms][DEBUG] SU: done in 547 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.888/202.888/202.888/0.000 ms\n
[2025-08-21 00:22:22][359766796606112][851 ms][DEBUG] check_internet: online
[2025-08-21 00:22:22][359766796606112][851 ms][DEBUG] END   check_internet in 547 ms
[2025-08-21 00:22:22][359766796606112][851 ms][DEBUG] START check_scloud
[2025-08-21 00:22:22][359766796606112][851 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:22:22][359766796606112][1118 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23610388 73804 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:22:22][359766796606112][1118 ms][DEBUG] targetPkg: running
[2025-08-21 00:22:22][359766796606112][1118 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 00:22:22][359766796606112][1118 ms][DEBUG] rawBody.length=1161
[2025-08-21 00:22:22][359766796606112][1118 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NzY2Nzk2NjA2MTEyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dCMFoxNzhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzU3MCJ9'" -e "main()" -q"
[2025-08-21 00:22:22][359766796606112][1118 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:22:22][359766796606112][1118 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NzY2Nzk2NjA2MTEyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dCMFoxNzhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzU3MCJ9'" -e "main()" -q"
[2025-08-21 00:22:25][359766796606112][3772 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5NzY2Nzk2NjA2MTEyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dCMFoxNzhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzU3MCJ9"\r\n
[2025-08-21 00:22:27][359766796606112][5991 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1348ed8-f441-449f-966f-71c71d4a49b7","id":"QR_c1348ed8-f441-449f-966f-71c71d4a49b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:22:27][359766796606112][5991 ms][DEBUG] proc_open done in 4872 ms; code=0; res.len=3152
[2025-08-21 00:22:27][359766796606112][5991 ms][DEBUG] END   runCmdUntilRes#1 in 4873 ms
[2025-08-21 00:22:27][359766796606112][5991 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:23:07][350813120004728][0 ms][INFO] === Request start ===
[2025-08-21 00:23:07][350813120004728][1 ms][DEBUG] START check_frida
[2025-08-21 00:23:07][350813120004728][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:23:07][350813120004728][256 ms][DEBUG] SU: done in 255 ms; outroot         20950     1 2263084   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:23:07][350813120004728][256 ms][DEBUG] check_frida: running
[2025-08-21 00:23:07][350813120004728][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 00:23:07][350813120004728][256 ms][DEBUG] START check_scloud
[2025-08-21 00:23:07][350813120004728][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:23:08][350813120004728][568 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23627904 73100 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:23:08][350813120004728][568 ms][DEBUG] targetPkg: running
[2025-08-21 00:23:08][350813120004728][568 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 00:23:08][350813120004728][568 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:23:08][350813120004728][569 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODEzMTIwMDA0NzI4IiwibW9kZWwiOiJTTS1TOTAxVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cxMU5STjlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzY0In0='" -e "main()" -q"
[2025-08-21 00:23:08][350813120004728][569 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:23:08][350813120004728][569 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODEzMTIwMDA0NzI4IiwibW9kZWwiOiJTTS1TOTAxVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cxMU5STjlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzY0In0='" -e "main()" -q"
[2025-08-21 00:23:10][350813120004728][3192 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODEzMTIwMDA0NzI4IiwibW9kZWwiOiJTTS1TOTAxVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cxMU5STjlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzY0In0="\r\n
[2025-08-21 00:23:14][350813120004728][6520 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae67ea1d-efaf-4146-bfb7-5e593ad906f8","id":"QR_ae67ea1d-efaf-4146-bfb7-5e593ad906f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:23:14][350813120004728][6520 ms][DEBUG] proc_open done in 5951 ms; code=0; res.len=3152
[2025-08-21 00:23:14][350813120004728][6520 ms][DEBUG] END   runCmdUntilRes#1 in 5951 ms
[2025-08-21 00:23:14][350813120004728][6520 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:23:24][354451101947213][0 ms][INFO] === Request start ===
[2025-08-21 00:23:24][354451101947213][1 ms][DEBUG] START check_frida
[2025-08-21 00:23:24][354451101947213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:23:24][354451101947213][305 ms][DEBUG] SU: done in 304 ms; outroot         20950     1 2279504   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:23:24][354451101947213][305 ms][DEBUG] check_frida: running
[2025-08-21 00:23:24][354451101947213][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 00:23:24][354451101947213][305 ms][DEBUG] START check_scloud
[2025-08-21 00:23:24][354451101947213][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:23:24][354451101947213][602 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23627936 73648 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:23:24][354451101947213][602 ms][DEBUG] targetPkg: running
[2025-08-21 00:23:24][354451101947213][602 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 00:23:24][354451101947213][602 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:23:24][354451101947213][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDUxMTAxOTQ3MjEzIiwibW9kZWwiOiJTTS1HOTcwVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4yMlM4TDdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTYyIn0='" -e "main()" -q"
[2025-08-21 00:23:24][354451101947213][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:23:24][354451101947213][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDUxMTAxOTQ3MjEzIiwibW9kZWwiOiJTTS1HOTcwVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4yMlM4TDdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTYyIn0='" -e "main()" -q"
[2025-08-21 00:23:27][354451101947213][3210 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDUxMTAxOTQ3MjEzIiwibW9kZWwiOiJTTS1HOTcwVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4yMlM4TDdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTYyIn0="\r\n
[2025-08-21 00:23:31][354451101947213][7522 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85fe29aa-fe12-40ac-a1c3-3549dfbc5758","id":"QR_85fe29aa-fe12-40ac-a1c3-3549dfbc5758","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:23:31][354451101947213][7522 ms][DEBUG] proc_open done in 6920 ms; code=0; res.len=3152
[2025-08-21 00:23:31][354451101947213][7522 ms][DEBUG] END   runCmdUntilRes#1 in 6920 ms
[2025-08-21 00:23:31][354451101947213][7522 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:27:20][352047913396813][1 ms][INFO] === Request start ===
[2025-08-21 00:27:20][352047913396813][2 ms][DEBUG] START check_frida
[2025-08-21 00:27:20][352047913396813][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:27:21][352047913396813][311 ms][DEBUG] SU: done in 309 ms; outroot         20950     1 2263084   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:27:21][352047913396813][311 ms][DEBUG] check_frida: running
[2025-08-21 00:27:21][352047913396813][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 00:27:21][352047913396813][311 ms][DEBUG] START check_scloud
[2025-08-21 00:27:21][352047913396813][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:27:21][352047913396813][594 ms][DEBUG] SU: done in 282 ms; outu0_a118      20979 10674 23627968 73204 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:27:21][352047913396813][594 ms][DEBUG] targetPkg: running
[2025-08-21 00:27:21][352047913396813][594 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 00:27:21][352047913396813][594 ms][DEBUG] rawBody.length=1161
[2025-08-21 00:27:21][352047913396813][594 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDQ3OTEzMzk2ODEzIiwibW9kZWwiOiJTTS1BMTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMjZZQTdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDcyNCJ9'" -e "main()" -q"
[2025-08-21 00:27:21][352047913396813][594 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:27:21][352047913396813][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDQ3OTEzMzk2ODEzIiwibW9kZWwiOiJTTS1BMTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMjZZQTdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDcyNCJ9'" -e "main()" -q"
[2025-08-21 00:27:24][352047913396813][3217 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDQ3OTEzMzk2ODEzIiwibW9kZWwiOiJTTS1BMTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMjZZQTdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDcyNCJ9"\r\n
[2025-08-21 00:27:26][352047913396813][5591 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd4d13fe-f208-4360-ac59-4adddee7672d","id":"QR_dd4d13fe-f208-4360-ac59-4adddee7672d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:27:26][352047913396813][5591 ms][DEBUG] proc_open done in 4997 ms; code=0; res.len=3152
[2025-08-21 00:27:26][352047913396813][5591 ms][DEBUG] END   runCmdUntilRes#1 in 4997 ms
[2025-08-21 00:27:26][352047913396813][5591 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:29:07][357567911090923][0 ms][INFO] === Request start ===
[2025-08-21 00:29:07][357567911090923][0 ms][DEBUG] START check_frida
[2025-08-21 00:29:07][357567911090923][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:29:08][357567911090923][258 ms][DEBUG] SU: done in 258 ms; outroot         20950     1 2263084   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:29:08][357567911090923][258 ms][DEBUG] check_frida: running
[2025-08-21 00:29:08][357567911090923][258 ms][DEBUG] END   check_frida in 258 ms
[2025-08-21 00:29:08][357567911090923][258 ms][DEBUG] START check_scloud
[2025-08-21 00:29:08][357567911090923][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:29:08][357567911090923][555 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23628000 73980 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:29:08][357567911090923][555 ms][DEBUG] targetPkg: running
[2025-08-21 00:29:08][357567911090923][555 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 00:29:08][357567911090923][555 ms][DEBUG] rawBody.length=1161
[2025-08-21 00:29:08][357567911090923][555 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTY3OTExMDkwOTIzIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNFMyQVpCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM1NiJ9'" -e "main()" -q"
[2025-08-21 00:29:08][357567911090923][555 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:29:08][357567911090923][555 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTY3OTExMDkwOTIzIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNFMyQVpCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM1NiJ9'" -e "main()" -q"
[2025-08-21 00:29:11][357567911090923][3179 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTY3OTExMDkwOTIzIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNFMyQVpCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM1NiJ9"\r\n
[2025-08-21 00:29:12][357567911090923][5132 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ee16fd6-a95c-42bd-9b14-405149fe65a0","id":"QR_4ee16fd6-a95c-42bd-9b14-405149fe65a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:29:12][357567911090923][5132 ms][DEBUG] proc_open done in 4577 ms; code=0; res.len=3152
[2025-08-21 00:29:12][357567911090923][5133 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 00:29:12][357567911090923][5133 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:35:15][350702698531578][1 ms][INFO] === Request start ===
[2025-08-21 00:35:15][350702698531578][2 ms][DEBUG] START check_frida
[2025-08-21 00:35:15][350702698531578][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:35:15][350702698531578][280 ms][DEBUG] SU: done in 279 ms; outroot         20950     1 2262072   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:35:15][350702698531578][281 ms][DEBUG] check_frida: running
[2025-08-21 00:35:15][350702698531578][281 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 00:35:15][350702698531578][281 ms][DEBUG] START check_scloud
[2025-08-21 00:35:15][350702698531578][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:35:15][350702698531578][562 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23610548 72796 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:35:15][350702698531578][562 ms][DEBUG] targetPkg: running
[2025-08-21 00:35:15][350702698531578][562 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 00:35:15][350702698531578][562 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:35:15][350702698531578][562 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAyNjk4NTMxNTc4IiwibW9kZWwiOiJTTS1TOTExVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dBMFpZNkJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTc3In0='" -e "main()" -q"
[2025-08-21 00:35:15][350702698531578][562 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:35:15][350702698531578][562 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAyNjk4NTMxNTc4IiwibW9kZWwiOiJTTS1TOTExVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dBMFpZNkJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTc3In0='" -e "main()" -q"
[2025-08-21 00:35:18][350702698531578][3139 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzAyNjk4NTMxNTc4IiwibW9kZWwiOiJTTS1TOTExVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dBMFpZNkJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTc3In0="\r\n
[2025-08-21 00:35:23][350702698531578][7732 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb48ae12-96f5-4b59-b972-7ff3583b9377","id":"QR_eb48ae12-96f5-4b59-b972-7ff3583b9377","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:35:23][350702698531578][7732 ms][DEBUG] proc_open done in 7170 ms; code=0; res.len=3152
[2025-08-21 00:35:23][350702698531578][7732 ms][DEBUG] END   runCmdUntilRes#1 in 7170 ms
[2025-08-21 00:35:23][350702698531578][7732 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:47:20][358080740889845][1 ms][INFO] === Request start ===
[2025-08-21 00:47:20][358080740889845][2 ms][DEBUG] START check_frida
[2025-08-21 00:47:20][358080740889845][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:47:21][358080740889845][313 ms][DEBUG] SU: done in 311 ms; outroot         20950     1 2263084   4200 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:47:21][358080740889845][313 ms][DEBUG] check_frida: running
[2025-08-21 00:47:21][358080740889845][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 00:47:21][358080740889845][313 ms][DEBUG] START check_scloud
[2025-08-21 00:47:21][358080740889845][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:47:21][358080740889845][594 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23610580 71216 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:47:21][358080740889845][594 ms][DEBUG] targetPkg: running
[2025-08-21 00:47:21][358080740889845][595 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 00:47:21][358080740889845][595 ms][DEBUG] rawBody.length=1161
[2025-08-21 00:47:21][358080740889845][595 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MDgwNzQwODg5ODQ1IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDNRTU1aIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYSUQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE5OCJ9'" -e "main()" -q"
[2025-08-21 00:47:21][358080740889845][595 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:47:21][358080740889845][595 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MDgwNzQwODg5ODQ1IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDNRTU1aIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYSUQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE5OCJ9'" -e "main()" -q"
[2025-08-21 00:47:23][358080740889845][3250 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MDgwNzQwODg5ODQ1IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDNRTU1aIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYSUQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE5OCJ9"\r\n
[2025-08-21 00:47:26][358080740889845][5328 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58424148-c308-42d1-9850-c9c823edc0e8","id":"QR_58424148-c308-42d1-9850-c9c823edc0e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:47:26][358080740889845][5328 ms][DEBUG] proc_open done in 4733 ms; code=0; res.len=3152
[2025-08-21 00:47:26][358080740889845][5328 ms][DEBUG] END   runCmdUntilRes#1 in 4733 ms
[2025-08-21 00:47:26][358080740889845][5328 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:47:31][353809892785632][0 ms][INFO] === Request start ===
[2025-08-21 00:47:31][353809892785632][1 ms][DEBUG] START check_frida
[2025-08-21 00:47:31][353809892785632][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:47:31][353809892785632][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2279504   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:47:31][353809892785632][303 ms][DEBUG] check_frida: running
[2025-08-21 00:47:31][353809892785632][303 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 00:47:31][353809892785632][304 ms][DEBUG] START check_scloud
[2025-08-21 00:47:31][353809892785632][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:47:31][353809892785632][615 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23628096 70968 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:47:31][353809892785632][615 ms][DEBUG] targetPkg: running
[2025-08-21 00:47:31][353809892785632][616 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 00:47:31][353809892785632][616 ms][DEBUG] rawBody.length=1161
[2025-08-21 00:47:31][353809892785632][616 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzODA5ODkyNzg1NjMyIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFczMUg5MDZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0EiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk2MCJ9'" -e "main()" -q"
[2025-08-21 00:47:31][353809892785632][616 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:47:31][353809892785632][616 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzODA5ODkyNzg1NjMyIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFczMUg5MDZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0EiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk2MCJ9'" -e "main()" -q"
[2025-08-21 00:47:34][353809892785632][3255 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzODA5ODkyNzg1NjMyIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFczMUg5MDZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0EiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk2MCJ9"\r\n
[2025-08-21 00:47:36][353809892785632][4958 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c463ef23-abfe-466e-8d91-22a2c442b88a","id":"QR_c463ef23-abfe-466e-8d91-22a2c442b88a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:47:36][353809892785632][4958 ms][DEBUG] proc_open done in 4342 ms; code=0; res.len=3152
[2025-08-21 00:47:36][353809892785632][4958 ms][DEBUG] END   runCmdUntilRes#1 in 4342 ms
[2025-08-21 00:47:36][353809892785632][4958 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:48:13][355738551572445][0 ms][INFO] === Request start ===
[2025-08-21 00:48:13][355738551572445][1 ms][DEBUG] START check_frida
[2025-08-21 00:48:13][355738551572445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:48:14][355738551572445][252 ms][DEBUG] SU: done in 251 ms; outroot         20950     1 2263084   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:48:14][355738551572445][252 ms][DEBUG] check_frida: running
[2025-08-21 00:48:14][355738551572445][252 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 00:48:14][355738551572445][252 ms][DEBUG] START check_internet
[2025-08-21 00:48:14][355738551572445][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 00:48:14][355738551572445][657 ms][DEBUG] SU: done in 406 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.654/201.654/201.654/0.000 ms\n
[2025-08-21 00:48:14][355738551572445][658 ms][DEBUG] check_internet: online
[2025-08-21 00:48:14][355738551572445][658 ms][DEBUG] END   check_internet in 406 ms
[2025-08-21 00:48:14][355738551572445][658 ms][DEBUG] START check_scloud
[2025-08-21 00:48:14][355738551572445][658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:48:14][355738551572445][923 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23628128 71724 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:48:14][355738551572445][923 ms][DEBUG] targetPkg: running
[2025-08-21 00:48:14][355738551572445][923 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 00:48:14][355738551572445][923 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:48:14][355738551572445][923 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NzM4NTUxNTcyNDQ1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g4MDBZRDJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzMyIn0='" -e "main()" -q"
[2025-08-21 00:48:14][355738551572445][923 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:48:14][355738551572445][923 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NzM4NTUxNTcyNDQ1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g4MDBZRDJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzMyIn0='" -e "main()" -q"
[2025-08-21 00:48:17][355738551572445][3547 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NzM4NTUxNTcyNDQ1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g4MDBZRDJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzMyIn0="\r\n
[2025-08-21 00:48:21][355738551572445][7500 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4ae1225-7084-4787-a909-3b9d1182ffb9","id":"QR_f4ae1225-7084-4787-a909-3b9d1182ffb9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:48:21][355738551572445][7500 ms][DEBUG] proc_open done in 6576 ms; code=0; res.len=3152
[2025-08-21 00:48:21][355738551572445][7500 ms][DEBUG] END   runCmdUntilRes#1 in 6576 ms
[2025-08-21 00:48:21][355738551572445][7500 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:52:08][354563111880075][1 ms][INFO] === Request start ===
[2025-08-21 00:52:08][354563111880075][2 ms][DEBUG] START check_frida
[2025-08-21 00:52:08][354563111880075][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:52:08][354563111880075][299 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2278492   4420 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:52:08][354563111880075][299 ms][DEBUG] check_frida: running
[2025-08-21 00:52:08][354563111880075][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 00:52:08][354563111880075][299 ms][DEBUG] START check_internet
[2025-08-21 00:52:08][354563111880075][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 00:52:09][354563111880075][533 ms][DEBUG] SU: done in 234 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.192/136.192/136.192/0.000 ms\n
[2025-08-21 00:52:09][354563111880075][534 ms][DEBUG] check_internet: online
[2025-08-21 00:52:09][354563111880075][534 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 00:52:09][354563111880075][534 ms][DEBUG] START check_scloud
[2025-08-21 00:52:09][354563111880075][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:52:09][354563111880075][830 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23628160 72248 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:52:09][354563111880075][830 ms][DEBUG] targetPkg: running
[2025-08-21 00:52:09][354563111880075][830 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 00:52:09][354563111880075][830 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:52:09][354563111880075][830 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTYzMTExODgwMDc1IiwibW9kZWwiOiJTTS1BNTE1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5BMFFTTkROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjQzIn0='" -e "main()" -q"
[2025-08-21 00:52:09][354563111880075][831 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:52:09][354563111880075][831 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTYzMTExODgwMDc1IiwibW9kZWwiOiJTTS1BNTE1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5BMFFTTkROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjQzIn0='" -e "main()" -q"
[2025-08-21 00:52:12][354563111880075][3470 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTYzMTExODgwMDc1IiwibW9kZWwiOiJTTS1BNTE1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5BMFFTTkROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjQzIn0="\r\n
[2025-08-21 00:52:15][354563111880075][6969 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff555559-1825-4c6c-b3be-2825c86bc2b3","id":"QR_ff555559-1825-4c6c-b3be-2825c86bc2b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:52:15][354563111880075][6969 ms][DEBUG] proc_open done in 6138 ms; code=0; res.len=3152
[2025-08-21 00:52:15][354563111880075][6969 ms][DEBUG] END   runCmdUntilRes#1 in 6139 ms
[2025-08-21 00:52:15][354563111880075][6969 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:54:55][351759115825800][1 ms][INFO] === Request start ===
[2025-08-21 00:54:55][351759115825800][2 ms][DEBUG] START check_frida
[2025-08-21 00:54:55][351759115825800][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:54:55][351759115825800][311 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:54:55][351759115825800][311 ms][DEBUG] check_frida: running
[2025-08-21 00:54:55][351759115825800][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 00:54:55][351759115825800][311 ms][DEBUG] START check_internet
[2025-08-21 00:54:55][351759115825800][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 00:54:56][351759115825800][795 ms][DEBUG] SU: done in 484 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.922/201.922/201.922/0.000 ms\n
[2025-08-21 00:54:56][351759115825800][795 ms][DEBUG] check_internet: online
[2025-08-21 00:54:56][351759115825800][795 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 00:54:56][351759115825800][795 ms][DEBUG] START check_scloud
[2025-08-21 00:54:56][351759115825800][795 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:54:56][351759115825800][1030 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23628192 71756 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:54:56][351759115825800][1030 ms][DEBUG] targetPkg: running
[2025-08-21 00:54:56][351759115825800][1030 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 00:54:56][351759115825800][1030 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:54:56][351759115825800][1030 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzU5MTE1ODI1ODAwIiwibW9kZWwiOiJTTS1BMzA3RyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4xMEtLU0hZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjU1In0='" -e "main()" -q"
[2025-08-21 00:54:56][351759115825800][1030 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:54:56][351759115825800][1030 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzU5MTE1ODI1ODAwIiwibW9kZWwiOiJTTS1BMzA3RyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4xMEtLU0hZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjU1In0='" -e "main()" -q"
[2025-08-21 00:54:59][351759115825800][3685 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzU5MTE1ODI1ODAwIiwibW9kZWwiOiJTTS1BMzA3RyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4xMEtLU0hZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjU1In0="\r\n
[2025-08-21 00:55:02][351759115825800][7122 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6265ad6-de01-42bc-a974-375ff3b8a2b8","id":"QR_c6265ad6-de01-42bc-a974-375ff3b8a2b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:55:02][351759115825800][7122 ms][DEBUG] proc_open done in 6092 ms; code=0; res.len=3152
[2025-08-21 00:55:02][351759115825800][7122 ms][DEBUG] END   runCmdUntilRes#1 in 6092 ms
[2025-08-21 00:55:02][351759115825800][7122 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 00:56:08][355545134186316][0 ms][INFO] === Request start ===
[2025-08-21 00:56:08][355545134186316][1 ms][DEBUG] START check_frida
[2025-08-21 00:56:08][355545134186316][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 00:56:09][355545134186316][294 ms][DEBUG] SU: done in 293 ms; outroot         20950     1 2263084   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 00:56:09][355545134186316][295 ms][DEBUG] check_frida: running
[2025-08-21 00:56:09][355545134186316][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 00:56:09][355545134186316][295 ms][DEBUG] START check_internet
[2025-08-21 00:56:09][355545134186316][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 00:56:09][355545134186316][497 ms][DEBUG] SU: done in 203 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=113 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 113.089/113.089/113.089/0.000 ms\n
[2025-08-21 00:56:09][355545134186316][498 ms][DEBUG] check_internet: online
[2025-08-21 00:56:09][355545134186316][498 ms][DEBUG] END   check_internet in 203 ms
[2025-08-21 00:56:09][355545134186316][498 ms][DEBUG] START check_scloud
[2025-08-21 00:56:09][355545134186316][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 00:56:09][355545134186316][794 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23628224 71264 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 00:56:09][355545134186316][794 ms][DEBUG] targetPkg: running
[2025-08-21 00:56:09][355545134186316][795 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 00:56:09][355545134186316][795 ms][DEBUG] rawBody.length=1160
[2025-08-21 00:56:09][355545134186316][795 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NTQ1MTM0MTg2MzE2IiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gxMDhGRDlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDYxIn0='" -e "main()" -q"
[2025-08-21 00:56:09][355545134186316][795 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 00:56:09][355545134186316][795 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NTQ1MTM0MTg2MzE2IiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gxMDhGRDlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDYxIn0='" -e "main()" -q"
[2025-08-21 00:56:12][355545134186316][3419 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NTQ1MTM0MTg2MzE2IiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gxMDhGRDlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDYxIn0="\r\n
[2025-08-21 00:56:16][355545134186316][7262 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2b2dade-8c66-4d3b-a7cc-dd72a258514e","id":"QR_e2b2dade-8c66-4d3b-a7cc-dd72a258514e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 00:56:16][355545134186316][7262 ms][DEBUG] proc_open done in 6467 ms; code=0; res.len=3152
[2025-08-21 00:56:16][355545134186316][7262 ms][DEBUG] END   runCmdUntilRes#1 in 6467 ms
[2025-08-21 00:56:16][355545134186316][7262 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:12:22][358897900973139][1 ms][INFO] === Request start ===
[2025-08-21 01:12:22][358897900973139][1 ms][DEBUG] START check_frida
[2025-08-21 01:12:22][358897900973139][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:12:22][358897900973139][309 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2262072   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:12:22][358897900973139][309 ms][DEBUG] check_frida: running
[2025-08-21 01:12:22][358897900973139][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 01:12:22][358897900973139][309 ms][DEBUG] START check_internet
[2025-08-21 01:12:22][358897900973139][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 01:12:23][358897900973139][809 ms][DEBUG] SU: done in 500 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.598/201.598/201.598/0.000 ms\n
[2025-08-21 01:12:23][358897900973139][809 ms][DEBUG] check_internet: online
[2025-08-21 01:12:23][358897900973139][809 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 01:12:23][358897900973139][809 ms][DEBUG] START check_scloud
[2025-08-21 01:12:23][358897900973139][809 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:12:23][358897900973139][1106 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23610772 72136 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:12:23][358897900973139][1106 ms][DEBUG] targetPkg: running
[2025-08-21 01:12:23][358897900973139][1106 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 01:12:23][358897900973139][1106 ms][DEBUG] rawBody.length=1160
[2025-08-21 01:12:23][358897900973139][1106 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4ODk3OTAwOTczMTM5IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMU0xSjZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTAxIn0='" -e "main()" -q"
[2025-08-21 01:12:23][358897900973139][1106 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:12:23][358897900973139][1106 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4ODk3OTAwOTczMTM5IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMU0xSjZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTAxIn0='" -e "main()" -q"
[2025-08-21 01:12:26][358897900973139][3746 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4ODk3OTAwOTczMTM5IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMU0xSjZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTAxIn0="\r\n
[2025-08-21 01:12:29][358897900973139][6979 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ab2cd14-02fa-4dc2-b47c-2e3add6d68a3","id":"QR_7ab2cd14-02fa-4dc2-b47c-2e3add6d68a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:12:29][358897900973139][6980 ms][DEBUG] proc_open done in 5873 ms; code=0; res.len=3152
[2025-08-21 01:12:29][358897900973139][6980 ms][DEBUG] END   runCmdUntilRes#1 in 5873 ms
[2025-08-21 01:12:29][358897900973139][6980 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:15:09][359823614101667][1 ms][INFO] === Request start ===
[2025-08-21 01:15:09][359823614101667][1 ms][DEBUG] START check_frida
[2025-08-21 01:15:09][359823614101667][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:15:10][359823614101667][300 ms][DEBUG] SU: done in 298 ms; outroot         20950     1 2263084   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:15:10][359823614101667][300 ms][DEBUG] check_frida: running
[2025-08-21 01:15:10][359823614101667][300 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 01:15:10][359823614101667][300 ms][DEBUG] START check_scloud
[2025-08-21 01:15:10][359823614101667][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:15:10][359823614101667][596 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23628288 71892 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:15:10][359823614101667][597 ms][DEBUG] targetPkg: running
[2025-08-21 01:15:10][359823614101667][597 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 01:15:10][359823614101667][597 ms][DEBUG] rawBody.length=1160
[2025-08-21 01:15:10][359823614101667][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5ODIzNjE0MTAxNjY3IiwibW9kZWwiOiJTTS1HNzgxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05CMEJTQlJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjkxIn0='" -e "main()" -q"
[2025-08-21 01:15:10][359823614101667][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:15:10][359823614101667][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5ODIzNjE0MTAxNjY3IiwibW9kZWwiOiJTTS1HNzgxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05CMEJTQlJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjkxIn0='" -e "main()" -q"
[2025-08-21 01:15:13][359823614101667][3221 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5ODIzNjE0MTAxNjY3IiwibW9kZWwiOiJTTS1HNzgxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05CMEJTQlJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjkxIn0="\r\n
[2025-08-21 01:15:16][359823614101667][6408 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06ca3252-3fc9-4e4a-9819-ad79fa190608","id":"QR_06ca3252-3fc9-4e4a-9819-ad79fa190608","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:15:16][359823614101667][6408 ms][DEBUG] proc_open done in 5811 ms; code=0; res.len=3152
[2025-08-21 01:15:16][359823614101667][6408 ms][DEBUG] END   runCmdUntilRes#1 in 5811 ms
[2025-08-21 01:15:16][359823614101667][6408 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:27:22][350152501432517][1 ms][INFO] === Request start ===
[2025-08-21 01:27:22][350152501432517][1 ms][DEBUG] START check_frida
[2025-08-21 01:27:22][350152501432517][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:27:23][350152501432517][301 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2262072   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:27:23][350152501432517][301 ms][DEBUG] check_frida: running
[2025-08-21 01:27:23][350152501432517][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 01:27:23][350152501432517][301 ms][DEBUG] START check_scloud
[2025-08-21 01:27:23][350152501432517][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:27:23][350152501432517][584 ms][DEBUG] SU: done in 282 ms; outu0_a118      20979 10674 23610836 71548 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:27:23][350152501432517][584 ms][DEBUG] targetPkg: running
[2025-08-21 01:27:23][350152501432517][584 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 01:27:23][350152501432517][584 ms][DEBUG] rawBody.length=1161
[2025-08-21 01:27:23][350152501432517][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTUyNTAxNDMyNTE3IiwibW9kZWwiOiJTTS1BNTM2SiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RBMENZSzFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLREkiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk4NCJ9'" -e "main()" -q"
[2025-08-21 01:27:23][350152501432517][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:27:23][350152501432517][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTUyNTAxNDMyNTE3IiwibW9kZWwiOiJTTS1BNTM2SiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RBMENZSzFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLREkiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk4NCJ9'" -e "main()" -q"
[2025-08-21 01:27:26][350152501432517][3222 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTUyNTAxNDMyNTE3IiwibW9kZWwiOiJTTS1BNTM2SiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RBMENZSzFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLREkiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk4NCJ9"\r\n
[2025-08-21 01:27:28][350152501432517][5472 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_32f438d3-437a-49c5-ac99-807276f83027","id":"QR_32f438d3-437a-49c5-ac99-807276f83027","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:27:28][350152501432517][5472 ms][DEBUG] proc_open done in 4887 ms; code=0; res.len=3152
[2025-08-21 01:27:28][350152501432517][5472 ms][DEBUG] END   runCmdUntilRes#1 in 4887 ms
[2025-08-21 01:27:28][350152501432517][5472 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:30:10][350274352569179][1 ms][INFO] === Request start ===
[2025-08-21 01:30:10][350274352569179][2 ms][DEBUG] START check_frida
[2025-08-21 01:30:10][350274352569179][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:30:11][350274352569179][309 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2263084   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:30:11][350274352569179][309 ms][DEBUG] check_frida: running
[2025-08-21 01:30:11][350274352569179][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 01:30:11][350274352569179][309 ms][DEBUG] START check_internet
[2025-08-21 01:30:11][350274352569179][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 01:30:11][350274352569179][825 ms][DEBUG] SU: done in 515 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.168/202.168/202.168/0.000 ms\n
[2025-08-21 01:30:11][350274352569179][825 ms][DEBUG] check_internet: online
[2025-08-21 01:30:11][350274352569179][825 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 01:30:11][350274352569179][825 ms][DEBUG] START check_scloud
[2025-08-21 01:30:11][350274352569179][825 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:30:11][350274352569179][1090 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23628352 72192 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:30:11][350274352569179][1090 ms][DEBUG] targetPkg: running
[2025-08-21 01:30:11][350274352569179][1090 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 01:30:11][350274352569179][1090 ms][DEBUG] rawBody.length=1160
[2025-08-21 01:30:11][350274352569179][1090 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzUyNTY5MTc5IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI5MERLVFpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjU4In0='" -e "main()" -q"
[2025-08-21 01:30:11][350274352569179][1091 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:30:11][350274352569179][1091 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzUyNTY5MTc5IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI5MERLVFpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjU4In0='" -e "main()" -q"
[2025-08-21 01:30:14][350274352569179][3730 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjc0MzUyNTY5MTc5IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI5MERLVFpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjU4In0="\r\n
[2025-08-21 01:30:18][350274352569179][7464 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03beda76-3310-4a46-9057-2b2b5658a5fd","id":"QR_03beda76-3310-4a46-9057-2b2b5658a5fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:30:18][350274352569179][7464 ms][DEBUG] proc_open done in 6373 ms; code=0; res.len=3152
[2025-08-21 01:30:18][350274352569179][7464 ms][DEBUG] END   runCmdUntilRes#1 in 6374 ms
[2025-08-21 01:30:18][350274352569179][7464 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:38:45][358991132423326][1 ms][INFO] === Request start ===
[2025-08-21 01:38:45][358991132423326][2 ms][DEBUG] START check_frida
[2025-08-21 01:38:45][358991132423326][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:38:46][358991132423326][308 ms][DEBUG] SU: done in 306 ms; outroot         20950     1 2263084   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:38:46][358991132423326][308 ms][DEBUG] check_frida: running
[2025-08-21 01:38:46][358991132423326][308 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 01:38:46][358991132423326][308 ms][DEBUG] START check_internet
[2025-08-21 01:38:46][358991132423326][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 01:38:46][358991132423326][745 ms][DEBUG] SU: done in 437 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.767/201.767/201.767/0.000 ms\n
[2025-08-21 01:38:46][358991132423326][745 ms][DEBUG] check_internet: online
[2025-08-21 01:38:46][358991132423326][745 ms][DEBUG] END   check_internet in 437 ms
[2025-08-21 01:38:46][358991132423326][745 ms][DEBUG] START check_scloud
[2025-08-21 01:38:46][358991132423326][745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:38:46][358991132423326][964 ms][DEBUG] SU: done in 219 ms; outu0_a118      20979 10674 23610900 72052 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:38:46][358991132423326][964 ms][DEBUG] targetPkg: running
[2025-08-21 01:38:46][358991132423326][964 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 01:38:46][358991132423326][964 ms][DEBUG] rawBody.length=1160
[2025-08-21 01:38:46][358991132423326][964 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4OTkxMTMyNDIzMzI2IiwibW9kZWwiOiJTTS1TNzIxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kxNERESEhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzYxIn0='" -e "main()" -q"
[2025-08-21 01:38:46][358991132423326][964 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:38:46][358991132423326][964 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4OTkxMTMyNDIzMzI2IiwibW9kZWwiOiJTTS1TNzIxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kxNERESEhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzYxIn0='" -e "main()" -q"
[2025-08-21 01:38:49][358991132423326][3604 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4OTkxMTMyNDIzMzI2IiwibW9kZWwiOiJTTS1TNzIxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kxNERESEhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzYxIn0="\r\n
[2025-08-21 01:38:54][358991132423326][8821 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_925b5e6f-693a-440a-83c6-9a98096fc3a7","id":"QR_925b5e6f-693a-440a-83c6-9a98096fc3a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:38:54][358991132423326][8821 ms][DEBUG] proc_open done in 7857 ms; code=0; res.len=3152
[2025-08-21 01:38:54][358991132423326][8822 ms][DEBUG] END   runCmdUntilRes#1 in 7858 ms
[2025-08-21 01:38:54][358991132423326][8822 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:42:20][353220822786254][1 ms][INFO] === Request start ===
[2025-08-21 01:42:20][353220822786254][2 ms][DEBUG] START check_frida
[2025-08-21 01:42:20][353220822786254][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:42:20][353220822786254][292 ms][DEBUG] SU: done in 291 ms; outroot         20950     1 2263084   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:42:20][353220822786254][292 ms][DEBUG] check_frida: running
[2025-08-21 01:42:20][353220822786254][293 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 01:42:20][353220822786254][293 ms][DEBUG] START check_internet
[2025-08-21 01:42:20][353220822786254][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 01:42:20][353220822786254][605 ms][DEBUG] SU: done in 312 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.438/221.438/221.438/0.000 ms\n
[2025-08-21 01:42:20][353220822786254][605 ms][DEBUG] check_internet: online
[2025-08-21 01:42:20][353220822786254][605 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 01:42:20][353220822786254][605 ms][DEBUG] START check_scloud
[2025-08-21 01:42:20][353220822786254][605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:42:21][353220822786254][888 ms][DEBUG] SU: done in 283 ms; outu0_a118      20979 10674 23628416 71424 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:42:21][353220822786254][888 ms][DEBUG] targetPkg: running
[2025-08-21 01:42:21][353220822786254][888 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 01:42:21][353220822786254][888 ms][DEBUG] rawBody.length=1161
[2025-08-21 01:42:21][353220822786254][888 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjIwODIyNzg2MjU0IiwibW9kZWwiOiJTTS1BMjM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MFczTTZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0EiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE3NCJ9'" -e "main()" -q"
[2025-08-21 01:42:21][353220822786254][888 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:42:21][353220822786254][888 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjIwODIyNzg2MjU0IiwibW9kZWwiOiJTTS1BMjM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MFczTTZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0EiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE3NCJ9'" -e "main()" -q"
[2025-08-21 01:42:23][353220822786254][3510 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjIwODIyNzg2MjU0IiwibW9kZWwiOiJTTS1BMjM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MFczTTZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0EiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE3NCJ9"\r\n
[2025-08-21 01:42:25][353220822786254][5853 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dccb1471-d610-407d-8883-6dcf37a77acf","id":"QR_dccb1471-d610-407d-8883-6dcf37a77acf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:42:25][353220822786254][5854 ms][DEBUG] proc_open done in 4965 ms; code=0; res.len=3152
[2025-08-21 01:42:25][353220822786254][5854 ms][DEBUG] END   runCmdUntilRes#1 in 4966 ms
[2025-08-21 01:42:25][353220822786254][5854 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:42:31][352682503434861][0 ms][INFO] === Request start ===
[2025-08-21 01:42:31][352682503434861][1 ms][DEBUG] START check_frida
[2025-08-21 01:42:31][352682503434861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:42:31][352682503434861][266 ms][DEBUG] SU: done in 265 ms; outroot         20950     1 2279504   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:42:31][352682503434861][266 ms][DEBUG] check_frida: running
[2025-08-21 01:42:31][352682503434861][266 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 01:42:31][352682503434861][266 ms][DEBUG] START check_internet
[2025-08-21 01:42:31][352682503434861][266 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 01:42:32][352682503434861][563 ms][DEBUG] SU: done in 297 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=209 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 209.363/209.363/209.363/0.000 ms\n
[2025-08-21 01:42:32][352682503434861][563 ms][DEBUG] check_internet: online
[2025-08-21 01:42:32][352682503434861][563 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 01:42:32][352682503434861][563 ms][DEBUG] START check_scloud
[2025-08-21 01:42:32][352682503434861][563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:42:32][352682503434861][797 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23628448 72144 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:42:32][352682503434861][797 ms][DEBUG] targetPkg: running
[2025-08-21 01:42:32][352682503434861][797 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 01:42:32][352682503434861][797 ms][DEBUG] rawBody.length=1161
[2025-08-21 01:42:32][352682503434861][797 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjgyNTAzNDM0ODYxIiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE45MlE0M1lBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQU0iLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg0OCJ9'" -e "main()" -q"
[2025-08-21 01:42:32][352682503434861][798 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:42:32][352682503434861][798 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjgyNTAzNDM0ODYxIiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE45MlE0M1lBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQU0iLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg0OCJ9'" -e "main()" -q"
[2025-08-21 01:42:34][352682503434861][3343 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjgyNTAzNDM0ODYxIiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE45MlE0M1lBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQU0iLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg0OCJ9"\r\n
[2025-08-21 01:42:36][352682503434861][5093 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12b663b9-9647-42ae-9a73-98007e1bd707","id":"QR_12b663b9-9647-42ae-9a73-98007e1bd707","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:42:36][352682503434861][5093 ms][DEBUG] proc_open done in 4295 ms; code=0; res.len=3152
[2025-08-21 01:42:36][352682503434861][5093 ms][DEBUG] END   runCmdUntilRes#1 in 4296 ms
[2025-08-21 01:42:36][352682503434861][5093 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:43:06][357651719838210][0 ms][INFO] === Request start ===
[2025-08-21 01:43:06][357651719838210][1 ms][DEBUG] START check_frida
[2025-08-21 01:43:06][357651719838210][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:43:06][357651719838210][252 ms][DEBUG] SU: done in 250 ms; outroot         20950     1 2263084   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:43:06][357651719838210][252 ms][DEBUG] check_frida: running
[2025-08-21 01:43:06][357651719838210][252 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 01:43:06][357651719838210][252 ms][DEBUG] START check_scloud
[2025-08-21 01:43:06][357651719838210][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:43:07][357651719838210][486 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23628480 71644 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:43:07][357651719838210][486 ms][DEBUG] targetPkg: running
[2025-08-21 01:43:07][357651719838210][486 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 01:43:07][357651719838210][486 ms][DEBUG] rawBody.length=1160
[2025-08-21 01:43:07][357651719838210][486 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE5ODM4MjEwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRBMDVQM1hEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzUzIn0='" -e "main()" -q"
[2025-08-21 01:43:07][357651719838210][486 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:43:07][357651719838210][487 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE5ODM4MjEwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRBMDVQM1hEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzUzIn0='" -e "main()" -q"
[2025-08-21 01:43:09][357651719838210][3110 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzE5ODM4MjEwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRBMDVQM1hEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzUzIn0="\r\n
[2025-08-21 01:43:13][357651719838210][6500 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e203e95-983a-40a8-809f-16e7be87d561","id":"QR_2e203e95-983a-40a8-809f-16e7be87d561","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:43:13][357651719838210][6500 ms][DEBUG] proc_open done in 6014 ms; code=0; res.len=3152
[2025-08-21 01:43:13][357651719838210][6500 ms][DEBUG] END   runCmdUntilRes#1 in 6014 ms
[2025-08-21 01:43:13][357651719838210][6500 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:51:26][351199559827295][1 ms][INFO] === Request start ===
[2025-08-21 01:51:26][351199559827295][1 ms][DEBUG] START check_frida
[2025-08-21 01:51:26][351199559827295][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:51:26][351199559827295][261 ms][DEBUG] SU: done in 259 ms; outroot         20950     1 2262072   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:51:26][351199559827295][261 ms][DEBUG] check_frida: running
[2025-08-21 01:51:26][351199559827295][261 ms][DEBUG] END   check_frida in 259 ms
[2025-08-21 01:51:26][351199559827295][261 ms][DEBUG] START check_scloud
[2025-08-21 01:51:26][351199559827295][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:51:26][351199559827295][542 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23611028 71156 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:51:26][351199559827295][542 ms][DEBUG] targetPkg: running
[2025-08-21 01:51:26][351199559827295][542 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 01:51:26][351199559827295][542 ms][DEBUG] rawBody.length=1161
[2025-08-21 01:51:26][351199559827295][542 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTk5NTU5ODI3Mjk1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhBMDFRNjVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU1NCJ9'" -e "main()" -q"
[2025-08-21 01:51:26][351199559827295][542 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:51:26][351199559827295][542 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTk5NTU5ODI3Mjk1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhBMDFRNjVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU1NCJ9'" -e "main()" -q"
[2025-08-21 01:51:29][351199559827295][3166 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTk5NTU5ODI3Mjk1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhBMDFRNjVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU1NCJ9"\r\n
[2025-08-21 01:51:31][351199559827295][5306 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5aa1e83e-3d5e-4c82-a488-c6d124698989","id":"QR_5aa1e83e-3d5e-4c82-a488-c6d124698989","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:51:31][351199559827295][5307 ms][DEBUG] proc_open done in 4765 ms; code=0; res.len=3152
[2025-08-21 01:51:31][351199559827295][5307 ms][DEBUG] END   runCmdUntilRes#1 in 4765 ms
[2025-08-21 01:51:31][351199559827295][5307 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:59:07][353409201800071][1 ms][INFO] === Request start ===
[2025-08-21 01:59:07][353409201800071][2 ms][DEBUG] START check_frida
[2025-08-21 01:59:07][353409201800071][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:59:08][353409201800071][321 ms][DEBUG] SU: done in 319 ms; outroot         20950     1 2263084   4312 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:59:08][353409201800071][321 ms][DEBUG] check_frida: running
[2025-08-21 01:59:08][353409201800071][321 ms][DEBUG] END   check_frida in 319 ms
[2025-08-21 01:59:08][353409201800071][321 ms][DEBUG] START check_scloud
[2025-08-21 01:59:08][353409201800071][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:59:08][353409201800071][602 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23611060 72432 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:59:08][353409201800071][602 ms][DEBUG] targetPkg: running
[2025-08-21 01:59:08][353409201800071][602 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 01:59:08][353409201800071][602 ms][DEBUG] rawBody.length=1160
[2025-08-21 01:59:08][353409201800071][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDA5MjAxODAwMDcxIiwibW9kZWwiOiJTTS1TOTAxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q2MUwwWUNaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzAwIn0='" -e "main()" -q"
[2025-08-21 01:59:08][353409201800071][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:59:08][353409201800071][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDA5MjAxODAwMDcxIiwibW9kZWwiOiJTTS1TOTAxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q2MUwwWUNaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzAwIn0='" -e "main()" -q"
[2025-08-21 01:59:11][353409201800071][3257 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDA5MjAxODAwMDcxIiwibW9kZWwiOiJTTS1TOTAxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q2MUwwWUNaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzAwIn0="\r\n
[2025-08-21 01:59:14][353409201800071][6632 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab38333f-63a4-4bd6-a44c-a6455277ad87","id":"QR_ab38333f-63a4-4bd6-a44c-a6455277ad87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:59:14][353409201800071][6632 ms][DEBUG] proc_open done in 6030 ms; code=0; res.len=3152
[2025-08-21 01:59:14][353409201800071][6632 ms][DEBUG] END   runCmdUntilRes#1 in 6030 ms
[2025-08-21 01:59:14][353409201800071][6632 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:59:24][354285671317476][0 ms][INFO] === Request start ===
[2025-08-21 01:59:24][354285671317476][1 ms][DEBUG] START check_frida
[2025-08-21 01:59:24][354285671317476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:59:24][354285671317476][321 ms][DEBUG] SU: done in 320 ms; outroot         20950     1 2279504   4360 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:59:24][354285671317476][321 ms][DEBUG] check_frida: running
[2025-08-21 01:59:24][354285671317476][321 ms][DEBUG] END   check_frida in 320 ms
[2025-08-21 01:59:24][354285671317476][321 ms][DEBUG] START check_scloud
[2025-08-21 01:59:24][354285671317476][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:59:24][354285671317476][618 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23628576 72136 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:59:24][354285671317476][618 ms][DEBUG] targetPkg: running
[2025-08-21 01:59:24][354285671317476][618 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 01:59:24][354285671317476][618 ms][DEBUG] rawBody.length=1160
[2025-08-21 01:59:24][354285671317476][619 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0Mjg1NjcxMzE3NDc2IiwibW9kZWwiOiJTTS1TOTAxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMEhLQTNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTgwIn0='" -e "main()" -q"
[2025-08-21 01:59:24][354285671317476][619 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:59:24][354285671317476][619 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0Mjg1NjcxMzE3NDc2IiwibW9kZWwiOiJTTS1TOTAxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMEhLQTNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTgwIn0='" -e "main()" -q"
[2025-08-21 01:59:27][354285671317476][3258 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0Mjg1NjcxMzE3NDc2IiwibW9kZWwiOiJTTS1TOTAxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMEhLQTNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTgwIn0="\r\n
[2025-08-21 01:59:33][353154432926853][1 ms][INFO] === Request start ===
[2025-08-21 01:59:35][354285671317476][11334 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_193539e5-b359-458c-8b02-2972a42e81f1","id":"QR_193539e5-b359-458c-8b02-2972a42e81f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:59:35][354285671317476][11335 ms][DEBUG] proc_open done in 10716 ms; code=0; res.len=3152
[2025-08-21 01:59:35][354285671317476][11335 ms][DEBUG] END   runCmdUntilRes#1 in 10716 ms
[2025-08-21 01:59:35][354285671317476][11335 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 01:59:35][353154432926853][2017 ms][DEBUG] START check_frida
[2025-08-21 01:59:35][353154432926853][2017 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 01:59:36][353154432926853][2315 ms][DEBUG] SU: done in 298 ms; outroot         20950     1 2279504   4404 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 01:59:36][353154432926853][2315 ms][DEBUG] check_frida: running
[2025-08-21 01:59:36][353154432926853][2315 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 01:59:36][353154432926853][2315 ms][DEBUG] START check_scloud
[2025-08-21 01:59:36][353154432926853][2315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 01:59:36][353154432926853][2611 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23628608 72716 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 01:59:36][353154432926853][2611 ms][DEBUG] targetPkg: running
[2025-08-21 01:59:36][353154432926853][2611 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 01:59:36][353154432926853][2611 ms][DEBUG] rawBody.length=1161
[2025-08-21 01:59:36][353154432926853][2611 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTU0NDMyOTI2ODUzIiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMVo1Rk5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1MiJ9'" -e "main()" -q"
[2025-08-21 01:59:36][353154432926853][2612 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 01:59:36][353154432926853][2612 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTU0NDMyOTI2ODUzIiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMVo1Rk5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1MiJ9'" -e "main()" -q"
[2025-08-21 01:59:38][353154432926853][5235 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTU0NDMyOTI2ODUzIiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMVo1Rk5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1MiJ9"\r\n
[2025-08-21 01:59:41][353154432926853][7407 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f783fdb7-9b6c-4f3c-9f8e-b176221b840c","id":"QR_f783fdb7-9b6c-4f3c-9f8e-b176221b840c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 01:59:41][353154432926853][7407 ms][DEBUG] proc_open done in 4795 ms; code=0; res.len=3152
[2025-08-21 01:59:41][353154432926853][7407 ms][DEBUG] END   runCmdUntilRes#1 in 4795 ms
[2025-08-21 01:59:41][353154432926853][7407 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:13:34][356223182673697][1 ms][INFO] === Request start ===
[2025-08-21 02:13:34][356223182673697][2 ms][DEBUG] START check_frida
[2025-08-21 02:13:34][356223182673697][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:13:35][356223182673697][308 ms][DEBUG] SU: done in 306 ms; outroot         20950     1 2262072   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:13:35][356223182673697][308 ms][DEBUG] check_frida: running
[2025-08-21 02:13:35][356223182673697][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 02:13:35][356223182673697][308 ms][DEBUG] START check_scloud
[2025-08-21 02:13:35][356223182673697][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:13:35][356223182673697][589 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23611156 72324 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:13:35][356223182673697][589 ms][DEBUG] targetPkg: running
[2025-08-21 02:13:35][356223182673697][589 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 02:13:35][356223182673697][589 ms][DEBUG] rawBody.length=1160
[2025-08-21 02:13:35][356223182673697][589 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MjIzMTgyNjczNjk3IiwibW9kZWwiOiJTTS1GOTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMDY0UVlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTUzIn0='" -e "main()" -q"
[2025-08-21 02:13:35][356223182673697][589 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:13:35][356223182673697][589 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MjIzMTgyNjczNjk3IiwibW9kZWwiOiJTTS1GOTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMDY0UVlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTUzIn0='" -e "main()" -q"
[2025-08-21 02:13:38][356223182673697][3245 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MjIzMTgyNjczNjk3IiwibW9kZWwiOiJTTS1GOTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMDY0UVlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTUzIn0="\r\n
[2025-08-21 02:13:42][356223182673697][7837 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e1f62ec-3c50-484c-b612-d83cbfa61f3b","id":"QR_8e1f62ec-3c50-484c-b612-d83cbfa61f3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:13:42][356223182673697][7838 ms][DEBUG] proc_open done in 7248 ms; code=0; res.len=3152
[2025-08-21 02:13:42][356223182673697][7838 ms][DEBUG] END   runCmdUntilRes#1 in 7248 ms
[2025-08-21 02:13:42][356223182673697][7838 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:17:20][355341290127678][1 ms][INFO] === Request start ===
[2025-08-21 02:17:20][355341290127678][2 ms][DEBUG] START check_frida
[2025-08-21 02:17:20][355341290127678][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:17:20][355341290127678][256 ms][DEBUG] SU: done in 255 ms; outroot         20950     1 2263084   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:17:20][355341290127678][257 ms][DEBUG] check_frida: running
[2025-08-21 02:17:20][355341290127678][257 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 02:17:20][355341290127678][257 ms][DEBUG] START check_scloud
[2025-08-21 02:17:20][355341290127678][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:17:20][355341290127678][538 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23628672 72176 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:17:20][355341290127678][538 ms][DEBUG] targetPkg: running
[2025-08-21 02:17:20][355341290127678][538 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 02:17:20][355341290127678][538 ms][DEBUG] rawBody.length=1161
[2025-08-21 02:17:20][355341290127678][538 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQxMjkwMTI3Njc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMFgzRUJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg5NSJ9'" -e "main()" -q"
[2025-08-21 02:17:20][355341290127678][538 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:17:20][355341290127678][538 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQxMjkwMTI3Njc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMFgzRUJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg5NSJ9'" -e "main()" -q"
[2025-08-21 02:17:23][355341290127678][3084 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MzQxMjkwMTI3Njc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMFgzRUJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg5NSJ9"\r\n
[2025-08-21 02:17:25][355341290127678][5427 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f3facd2-d4be-4188-913b-d09421388492","id":"QR_5f3facd2-d4be-4188-913b-d09421388492","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:17:25][355341290127678][5427 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 02:17:25][355341290127678][5427 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 02:17:25][355341290127678][5427 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:17:32][351137777170809][0 ms][INFO] === Request start ===
[2025-08-21 02:17:32][351137777170809][1 ms][DEBUG] START check_frida
[2025-08-21 02:17:32][351137777170809][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:17:33][351137777170809][280 ms][DEBUG] SU: done in 279 ms; outroot         20950     1 2279504   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:17:33][351137777170809][280 ms][DEBUG] check_frida: running
[2025-08-21 02:17:33][351137777170809][280 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 02:17:33][351137777170809][280 ms][DEBUG] START check_scloud
[2025-08-21 02:17:33][351137777170809][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:17:33][351137777170809][561 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23628704 72772 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:17:33][351137777170809][562 ms][DEBUG] targetPkg: running
[2025-08-21 02:17:33][351137777170809][562 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 02:17:33][351137777170809][562 ms][DEBUG] rawBody.length=1161
[2025-08-21 02:17:33][351137777170809][562 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTM3Nzc3MTcwODA5IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMkFLQUZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTU1MyJ9'" -e "main()" -q"
[2025-08-21 02:17:33][351137777170809][562 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:17:33][351137777170809][562 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTM3Nzc3MTcwODA5IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMkFLQUZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTU1MyJ9'" -e "main()" -q"
[2025-08-21 02:17:36][351137777170809][3092 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTM3Nzc3MTcwODA5IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMkFLQUZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTU1MyJ9"\r\n
[2025-08-21 02:17:37][351137777170809][4982 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c691066-3e7a-4ce3-b9f0-65d176f49508","id":"QR_1c691066-3e7a-4ce3-b9f0-65d176f49508","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:17:37][351137777170809][4983 ms][DEBUG] proc_open done in 4421 ms; code=0; res.len=3152
[2025-08-21 02:17:37][351137777170809][4983 ms][DEBUG] END   runCmdUntilRes#1 in 4421 ms
[2025-08-21 02:17:37][351137777170809][4983 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:26:09][351771111558210][1 ms][INFO] === Request start ===
[2025-08-21 02:26:09][351771111558210][1 ms][DEBUG] START check_frida
[2025-08-21 02:26:09][351771111558210][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:26:09][351771111558210][276 ms][DEBUG] SU: done in 275 ms; outroot         20950     1 2262072   4416 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:26:09][351771111558210][276 ms][DEBUG] check_frida: running
[2025-08-21 02:26:09][351771111558210][276 ms][DEBUG] END   check_frida in 275 ms
[2025-08-21 02:26:09][351771111558210][277 ms][DEBUG] START check_internet
[2025-08-21 02:26:09][351771111558210][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 02:26:10][351771111558210][776 ms][DEBUG] SU: done in 500 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.874/202.874/202.874/0.000 ms\n
[2025-08-21 02:26:10][351771111558210][776 ms][DEBUG] check_internet: online
[2025-08-21 02:26:10][351771111558210][776 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 02:26:10][351771111558210][776 ms][DEBUG] START check_scloud
[2025-08-21 02:26:10][351771111558210][776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:26:10][351771111558210][1026 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23611252 72300 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:26:10][351771111558210][1026 ms][DEBUG] targetPkg: running
[2025-08-21 02:26:10][351771111558210][1026 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 02:26:10][351771111558210][1026 ms][DEBUG] rawBody.length=1161
[2025-08-21 02:26:10][351771111558210][1026 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxMTExNTU4MjEwIiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE1BMTFZSjFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0ciLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTkyMyJ9'" -e "main()" -q"
[2025-08-21 02:26:10][351771111558210][1026 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:26:10][351771111558210][1026 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxMTExNTU4MjEwIiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE1BMTFZSjFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0ciLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTkyMyJ9'" -e "main()" -q"
[2025-08-21 02:26:13][351771111558210][3588 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzcxMTExNTU4MjEwIiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE1BMTFZSjFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0ciLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTkyMyJ9"\r\n
[2025-08-21 02:26:15][351771111558210][5853 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c51a2e9c-57be-4ab1-9f25-4825a3281d7c","id":"QR_c51a2e9c-57be-4ab1-9f25-4825a3281d7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:26:15][351771111558210][5853 ms][DEBUG] proc_open done in 4827 ms; code=0; res.len=3152
[2025-08-21 02:26:15][351771111558210][5853 ms][DEBUG] END   runCmdUntilRes#1 in 4827 ms
[2025-08-21 02:26:15][351771111558210][5853 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:45:08][350256190361158][1 ms][INFO] === Request start ===
[2025-08-21 02:45:08][350256190361158][2 ms][DEBUG] START check_frida
[2025-08-21 02:45:08][350256190361158][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:45:08][350256190361158][297 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2262072   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:45:08][350256190361158][297 ms][DEBUG] check_frida: running
[2025-08-21 02:45:08][350256190361158][297 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 02:45:08][350256190361158][297 ms][DEBUG] START check_scloud
[2025-08-21 02:45:08][350256190361158][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:45:09][350256190361158][578 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23611284 72468 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:45:09][350256190361158][578 ms][DEBUG] targetPkg: running
[2025-08-21 02:45:09][350256190361158][578 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 02:45:09][350256190361158][578 ms][DEBUG] rawBody.length=1161
[2025-08-21 02:45:09][350256190361158][578 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjU2MTkwMzYxMTU4IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNTQ3QkRBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk2MSJ9'" -e "main()" -q"
[2025-08-21 02:45:09][350256190361158][578 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:45:09][350256190361158][579 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjU2MTkwMzYxMTU4IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNTQ3QkRBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk2MSJ9'" -e "main()" -q"
[2025-08-21 02:45:11][350256190361158][3155 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjU2MTkwMzYxMTU4IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNTQ3QkRBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk2MSJ9"\r\n
[2025-08-21 02:45:13][350256190361158][5405 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_870697e4-1697-44db-aba7-72f0f49eb721","id":"QR_870697e4-1697-44db-aba7-72f0f49eb721","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:45:13][350256190361158][5405 ms][DEBUG] proc_open done in 4827 ms; code=0; res.len=3152
[2025-08-21 02:45:13][350256190361158][5405 ms][DEBUG] END   runCmdUntilRes#1 in 4827 ms
[2025-08-21 02:45:13][350256190361158][5405 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:50:07][350490940481681][1 ms][INFO] === Request start ===
[2025-08-21 02:50:07][350490940481681][2 ms][DEBUG] START check_frida
[2025-08-21 02:50:07][350490940481681][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:50:08][350490940481681][314 ms][DEBUG] SU: done in 313 ms; outroot         20950     1 2263084   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:50:08][350490940481681][314 ms][DEBUG] check_frida: running
[2025-08-21 02:50:08][350490940481681][315 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 02:50:08][350490940481681][315 ms][DEBUG] START check_internet
[2025-08-21 02:50:08][350490940481681][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 02:50:08][350490940481681][814 ms][DEBUG] SU: done in 499 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.040/203.040/203.040/0.000 ms\n
[2025-08-21 02:50:08][350490940481681][814 ms][DEBUG] check_internet: online
[2025-08-21 02:50:08][350490940481681][814 ms][DEBUG] END   check_internet in 499 ms
[2025-08-21 02:50:08][350490940481681][814 ms][DEBUG] START check_scloud
[2025-08-21 02:50:08][350490940481681][814 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:50:08][350490940481681][1033 ms][DEBUG] SU: done in 219 ms; outu0_a118      20979 10674 23628800 72308 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:50:08][350490940481681][1033 ms][DEBUG] targetPkg: running
[2025-08-21 02:50:08][350490940481681][1033 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 02:50:08][350490940481681][1033 ms][DEBUG] rawBody.length=1161
[2025-08-21 02:50:08][350490940481681][1033 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDkwOTQwNDgxNjgxIiwibW9kZWwiOiJTTS1BMTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1g1MDBCNUtKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzExNCJ9'" -e "main()" -q"
[2025-08-21 02:50:08][350490940481681][1033 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:50:08][350490940481681][1033 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDkwOTQwNDgxNjgxIiwibW9kZWwiOiJTTS1BMTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1g1MDBCNUtKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzExNCJ9'" -e "main()" -q"
[2025-08-21 02:50:11][350490940481681][3657 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDkwOTQwNDgxNjgxIiwibW9kZWwiOiJTTS1BMTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1g1MDBCNUtKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzExNCJ9"\r\n
[2025-08-21 02:50:13][350490940481681][5953 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9348919-9b4b-4bff-971d-3d6ad1485071","id":"QR_e9348919-9b4b-4bff-971d-3d6ad1485071","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:50:13][350490940481681][5954 ms][DEBUG] proc_open done in 4921 ms; code=0; res.len=3152
[2025-08-21 02:50:13][350490940481681][5954 ms][DEBUG] END   runCmdUntilRes#1 in 4921 ms
[2025-08-21 02:50:13][350490940481681][5954 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:51:35][354255814060911][0 ms][INFO] === Request start ===
[2025-08-21 02:51:35][354255814060911][1 ms][DEBUG] START check_frida
[2025-08-21 02:51:35][354255814060911][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:51:36][354255814060911][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:51:36][354255814060911][309 ms][DEBUG] check_frida: running
[2025-08-21 02:51:36][354255814060911][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 02:51:36][354255814060911][309 ms][DEBUG] START check_scloud
[2025-08-21 02:51:36][354255814060911][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:51:36][354255814060911][606 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23628832 72908 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:51:36][354255814060911][606 ms][DEBUG] targetPkg: running
[2025-08-21 02:51:36][354255814060911][606 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 02:51:36][354255814060911][606 ms][DEBUG] rawBody.length=1161
[2025-08-21 02:51:36][354255814060911][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODE0MDYwOTExIiwibW9kZWwiOiJTTS1OOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QxMko1WEZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3NSJ9'" -e "main()" -q"
[2025-08-21 02:51:36][354255814060911][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:51:36][354255814060911][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODE0MDYwOTExIiwibW9kZWwiOiJTTS1OOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QxMko1WEZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3NSJ9'" -e "main()" -q"
[2025-08-21 02:51:39][354255814060911][3230 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjU1ODE0MDYwOTExIiwibW9kZWwiOiJTTS1OOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QxMko1WEZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3NSJ9"\r\n
[2025-08-21 02:51:41][354255814060911][5339 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c69acaee-493f-4fc8-9817-529865b3d5fa","id":"QR_c69acaee-493f-4fc8-9817-529865b3d5fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:51:41][354255814060911][5339 ms][DEBUG] proc_open done in 4733 ms; code=0; res.len=3152
[2025-08-21 02:51:41][354255814060911][5339 ms][DEBUG] END   runCmdUntilRes#1 in 4733 ms
[2025-08-21 02:51:41][354255814060911][5339 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:52:18][357733315008776][1 ms][INFO] === Request start ===
[2025-08-21 02:52:18][357733315008776][2 ms][DEBUG] START check_frida
[2025-08-21 02:52:18][357733315008776][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:52:18][357733315008776][305 ms][DEBUG] SU: done in 304 ms; outroot         20950     1 2278492   4416 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:52:18][357733315008776][306 ms][DEBUG] check_frida: running
[2025-08-21 02:52:18][357733315008776][306 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 02:52:18][357733315008776][306 ms][DEBUG] START check_internet
[2025-08-21 02:52:18][357733315008776][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 02:52:18][357733315008776][602 ms][DEBUG] SU: done in 296 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.283/190.283/190.283/0.000 ms\n
[2025-08-21 02:52:18][357733315008776][602 ms][DEBUG] check_internet: online
[2025-08-21 02:52:18][357733315008776][602 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 02:52:18][357733315008776][602 ms][DEBUG] START check_scloud
[2025-08-21 02:52:18][357733315008776][602 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:52:18][357733315008776][883 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23628864 72560 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:52:18][357733315008776][884 ms][DEBUG] targetPkg: running
[2025-08-21 02:52:18][357733315008776][884 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 02:52:18][357733315008776][884 ms][DEBUG] rawBody.length=1161
[2025-08-21 02:52:18][357733315008776][884 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NzMzMzE1MDA4Nzc2IiwibW9kZWwiOiJTTS1BNTQ2MCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MU1EMjNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCUkkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIyMiJ9'" -e "main()" -q"
[2025-08-21 02:52:18][357733315008776][884 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:52:18][357733315008776][884 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NzMzMzE1MDA4Nzc2IiwibW9kZWwiOiJTTS1BNTQ2MCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MU1EMjNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCUkkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIyMiJ9'" -e "main()" -q"
[2025-08-21 02:52:21][357733315008776][3539 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NzMzMzE1MDA4Nzc2IiwibW9kZWwiOiJTTS1BNTQ2MCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MU1EMjNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCUkkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIyMiJ9"\r\n
[2025-08-21 02:52:23][357733315008776][5335 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07c97584-8de7-468a-bece-f33fbcb3cd06","id":"QR_07c97584-8de7-468a-bece-f33fbcb3cd06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:52:23][357733315008776][5335 ms][DEBUG] proc_open done in 4451 ms; code=0; res.len=3152
[2025-08-21 02:52:23][357733315008776][5335 ms][DEBUG] END   runCmdUntilRes#1 in 4452 ms
[2025-08-21 02:52:23][357733315008776][5335 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:53:04][354048746823989][0 ms][INFO] === Request start ===
[2025-08-21 02:53:04][354048746823989][1 ms][DEBUG] START check_frida
[2025-08-21 02:53:04][354048746823989][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:53:05][354048746823989][313 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2263084   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:53:05][354048746823989][314 ms][DEBUG] check_frida: running
[2025-08-21 02:53:05][354048746823989][314 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 02:53:05][354048746823989][314 ms][DEBUG] START check_scloud
[2025-08-21 02:53:05][354048746823989][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:53:05][354048746823989][611 ms][DEBUG] SU: done in 298 ms; outu0_a118      20979 10674 23628896 71852 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:53:05][354048746823989][611 ms][DEBUG] targetPkg: running
[2025-08-21 02:53:05][354048746823989][612 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 02:53:05][354048746823989][612 ms][DEBUG] rawBody.length=1161
[2025-08-21 02:53:05][354048746823989][612 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDQ4NzQ2ODIzOTg5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMjlZN0ZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgwNSJ9'" -e "main()" -q"
[2025-08-21 02:53:05][354048746823989][612 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:53:05][354048746823989][612 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDQ4NzQ2ODIzOTg5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMjlZN0ZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgwNSJ9'" -e "main()" -q"
[2025-08-21 02:53:08][354048746823989][3250 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDQ4NzQ2ODIzOTg5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMjlZN0ZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgwNSJ9"\r\n
[2025-08-21 02:53:10][354048746823989][5500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4dec222a-0477-4547-9dc0-34a6b138f21a","id":"QR_4dec222a-0477-4547-9dc0-34a6b138f21a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:53:10][354048746823989][5500 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 02:53:10][354048746823989][5501 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 02:53:10][354048746823989][5501 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:53:37][356544398773595][0 ms][INFO] === Request start ===
[2025-08-21 02:53:37][356544398773595][1 ms][DEBUG] START check_frida
[2025-08-21 02:53:37][356544398773595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:53:38][356544398773595][306 ms][DEBUG] SU: done in 305 ms; outroot         20950     1 2263084   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:53:38][356544398773595][306 ms][DEBUG] check_frida: running
[2025-08-21 02:53:38][356544398773595][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 02:53:38][356544398773595][306 ms][DEBUG] START check_scloud
[2025-08-21 02:53:38][356544398773595][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:53:38][356544398773595][571 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23628928 72380 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:53:38][356544398773595][571 ms][DEBUG] targetPkg: running
[2025-08-21 02:53:38][356544398773595][571 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 02:53:38][356544398773595][571 ms][DEBUG] rawBody.length=1160
[2025-08-21 02:53:38][356544398773595][572 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0Mzk4NzczNTk1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1dDMDZHVEFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTg1In0='" -e "main()" -q"
[2025-08-21 02:53:38][356544398773595][572 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:53:38][356544398773595][572 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0Mzk4NzczNTk1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1dDMDZHVEFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTg1In0='" -e "main()" -q"
[2025-08-21 02:53:41][356544398773595][3195 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NTQ0Mzk4NzczNTk1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1dDMDZHVEFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTg1In0="\r\n
[2025-08-21 02:53:44][356544398773595][6523 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62a1d638-200a-411a-b91e-2f112e0233e2","id":"QR_62a1d638-200a-411a-b91e-2f112e0233e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:53:44][356544398773595][6523 ms][DEBUG] proc_open done in 5952 ms; code=0; res.len=3152
[2025-08-21 02:53:44][356544398773595][6523 ms][DEBUG] END   runCmdUntilRes#1 in 5952 ms
[2025-08-21 02:53:44][356544398773595][6523 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:58:11][357873778169614][1 ms][INFO] === Request start ===
[2025-08-21 02:58:11][357873778169614][2 ms][DEBUG] START check_frida
[2025-08-21 02:58:11][357873778169614][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:58:12][357873778169614][315 ms][DEBUG] SU: done in 313 ms; outroot         20950     1 2279504   4304 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:58:12][357873778169614][315 ms][DEBUG] check_frida: running
[2025-08-21 02:58:12][357873778169614][315 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 02:58:12][357873778169614][315 ms][DEBUG] START check_internet
[2025-08-21 02:58:12][357873778169614][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 02:58:12][357873778169614][734 ms][DEBUG] SU: done in 419 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.784/202.784/202.784/0.000 ms\n
[2025-08-21 02:58:12][357873778169614][734 ms][DEBUG] check_internet: online
[2025-08-21 02:58:12][357873778169614][735 ms][DEBUG] END   check_internet in 420 ms
[2025-08-21 02:58:12][357873778169614][735 ms][DEBUG] START check_scloud
[2025-08-21 02:58:12][357873778169614][735 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:58:12][357873778169614][1031 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23628960 72584 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:58:12][357873778169614][1031 ms][DEBUG] targetPkg: running
[2025-08-21 02:58:12][357873778169614][1031 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 02:58:12][357873778169614][1032 ms][DEBUG] rawBody.length=1160
[2025-08-21 02:58:12][357873778169614][1032 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODczNzc4MTY5NjE0IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMEpEMFBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjE2In0='" -e "main()" -q"
[2025-08-21 02:58:12][357873778169614][1032 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:58:12][357873778169614][1032 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODczNzc4MTY5NjE0IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMEpEMFBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjE2In0='" -e "main()" -q"
[2025-08-21 02:58:15][357873778169614][3687 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3ODczNzc4MTY5NjE0IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMEpEMFBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjE2In0="\r\n
[2025-08-21 02:58:20][357873778169614][8498 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_acbcaa0f-cfa6-4303-a8b0-1ff9c1f80390","id":"QR_acbcaa0f-cfa6-4303-a8b0-1ff9c1f80390","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:58:20][357873778169614][8498 ms][DEBUG] proc_open done in 7466 ms; code=0; res.len=3152
[2025-08-21 02:58:20][357873778169614][8498 ms][DEBUG] END   runCmdUntilRes#1 in 7466 ms
[2025-08-21 02:58:20][357873778169614][8498 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 02:59:39][351816151007394][1 ms][INFO] === Request start ===
[2025-08-21 02:59:39][351816151007394][2 ms][DEBUG] START check_frida
[2025-08-21 02:59:39][351816151007394][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 02:59:39][351816151007394][306 ms][DEBUG] SU: done in 304 ms; outroot         20950     1 2263084   4344 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 02:59:39][351816151007394][306 ms][DEBUG] check_frida: running
[2025-08-21 02:59:39][351816151007394][306 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 02:59:39][351816151007394][306 ms][DEBUG] START check_scloud
[2025-08-21 02:59:39][351816151007394][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 02:59:39][351816151007394][602 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23628992 73296 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 02:59:39][351816151007394][602 ms][DEBUG] targetPkg: running
[2025-08-21 02:59:39][351816151007394][602 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 02:59:39][351816151007394][602 ms][DEBUG] rawBody.length=1160
[2025-08-21 02:59:39][351816151007394][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODE2MTUxMDA3Mzk0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1kxMDRRREZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODE5In0='" -e "main()" -q"
[2025-08-21 02:59:39][351816151007394][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 02:59:39][351816151007394][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODE2MTUxMDA3Mzk0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1kxMDRRREZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODE5In0='" -e "main()" -q"
[2025-08-21 02:59:42][351816151007394][3242 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODE2MTUxMDA3Mzk0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1kxMDRRREZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODE5In0="\r\n
[2025-08-21 02:59:46][351816151007394][6647 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f1eb3f9-4799-4163-b24e-5c4da36fd718","id":"QR_2f1eb3f9-4799-4163-b24e-5c4da36fd718","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 02:59:46][351816151007394][6648 ms][DEBUG] proc_open done in 6045 ms; code=0; res.len=3152
[2025-08-21 02:59:46][351816151007394][6648 ms][DEBUG] END   runCmdUntilRes#1 in 6045 ms
[2025-08-21 02:59:46][351816151007394][6648 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 03:03:42][350389915816808][1 ms][INFO] === Request start ===
[2025-08-21 03:03:42][350389915816808][2 ms][DEBUG] START check_frida
[2025-08-21 03:03:42][350389915816808][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:03:43][350389915816808][272 ms][DEBUG] SU: done in 271 ms; outroot         20950     1 2263084   4360 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:03:43][350389915816808][272 ms][DEBUG] check_frida: running
[2025-08-21 03:03:43][350389915816808][272 ms][DEBUG] END   check_frida in 271 ms
[2025-08-21 03:03:43][350389915816808][272 ms][DEBUG] START check_scloud
[2025-08-21 03:03:43][350389915816808][273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:03:43][350389915816808][554 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23629024 72992 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:03:43][350389915816808][554 ms][DEBUG] targetPkg: running
[2025-08-21 03:03:43][350389915816808][554 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 03:03:43][350389915816808][554 ms][DEBUG] rawBody.length=1160
[2025-08-21 03:03:43][350389915816808][554 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzg5OTE1ODE2ODA4IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dDMDFQTTJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTAzIn0='" -e "main()" -q"
[2025-08-21 03:03:43][350389915816808][554 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:03:43][350389915816808][554 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzg5OTE1ODE2ODA4IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dDMDFQTTJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTAzIn0='" -e "main()" -q"
[2025-08-21 03:03:45][350389915816808][3178 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzg5OTE1ODE2ODA4IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dDMDFQTTJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTAzIn0="\r\n
[2025-08-21 03:03:50][350389915816808][7505 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f789fc8-faa5-4c2d-9131-79d949d4d135","id":"QR_5f789fc8-faa5-4c2d-9131-79d949d4d135","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 03:03:50][350389915816808][7505 ms][DEBUG] proc_open done in 6951 ms; code=0; res.len=3152
[2025-08-21 03:03:50][350389915816808][7505 ms][DEBUG] END   runCmdUntilRes#1 in 6951 ms
[2025-08-21 03:03:50][350389915816808][7505 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 03:04:07][356559111016841][1 ms][INFO] === Request start ===
[2025-08-21 03:04:07][356559111016841][2 ms][DEBUG] START check_frida
[2025-08-21 03:04:07][356559111016841][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:04:07][356559111016841][295 ms][DEBUG] SU: done in 294 ms; outroot         20950     1 2263084   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:04:07][356559111016841][295 ms][DEBUG] check_frida: running
[2025-08-21 03:04:07][356559111016841][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 03:04:07][356559111016841][295 ms][DEBUG] START check_internet
[2025-08-21 03:04:07][356559111016841][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:04:08][356559111016841][717 ms][DEBUG] SU: done in 422 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.556/201.556/201.556/0.000 ms\n
[2025-08-21 03:04:08][356559111016841][717 ms][DEBUG] check_internet: online
[2025-08-21 03:04:08][356559111016841][717 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 03:04:08][356559111016841][717 ms][DEBUG] START check_scloud
[2025-08-21 03:04:08][356559111016841][717 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:04:08][356559111016841][951 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23629056 73404 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:04:08][356559111016841][952 ms][DEBUG] targetPkg: running
[2025-08-21 03:04:08][356559111016841][952 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 03:04:08][356559111016841][952 ms][DEBUG] rawBody.length=1161
[2025-08-21 03:04:08][356559111016841][952 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTU5MTExMDE2ODQxIiwibW9kZWwiOiJTTS1HOTg4SiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q042MDdRQ05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLREkiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjM1OCJ9'" -e "main()" -q"
[2025-08-21 03:04:08][356559111016841][952 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:04:08][356559111016841][952 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTU5MTExMDE2ODQxIiwibW9kZWwiOiJTTS1HOTg4SiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q042MDdRQ05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLREkiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjM1OCJ9'" -e "main()" -q"
[2025-08-21 03:04:10][356559111016841][3591 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NTU5MTExMDE2ODQxIiwibW9kZWwiOiJTTS1HOTg4SiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q042MDdRQ05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLREkiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjM1OCJ9"\r\n
[2025-08-21 03:04:17][356559111016841][10621 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7aef80d-6882-40b1-a4d1-76b404e2d1de","id":"QR_e7aef80d-6882-40b1-a4d1-76b404e2d1de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 03:04:17][356559111016841][10621 ms][DEBUG] proc_open done in 9669 ms; code=0; res.len=3152
[2025-08-21 03:04:17][356559111016841][10621 ms][DEBUG] END   runCmdUntilRes#1 in 9669 ms
[2025-08-21 03:04:17][356559111016841][10621 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 03:16:09][353497473331586][1 ms][INFO] === Request start ===
[2025-08-21 03:16:09][353497473331586][2 ms][DEBUG] START check_frida
[2025-08-21 03:16:09][353497473331586][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:16:09][353497473331586][299 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2262072   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:16:09][353497473331586][299 ms][DEBUG] check_frida: running
[2025-08-21 03:16:09][353497473331586][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 03:16:09][353497473331586][299 ms][DEBUG] START check_internet
[2025-08-21 03:16:09][353497473331586][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:16:10][353497473331586][721 ms][DEBUG] SU: done in 421 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.894/152.894/152.894/0.000 ms\n
[2025-08-21 03:16:10][353497473331586][721 ms][DEBUG] check_internet: online
[2025-08-21 03:16:10][353497473331586][721 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 03:16:10][353497473331586][721 ms][DEBUG] START check_scloud
[2025-08-21 03:16:10][353497473331586][721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:16:10][353497473331586][1002 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23611604 73188 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:16:10][353497473331586][1002 ms][DEBUG] targetPkg: running
[2025-08-21 03:16:10][353497473331586][1002 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 03:16:10][353497473331586][1002 ms][DEBUG] rawBody.length=1160
[2025-08-21 03:16:10][353497473331586][1002 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDk3NDczMzMxNTg2IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MEpUSEVNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDAwIn0='" -e "main()" -q"
[2025-08-21 03:16:10][353497473331586][1002 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:16:10][353497473331586][1002 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDk3NDczMzMxNTg2IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MEpUSEVNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDAwIn0='" -e "main()" -q"
[2025-08-21 03:16:12][353497473331586][3595 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDk3NDczMzMxNTg2IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MEpUSEVNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDAwIn0="\r\n
[2025-08-21 03:16:17][353497473331586][8078 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c761bcdc-b06b-4ec2-b02c-7b23441ad925","id":"QR_c761bcdc-b06b-4ec2-b02c-7b23441ad925","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 03:16:17][353497473331586][8079 ms][DEBUG] proc_open done in 7077 ms; code=0; res.len=3152
[2025-08-21 03:16:17][353497473331586][8079 ms][DEBUG] END   runCmdUntilRes#1 in 7077 ms
[2025-08-21 03:16:17][353497473331586][8079 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 03:32:07][354106242560248][1 ms][INFO] === Request start ===
[2025-08-21 03:32:07][354106242560248][1 ms][DEBUG] START check_frida
[2025-08-21 03:32:07][354106242560248][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:32:07][354106242560248][315 ms][DEBUG] SU: done in 313 ms; outroot         20950     1 2278492   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:32:07][354106242560248][315 ms][DEBUG] check_frida: running
[2025-08-21 03:32:07][354106242560248][315 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 03:32:07][354106242560248][315 ms][DEBUG] START check_internet
[2025-08-21 03:32:07][354106242560248][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:32:08][354106242560248][846 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.881/200.881/200.881/0.000 ms\n
[2025-08-21 03:32:08][354106242560248][846 ms][DEBUG] check_internet: online
[2025-08-21 03:32:08][354106242560248][846 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 03:32:08][354106242560248][846 ms][DEBUG] START check_scloud
[2025-08-21 03:32:08][354106242560248][846 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:32:08][354106242560248][1113 ms][DEBUG] SU: done in 267 ms; outu0_a118      20979 10674 23611636 72536 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:32:08][354106242560248][1113 ms][DEBUG] targetPkg: running
[2025-08-21 03:32:08][354106242560248][1113 ms][DEBUG] END   check_scloud in 267 ms
[2025-08-21 03:32:08][354106242560248][1113 ms][DEBUG] rawBody.length=1161
[2025-08-21 03:32:08][354106242560248][1113 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2MjQyNTYwMjQ4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY2OCJ9'" -e "main()" -q"
[2025-08-21 03:32:08][354106242560248][1113 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:32:08][354106242560248][1113 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2MjQyNTYwMjQ4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY2OCJ9'" -e "main()" -q"
[2025-08-21 03:32:10][354106242560248][3736 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTA2MjQyNTYwMjQ4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY2OCJ9"\r\n
[2025-08-21 03:32:12][354106242560248][5532 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 03:32:12][354106242560248][5533 ms][DEBUG] proc_open done in 4419 ms; code=0; res.len=115
[2025-08-21 03:32:12][354106242560248][5533 ms][DEBUG] END   runCmdUntilRes#1 in 4419 ms
[2025-08-21 03:32:12][354106242560248][5533 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 03:32:13][][0 ms][INFO] === Request start ===
[2025-08-21 03:32:13][][1 ms][DEBUG] START check_frida
[2025-08-21 03:32:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:32:13][][302 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2279504   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:32:13][][302 ms][DEBUG] check_frida: running
[2025-08-21 03:32:13][][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 03:32:13][][302 ms][DEBUG] START check_internet
[2025-08-21 03:32:13][][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:32:13][][552 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.486/145.486/145.486/0.000 ms\n
[2025-08-21 03:32:13][][552 ms][DEBUG] check_internet: online
[2025-08-21 03:32:13][][552 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 03:32:13][][552 ms][DEBUG] START check_scloud
[2025-08-21 03:32:13][][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:32:13][][864 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23629152 73112 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:32:13][][864 ms][DEBUG] targetPkg: running
[2025-08-21 03:32:13][][864 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 03:32:13][][864 ms][DEBUG] rawBody.length=1131
[2025-08-21 03:32:13][][864 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE2OSJ9'" -e "main()" -q"
[2025-08-21 03:32:13][][864 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:32:13][][864 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE2OSJ9'" -e "main()" -q"
[2025-08-21 03:32:16][][3519 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE2OSJ9"\r\n
[2025-08-21 03:32:18][][5191 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 03:32:18][][5191 ms][DEBUG] proc_open done in 4327 ms; code=0; res.len=107
[2025-08-21 03:32:18][][5191 ms][DEBUG] END   runCmdUntilRes#1 in 4327 ms
[2025-08-21 03:32:18][][5191 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 03:32:18][][0 ms][INFO] === Request start ===
[2025-08-21 03:32:18][][1 ms][DEBUG] START check_frida
[2025-08-21 03:32:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:32:18][][291 ms][DEBUG] SU: done in 290 ms; outroot         20950     1 2279504   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:32:18][][291 ms][DEBUG] check_frida: running
[2025-08-21 03:32:18][][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 03:32:18][][291 ms][DEBUG] START check_internet
[2025-08-21 03:32:18][][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:32:19][][526 ms][DEBUG] SU: done in 235 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.646/137.646/137.646/0.000 ms\n
[2025-08-21 03:32:19][][526 ms][DEBUG] check_internet: online
[2025-08-21 03:32:19][][526 ms][DEBUG] END   check_internet in 235 ms
[2025-08-21 03:32:19][][527 ms][DEBUG] START check_scloud
[2025-08-21 03:32:19][][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:32:19][][759 ms][DEBUG] SU: done in 232 ms; outu0_a118      20979 10674 23629184 72744 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:32:19][][759 ms][DEBUG] targetPkg: running
[2025-08-21 03:32:19][][759 ms][DEBUG] END   check_scloud in 232 ms
[2025-08-21 03:32:19][][759 ms][DEBUG] rawBody.length=1131
[2025-08-21 03:32:19][][759 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQyOSJ9'" -e "main()" -q"
[2025-08-21 03:32:19][][759 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:32:19][][759 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQyOSJ9'" -e "main()" -q"
[2025-08-21 03:32:21][][3352 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQyOSJ9"\r\n
[2025-08-21 03:32:23][][5258 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 03:32:23][][5258 ms][DEBUG] proc_open done in 4499 ms; code=0; res.len=107
[2025-08-21 03:32:23][][5258 ms][DEBUG] END   runCmdUntilRes#1 in 4499 ms
[2025-08-21 03:32:23][][5258 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 03:32:26][354106242560248][0 ms][INFO] === Request start ===
[2025-08-21 03:32:26][354106242560248][1 ms][DEBUG] START check_frida
[2025-08-21 03:32:26][354106242560248][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:32:26][354106242560248][306 ms][DEBUG] SU: done in 305 ms; outroot         20950     1 2279504   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:32:26][354106242560248][306 ms][DEBUG] check_frida: running
[2025-08-21 03:32:26][354106242560248][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 03:32:26][354106242560248][306 ms][DEBUG] START check_internet
[2025-08-21 03:32:26][354106242560248][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:32:26][354106242560248][587 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.408/181.408/181.408/0.000 ms\n
[2025-08-21 03:32:26][354106242560248][587 ms][DEBUG] check_internet: online
[2025-08-21 03:32:26][354106242560248][587 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 03:32:26][354106242560248][587 ms][DEBUG] START check_scloud
[2025-08-21 03:32:26][354106242560248][587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:32:27][354106242560248][884 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23629216 71732 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:32:27][354106242560248][884 ms][DEBUG] targetPkg: running
[2025-08-21 03:32:27][354106242560248][884 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 03:32:27][354106242560248][884 ms][DEBUG] rawBody.length=1160
[2025-08-21 03:32:27][354106242560248][884 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2MjQyNTYwMjQ4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDk2In0='" -e "main()" -q"
[2025-08-21 03:32:27][354106242560248][884 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:32:27][354106242560248][884 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2MjQyNTYwMjQ4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDk2In0='" -e "main()" -q"
[2025-08-21 03:32:29][354106242560248][3524 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTA2MjQyNTYwMjQ4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMVgySkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDk2In0="\r\n
[2025-08-21 03:32:34][354106242560248][8648 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7d112f1-7ea3-4b6f-9d9a-1271034a2c75","id":"QR_d7d112f1-7ea3-4b6f-9d9a-1271034a2c75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 03:32:34][354106242560248][8648 ms][DEBUG] proc_open done in 7763 ms; code=0; res.len=3152
[2025-08-21 03:32:34][354106242560248][8648 ms][DEBUG] END   runCmdUntilRes#1 in 7764 ms
[2025-08-21 03:32:34][354106242560248][8648 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 03:38:09][356273100391989][1 ms][INFO] === Request start ===
[2025-08-21 03:38:09][356273100391989][2 ms][DEBUG] START check_frida
[2025-08-21 03:38:09][356273100391989][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:38:09][356273100391989][288 ms][DEBUG] SU: done in 286 ms; outroot         20950     1 2263084   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:38:09][356273100391989][288 ms][DEBUG] check_frida: running
[2025-08-21 03:38:09][356273100391989][288 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 03:38:09][356273100391989][288 ms][DEBUG] START check_internet
[2025-08-21 03:38:09][356273100391989][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:38:10][356273100391989][754 ms][DEBUG] SU: done in 466 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.825/200.825/200.825/0.000 ms\n
[2025-08-21 03:38:10][356273100391989][755 ms][DEBUG] check_internet: online
[2025-08-21 03:38:10][356273100391989][755 ms][DEBUG] END   check_internet in 466 ms
[2025-08-21 03:38:10][356273100391989][755 ms][DEBUG] START check_scloud
[2025-08-21 03:38:10][356273100391989][755 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:38:10][356273100391989][1020 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23629248 72712 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:38:10][356273100391989][1020 ms][DEBUG] targetPkg: running
[2025-08-21 03:38:10][356273100391989][1020 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 03:38:10][356273100391989][1020 ms][DEBUG] rawBody.length=1160
[2025-08-21 03:38:10][356273100391989][1020 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MjczMTAwMzkxOTg5IiwibW9kZWwiOiJTTS1BMTAyVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE02MzhSU01BIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjg4In0='" -e "main()" -q"
[2025-08-21 03:38:10][356273100391989][1020 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:38:10][356273100391989][1020 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MjczMTAwMzkxOTg5IiwibW9kZWwiOiJTTS1BMTAyVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE02MzhSU01BIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjg4In0='" -e "main()" -q"
[2025-08-21 03:38:12][356273100391989][3644 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MjczMTAwMzkxOTg5IiwibW9kZWwiOiJTTS1BMTAyVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE02MzhSU01BIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjg4In0="\r\n
[2025-08-21 03:38:16][356273100391989][7081 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2257b62b-c8ba-4b0a-8740-7f05fa479c1d","id":"QR_2257b62b-c8ba-4b0a-8740-7f05fa479c1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 03:38:16][356273100391989][7081 ms][DEBUG] proc_open done in 6061 ms; code=0; res.len=3152
[2025-08-21 03:38:16][356273100391989][7081 ms][DEBUG] END   runCmdUntilRes#1 in 6061 ms
[2025-08-21 03:38:16][356273100391989][7081 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 03:51:06][350886065186148][1 ms][INFO] === Request start ===
[2025-08-21 03:51:06][350886065186148][2 ms][DEBUG] START check_frida
[2025-08-21 03:51:06][350886065186148][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:51:07][350886065186148][299 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:51:07][350886065186148][299 ms][DEBUG] check_frida: running
[2025-08-21 03:51:07][350886065186148][299 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 03:51:07][350886065186148][299 ms][DEBUG] START check_scloud
[2025-08-21 03:51:07][350886065186148][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:51:07][350886065186148][595 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23611796 72932 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:51:07][350886065186148][595 ms][DEBUG] targetPkg: running
[2025-08-21 03:51:07][350886065186148][595 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 03:51:07][350886065186148][595 ms][DEBUG] rawBody.length=1161
[2025-08-21 03:51:07][350886065186148][595 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODg2MDY1MTg2MTQ4IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MDVONU1aIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAzNiJ9'" -e "main()" -q"
[2025-08-21 03:51:07][350886065186148][595 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:51:07][350886065186148][595 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODg2MDY1MTg2MTQ4IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MDVONU1aIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAzNiJ9'" -e "main()" -q"
[2025-08-21 03:51:10][350886065186148][3173 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODg2MDY1MTg2MTQ4IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MDVONU1aIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAzNiJ9"\r\n
[2025-08-21 03:51:12][350886065186148][5360 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff2a9ed9-75be-491b-aade-b28a9d257988","id":"QR_ff2a9ed9-75be-491b-aade-b28a9d257988","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 03:51:12][350886065186148][5360 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 03:51:12][350886065186148][5360 ms][DEBUG] END   runCmdUntilRes#1 in 4764 ms
[2025-08-21 03:51:12][350886065186148][5360 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 03:51:21][352467921169269][1 ms][INFO] === Request start ===
[2025-08-21 03:51:21][352467921169269][1 ms][DEBUG] START check_frida
[2025-08-21 03:51:21][352467921169269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:51:21][352467921169269][320 ms][DEBUG] SU: done in 319 ms; outroot         20950     1 2279504   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:51:21][352467921169269][320 ms][DEBUG] check_frida: running
[2025-08-21 03:51:21][352467921169269][320 ms][DEBUG] END   check_frida in 319 ms
[2025-08-21 03:51:21][352467921169269][320 ms][DEBUG] START check_scloud
[2025-08-21 03:51:21][352467921169269][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:51:21][352467921169269][601 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23629312 72248 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:51:21][352467921169269][601 ms][DEBUG] targetPkg: running
[2025-08-21 03:51:21][352467921169269][601 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 03:51:21][352467921169269][601 ms][DEBUG] rawBody.length=1160
[2025-08-21 03:51:21][352467921169269][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY3OTIxMTY5MjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFgyMDFQQUxWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTYzIn0='" -e "main()" -q"
[2025-08-21 03:51:21][352467921169269][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:51:21][352467921169269][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY3OTIxMTY5MjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFgyMDFQQUxWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTYzIn0='" -e "main()" -q"
[2025-08-21 03:51:24][352467921169269][3210 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDY3OTIxMTY5MjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFgyMDFQQUxWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTYzIn0="\r\n
[2025-08-21 03:51:28][352467921169269][7365 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a29e8234-c6ba-422d-9ef2-62fe12b607f6","id":"QR_a29e8234-c6ba-422d-9ef2-62fe12b607f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 03:51:28][352467921169269][7365 ms][DEBUG] proc_open done in 6764 ms; code=0; res.len=3152
[2025-08-21 03:51:28][352467921169269][7365 ms][DEBUG] END   runCmdUntilRes#1 in 6764 ms
[2025-08-21 03:51:28][352467921169269][7365 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 03:52:08][353313362465684][0 ms][INFO] === Request start ===
[2025-08-21 03:52:08][353313362465684][1 ms][DEBUG] START check_frida
[2025-08-21 03:52:08][353313362465684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:52:09][353313362465684][315 ms][DEBUG] SU: done in 314 ms; outroot         20950     1 2263084   4476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:52:09][353313362465684][315 ms][DEBUG] check_frida: running
[2025-08-21 03:52:09][353313362465684][315 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 03:52:09][353313362465684][315 ms][DEBUG] START check_internet
[2025-08-21 03:52:09][353313362465684][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:52:09][353313362465684][737 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.204/203.204/203.204/0.000 ms\n
[2025-08-21 03:52:09][353313362465684][737 ms][DEBUG] check_internet: online
[2025-08-21 03:52:09][353313362465684][737 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 03:52:09][353313362465684][737 ms][DEBUG] START check_scloud
[2025-08-21 03:52:09][353313362465684][737 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:52:09][353313362465684][1018 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23629344 73044 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:52:09][353313362465684][1018 ms][DEBUG] targetPkg: running
[2025-08-21 03:52:09][353313362465684][1018 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 03:52:09][353313362465684][1018 ms][DEBUG] rawBody.length=1160
[2025-08-21 03:52:09][353313362465684][1018 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Mzc4In0='" -e "main()" -q"
[2025-08-21 03:52:09][353313362465684][1018 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:52:09][353313362465684][1018 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Mzc4In0='" -e "main()" -q"
[2025-08-21 03:52:12][353313362465684][3673 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Mzc4In0="\r\n
[2025-08-21 03:52:14][353313362465684][5611 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 03:52:14][353313362465684][5611 ms][DEBUG] proc_open done in 4592 ms; code=0; res.len=115
[2025-08-21 03:52:14][353313362465684][5611 ms][DEBUG] END   runCmdUntilRes#1 in 4592 ms
[2025-08-21 03:52:14][353313362465684][5611 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 03:52:14][][0 ms][INFO] === Request start ===
[2025-08-21 03:52:14][][1 ms][DEBUG] START check_frida
[2025-08-21 03:52:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:52:14][][302 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2279504   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:52:14][][302 ms][DEBUG] check_frida: running
[2025-08-21 03:52:14][][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 03:52:14][][302 ms][DEBUG] START check_internet
[2025-08-21 03:52:14][][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:52:15][][551 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.861/139.861/139.861/0.000 ms\n
[2025-08-21 03:52:15][][551 ms][DEBUG] check_internet: online
[2025-08-21 03:52:15][][551 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 03:52:15][][551 ms][DEBUG] START check_scloud
[2025-08-21 03:52:15][][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:52:15][][817 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23629376 72668 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:52:15][][817 ms][DEBUG] targetPkg: running
[2025-08-21 03:52:15][][817 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 03:52:15][][817 ms][DEBUG] rawBody.length=1130
[2025-08-21 03:52:15][][817 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTI2In0='" -e "main()" -q"
[2025-08-21 03:52:15][][817 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:52:15][][818 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTI2In0='" -e "main()" -q"
[2025-08-21 03:52:18][][3441 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTI2In0="\r\n
[2025-08-21 03:52:19][][5316 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 03:52:19][][5316 ms][DEBUG] proc_open done in 4499 ms; code=0; res.len=107
[2025-08-21 03:52:19][][5316 ms][DEBUG] END   runCmdUntilRes#1 in 4499 ms
[2025-08-21 03:52:19][][5316 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 03:52:20][][0 ms][INFO] === Request start ===
[2025-08-21 03:52:20][][1 ms][DEBUG] START check_frida
[2025-08-21 03:52:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:52:20][][274 ms][DEBUG] SU: done in 273 ms; outroot         20950     1 2279504   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:52:20][][274 ms][DEBUG] check_frida: running
[2025-08-21 03:52:20][][274 ms][DEBUG] END   check_frida in 273 ms
[2025-08-21 03:52:20][][274 ms][DEBUG] START check_internet
[2025-08-21 03:52:20][][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:52:20][][524 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.648/138.648/138.648/0.000 ms\n
[2025-08-21 03:52:20][][524 ms][DEBUG] check_internet: online
[2025-08-21 03:52:20][][524 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 03:52:20][][524 ms][DEBUG] START check_scloud
[2025-08-21 03:52:20][][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:52:21][][821 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23629408 73240 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:52:21][][821 ms][DEBUG] targetPkg: running
[2025-08-21 03:52:21][][821 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 03:52:21][][821 ms][DEBUG] rawBody.length=1130
[2025-08-21 03:52:21][][821 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDkzIn0='" -e "main()" -q"
[2025-08-21 03:52:21][][821 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:52:21][][821 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDkzIn0='" -e "main()" -q"
[2025-08-21 03:52:23][][3445 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDkzIn0="\r\n
[2025-08-21 03:52:25][][5273 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 03:52:25][][5273 ms][DEBUG] proc_open done in 4451 ms; code=0; res.len=107
[2025-08-21 03:52:25][][5273 ms][DEBUG] END   runCmdUntilRes#1 in 4452 ms
[2025-08-21 03:52:25][][5273 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 03:52:26][353313362465684][0 ms][INFO] === Request start ===
[2025-08-21 03:52:26][353313362465684][1 ms][DEBUG] START check_frida
[2025-08-21 03:52:26][353313362465684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:52:26][353313362465684][299 ms][DEBUG] SU: done in 298 ms; outroot         20950     1 2279504   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:52:26][353313362465684][299 ms][DEBUG] check_frida: running
[2025-08-21 03:52:26][353313362465684][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 03:52:26][353313362465684][300 ms][DEBUG] START check_internet
[2025-08-21 03:52:26][353313362465684][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 03:52:26][353313362465684][550 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.246/142.246/142.246/0.000 ms\n
[2025-08-21 03:52:26][353313362465684][550 ms][DEBUG] check_internet: online
[2025-08-21 03:52:26][353313362465684][550 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 03:52:26][353313362465684][550 ms][DEBUG] START check_scloud
[2025-08-21 03:52:26][353313362465684][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:52:27][353313362465684][846 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23629440 72560 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:52:27][353313362465684][846 ms][DEBUG] targetPkg: running
[2025-08-21 03:52:27][353313362465684][846 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 03:52:27][353313362465684][846 ms][DEBUG] rawBody.length=1161
[2025-08-21 03:52:27][353313362465684][846 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA0OCJ9'" -e "main()" -q"
[2025-08-21 03:52:27][353313362465684][846 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:52:27][353313362465684][846 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA0OCJ9'" -e "main()" -q"
[2025-08-21 03:52:29][353313362465684][3486 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA0OCJ9"\r\n
[2025-08-21 03:52:32][353313362465684][5626 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d999413d-55c2-48b6-87b6-9450cacc2221","id":"QR_d999413d-55c2-48b6-87b6-9450cacc2221","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 03:52:32][353313362465684][5626 ms][DEBUG] proc_open done in 4780 ms; code=0; res.len=3152
[2025-08-21 03:52:32][353313362465684][5626 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-21 03:52:32][353313362465684][5626 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 03:57:07][352600224237769][1 ms][INFO] === Request start ===
[2025-08-21 03:57:07][352600224237769][2 ms][DEBUG] START check_frida
[2025-08-21 03:57:07][352600224237769][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 03:57:07][352600224237769][305 ms][DEBUG] SU: done in 303 ms; outroot         20950     1 2263084   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 03:57:07][352600224237769][305 ms][DEBUG] check_frida: running
[2025-08-21 03:57:07][352600224237769][305 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 03:57:07][352600224237769][305 ms][DEBUG] START check_scloud
[2025-08-21 03:57:07][352600224237769][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 03:57:08][352600224237769][586 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23629472 73100 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 03:57:08][352600224237769][586 ms][DEBUG] targetPkg: running
[2025-08-21 03:57:08][352600224237769][586 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 03:57:08][352600224237769][586 ms][DEBUG] rawBody.length=1161
[2025-08-21 03:57:08][352600224237769][586 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI0MjM3NzY5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MEdZSjZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE4MCJ9'" -e "main()" -q"
[2025-08-21 03:57:08][352600224237769][586 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 03:57:08][352600224237769][586 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI0MjM3NzY5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MEdZSjZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE4MCJ9'" -e "main()" -q"
[2025-08-21 03:57:10][352600224237769][3210 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjAwMjI0MjM3NzY5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MEdZSjZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE4MCJ9"\r\n
[2025-08-21 03:57:12][352600224237769][5506 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c0ab55b-5667-4255-8d41-6283bb6869fd","id":"QR_1c0ab55b-5667-4255-8d41-6283bb6869fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 03:57:12][352600224237769][5506 ms][DEBUG] proc_open done in 4920 ms; code=0; res.len=3152
[2025-08-21 03:57:12][352600224237769][5506 ms][DEBUG] END   runCmdUntilRes#1 in 4920 ms
[2025-08-21 03:57:12][352600224237769][5506 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 04:03:06][353029498911223][1 ms][INFO] === Request start ===
[2025-08-21 04:03:06][353029498911223][2 ms][DEBUG] START check_frida
[2025-08-21 04:03:06][353029498911223][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 04:03:06][353029498911223][311 ms][DEBUG] SU: done in 309 ms; outroot         20950     1 2263084   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 04:03:06][353029498911223][311 ms][DEBUG] check_frida: running
[2025-08-21 04:03:06][353029498911223][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 04:03:06][353029498911223][311 ms][DEBUG] START check_scloud
[2025-08-21 04:03:06][353029498911223][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 04:03:07][353029498911223][608 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23629504 73024 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 04:03:07][353029498911223][608 ms][DEBUG] targetPkg: running
[2025-08-21 04:03:07][353029498911223][608 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 04:03:07][353029498911223][608 ms][DEBUG] rawBody.length=1161
[2025-08-21 04:03:07][353029498911223][608 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI5NDk4OTExMjIzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MUIwV0xEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTE4OSJ9'" -e "main()" -q"
[2025-08-21 04:03:07][353029498911223][608 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 04:03:07][353029498911223][608 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI5NDk4OTExMjIzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MUIwV0xEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTE4OSJ9'" -e "main()" -q"
[2025-08-21 04:03:09][353029498911223][3216 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDI5NDk4OTExMjIzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MUIwV0xEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTE4OSJ9"\r\n
[2025-08-21 04:03:12][353029498911223][5497 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3126a49f-df46-45c0-84db-c0d073a5565b","id":"QR_3126a49f-df46-45c0-84db-c0d073a5565b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 04:03:12][353029498911223][5497 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 04:03:12][353029498911223][5497 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 04:03:12][353029498911223][5497 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 04:17:20][352923545951045][1 ms][INFO] === Request start ===
[2025-08-21 04:17:20][352923545951045][2 ms][DEBUG] START check_frida
[2025-08-21 04:17:20][352923545951045][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 04:17:21][352923545951045][312 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2279504   4212 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 04:17:21][352923545951045][312 ms][DEBUG] check_frida: running
[2025-08-21 04:17:21][352923545951045][312 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 04:17:21][352923545951045][312 ms][DEBUG] START check_scloud
[2025-08-21 04:17:21][352923545951045][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 04:17:21][352923545951045][608 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23612052 72800 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 04:17:21][352923545951045][608 ms][DEBUG] targetPkg: running
[2025-08-21 04:17:21][352923545951045][608 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 04:17:21][352923545951045][608 ms][DEBUG] rawBody.length=1161
[2025-08-21 04:17:21][352923545951045][608 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTIzNTQ1OTUxMDQ1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzNDZFRVpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM5NSJ9'" -e "main()" -q"
[2025-08-21 04:17:21][352923545951045][608 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 04:17:21][352923545951045][608 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTIzNTQ1OTUxMDQ1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzNDZFRVpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM5NSJ9'" -e "main()" -q"
[2025-08-21 04:17:24][352923545951045][3217 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTIzNTQ1OTUxMDQ1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzNDZFRVpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM5NSJ9"\r\n
[2025-08-21 04:17:26][352923545951045][5310 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_160fc32c-c38a-4854-8c48-574cf3fbb313","id":"QR_160fc32c-c38a-4854-8c48-574cf3fbb313","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 04:17:26][352923545951045][5310 ms][DEBUG] proc_open done in 4702 ms; code=0; res.len=3152
[2025-08-21 04:17:26][352923545951045][5311 ms][DEBUG] END   runCmdUntilRes#1 in 4702 ms
[2025-08-21 04:17:26][352923545951045][5311 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 04:34:08][351270416270100][1 ms][INFO] === Request start ===
[2025-08-21 04:34:08][351270416270100][2 ms][DEBUG] START check_frida
[2025-08-21 04:34:08][351270416270100][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 04:34:09][351270416270100][299 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2262072   4292 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 04:34:09][351270416270100][299 ms][DEBUG] check_frida: running
[2025-08-21 04:34:09][351270416270100][299 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 04:34:09][351270416270100][299 ms][DEBUG] START check_internet
[2025-08-21 04:34:09][351270416270100][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 04:34:09][351270416270100][783 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.775/201.775/201.775/0.000 ms\n
[2025-08-21 04:34:09][351270416270100][783 ms][DEBUG] check_internet: online
[2025-08-21 04:34:09][351270416270100][783 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 04:34:09][351270416270100][783 ms][DEBUG] START check_scloud
[2025-08-21 04:34:09][351270416270100][783 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 04:34:09][351270416270100][1048 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23612084 72320 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 04:34:09][351270416270100][1049 ms][DEBUG] targetPkg: running
[2025-08-21 04:34:09][351270416270100][1049 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 04:34:09][351270416270100][1049 ms][DEBUG] rawBody.length=1161
[2025-08-21 04:34:09][351270416270100][1049 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDE2MjcwMTAwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MDBXMjBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM2MSJ9'" -e "main()" -q"
[2025-08-21 04:34:09][351270416270100][1049 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 04:34:09][351270416270100][1049 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDE2MjcwMTAwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MDBXMjBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM2MSJ9'" -e "main()" -q"
[2025-08-21 04:34:12][351270416270100][3688 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcwNDE2MjcwMTAwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MDBXMjBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM2MSJ9"\r\n
[2025-08-21 04:34:14][351270416270100][6016 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b11b984-78a7-4964-84cc-65c785dc1f3e","id":"QR_0b11b984-78a7-4964-84cc-65c785dc1f3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 04:34:14][351270416270100][6016 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 04:34:14][351270416270100][6016 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-21 04:34:14][351270416270100][6016 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 04:36:08][352600227783777][0 ms][INFO] === Request start ===
[2025-08-21 04:36:08][352600227783777][1 ms][DEBUG] START check_frida
[2025-08-21 04:36:08][352600227783777][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 04:36:08][352600227783777][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4344 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 04:36:08][352600227783777][303 ms][DEBUG] check_frida: running
[2025-08-21 04:36:08][352600227783777][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 04:36:08][352600227783777][303 ms][DEBUG] START check_internet
[2025-08-21 04:36:08][352600227783777][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 04:36:08][352600227783777][584 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=180 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 180.468/180.468/180.468/0.000 ms\n
[2025-08-21 04:36:08][352600227783777][584 ms][DEBUG] check_internet: online
[2025-08-21 04:36:08][352600227783777][584 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 04:36:08][352600227783777][584 ms][DEBUG] START check_scloud
[2025-08-21 04:36:08][352600227783777][584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 04:36:08][352600227783777][850 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23629600 73212 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 04:36:08][352600227783777][850 ms][DEBUG] targetPkg: running
[2025-08-21 04:36:08][352600227783777][850 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 04:36:08][352600227783777][850 ms][DEBUG] rawBody.length=1161
[2025-08-21 04:36:08][352600227783777][850 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI3NzgzNzc3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MEEwTDJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk5NyJ9'" -e "main()" -q"
[2025-08-21 04:36:08][352600227783777][850 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 04:36:08][352600227783777][850 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI3NzgzNzc3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MEEwTDJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk5NyJ9'" -e "main()" -q"
[2025-08-21 04:36:11][352600227783777][3490 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjAwMjI3NzgzNzc3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MEEwTDJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk5NyJ9"\r\n
[2025-08-21 04:36:13][352600227783777][5567 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1c8f085-31df-40ca-bd21-7e6f4b68f4f2","id":"QR_a1c8f085-31df-40ca-bd21-7e6f4b68f4f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 04:36:13][352600227783777][5568 ms][DEBUG] proc_open done in 4718 ms; code=0; res.len=3152
[2025-08-21 04:36:13][352600227783777][5568 ms][DEBUG] END   runCmdUntilRes#1 in 4718 ms
[2025-08-21 04:36:13][352600227783777][5568 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 04:47:06][353403930802201][1 ms][INFO] === Request start ===
[2025-08-21 04:47:06][353403930802201][2 ms][DEBUG] START check_frida
[2025-08-21 04:47:06][353403930802201][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 04:47:07][353403930802201][301 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2263084   4364 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 04:47:07][353403930802201][301 ms][DEBUG] check_frida: running
[2025-08-21 04:47:07][353403930802201][301 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 04:47:07][353403930802201][301 ms][DEBUG] START check_scloud
[2025-08-21 04:47:07][353403930802201][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 04:47:07][353403930802201][597 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23612148 72696 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 04:47:07][353403930802201][597 ms][DEBUG] targetPkg: running
[2025-08-21 04:47:07][353403930802201][597 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 04:47:07][353403930802201][597 ms][DEBUG] rawBody.length=1161
[2025-08-21 04:47:07][353403930802201][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDAzOTMwODAyMjAxIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1dBMDRBRUVWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ4MCJ9'" -e "main()" -q"
[2025-08-21 04:47:07][353403930802201][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 04:47:07][353403930802201][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDAzOTMwODAyMjAxIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1dBMDRBRUVWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ4MCJ9'" -e "main()" -q"
[2025-08-21 04:47:10][353403930802201][3206 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDAzOTMwODAyMjAxIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1dBMDRBRUVWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ4MCJ9"\r\n
[2025-08-21 04:47:12][353403930802201][5690 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb445a02-ce24-4881-b2c6-47496a9a353b","id":"QR_eb445a02-ce24-4881-b2c6-47496a9a353b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 04:47:12][353403930802201][5690 ms][DEBUG] proc_open done in 5093 ms; code=0; res.len=3152
[2025-08-21 04:47:12][353403930802201][5690 ms][DEBUG] END   runCmdUntilRes#1 in 5093 ms
[2025-08-21 04:47:12][353403930802201][5690 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 04:53:08][351684180144525][1 ms][INFO] === Request start ===
[2025-08-21 04:53:08][351684180144525][2 ms][DEBUG] START check_frida
[2025-08-21 04:53:08][351684180144525][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 04:53:08][351684180144525][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 04:53:08][351684180144525][309 ms][DEBUG] check_frida: running
[2025-08-21 04:53:08][351684180144525][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 04:53:08][351684180144525][309 ms][DEBUG] START check_scloud
[2025-08-21 04:53:08][351684180144525][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 04:53:09][351684180144525][606 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23629664 72392 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 04:53:09][351684180144525][606 ms][DEBUG] targetPkg: running
[2025-08-21 04:53:09][351684180144525][606 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 04:53:09][351684180144525][606 ms][DEBUG] rawBody.length=1161
[2025-08-21 04:53:09][351684180144525][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjg0MTgwMTQ0NTI1IiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ044MDFSN1JaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc0OSJ9'" -e "main()" -q"
[2025-08-21 04:53:09][351684180144525][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 04:53:09][351684180144525][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjg0MTgwMTQ0NTI1IiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ044MDFSN1JaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc0OSJ9'" -e "main()" -q"
[2025-08-21 04:53:11][351684180144525][3215 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjg0MTgwMTQ0NTI1IiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ044MDFSN1JaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc0OSJ9"\r\n
[2025-08-21 04:53:13][351684180144525][5074 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6f48633-49f2-4a94-937c-a992fb0b5871","id":"QR_a6f48633-49f2-4a94-937c-a992fb0b5871","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 04:53:13][351684180144525][5074 ms][DEBUG] proc_open done in 4468 ms; code=0; res.len=3152
[2025-08-21 04:53:13][351684180144525][5074 ms][DEBUG] END   runCmdUntilRes#1 in 4468 ms
[2025-08-21 04:53:13][351684180144525][5074 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 04:55:07][357712352009061][0 ms][INFO] === Request start ===
[2025-08-21 04:55:07][357712352009061][1 ms][DEBUG] START check_frida
[2025-08-21 04:55:07][357712352009061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 04:55:07][357712352009061][316 ms][DEBUG] SU: done in 315 ms; outroot         20950     1 2263084   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 04:55:07][357712352009061][316 ms][DEBUG] check_frida: running
[2025-08-21 04:55:07][357712352009061][316 ms][DEBUG] END   check_frida in 315 ms
[2025-08-21 04:55:07][357712352009061][316 ms][DEBUG] START check_scloud
[2025-08-21 04:55:07][357712352009061][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 04:55:08][357712352009061][597 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23629696 72932 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 04:55:08][357712352009061][597 ms][DEBUG] targetPkg: running
[2025-08-21 04:55:08][357712352009061][597 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 04:55:08][357712352009061][597 ms][DEBUG] rawBody.length=1161
[2025-08-21 04:55:08][357712352009061][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NzEyMzUyMDA5MDYxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFczMUJTRFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI4NSJ9'" -e "main()" -q"
[2025-08-21 04:55:08][357712352009061][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 04:55:08][357712352009061][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NzEyMzUyMDA5MDYxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFczMUJTRFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI4NSJ9'" -e "main()" -q"
[2025-08-21 04:55:10][357712352009061][3221 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NzEyMzUyMDA5MDYxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFczMUJTRFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI4NSJ9"\r\n
[2025-08-21 04:55:12][357712352009061][5252 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c2a31b2-ee83-4e95-bb42-4b3aea690db1","id":"QR_2c2a31b2-ee83-4e95-bb42-4b3aea690db1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 04:55:12][357712352009061][5253 ms][DEBUG] proc_open done in 4655 ms; code=0; res.len=3152
[2025-08-21 04:55:12][357712352009061][5253 ms][DEBUG] END   runCmdUntilRes#1 in 4655 ms
[2025-08-21 04:55:12][357712352009061][5253 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:01:09][356973940178898][1 ms][INFO] === Request start ===
[2025-08-21 05:01:09][356973940178898][2 ms][DEBUG] START check_frida
[2025-08-21 05:01:09][356973940178898][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:01:09][356973940178898][303 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2263084   4412 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:01:09][356973940178898][303 ms][DEBUG] check_frida: running
[2025-08-21 05:01:09][356973940178898][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 05:01:09][356973940178898][303 ms][DEBUG] START check_scloud
[2025-08-21 05:01:09][356973940178898][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:01:09][356973940178898][584 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23629728 72708 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:01:09][356973940178898][584 ms][DEBUG] targetPkg: running
[2025-08-21 05:01:09][356973940178898][584 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 05:01:09][356973940178898][584 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:01:09][356973940178898][585 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTczOTQwMTc4ODk4IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDMwODBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI5NyJ9'" -e "main()" -q"
[2025-08-21 05:01:09][356973940178898][585 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:01:09][356973940178898][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTczOTQwMTc4ODk4IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDMwODBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI5NyJ9'" -e "main()" -q"
[2025-08-21 05:01:12][356973940178898][3193 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTczOTQwMTc4ODk4IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDMwODBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI5NyJ9"\r\n
[2025-08-21 05:01:14][356973940178898][5349 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e658fd5a-7e30-473d-a447-0d4fc55528cb","id":"QR_e658fd5a-7e30-473d-a447-0d4fc55528cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:01:14][356973940178898][5349 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 05:01:14][356973940178898][5349 ms][DEBUG] END   runCmdUntilRes#1 in 4764 ms
[2025-08-21 05:01:14][356973940178898][5349 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:22:09][350962372064904][1 ms][INFO] === Request start ===
[2025-08-21 05:22:09][350962372064904][2 ms][DEBUG] START check_frida
[2025-08-21 05:22:09][350962372064904][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:22:09][350962372064904][306 ms][DEBUG] SU: done in 304 ms; outroot         20950     1 2263084   4200 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:22:09][350962372064904][306 ms][DEBUG] check_frida: running
[2025-08-21 05:22:09][350962372064904][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 05:22:09][350962372064904][306 ms][DEBUG] START check_internet
[2025-08-21 05:22:09][350962372064904][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 05:22:10][350962372064904][931 ms][DEBUG] SU: done in 625 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.684/201.684/201.684/0.000 ms\n
[2025-08-21 05:22:10][350962372064904][931 ms][DEBUG] check_internet: online
[2025-08-21 05:22:10][350962372064904][931 ms][DEBUG] END   check_internet in 625 ms
[2025-08-21 05:22:10][350962372064904][931 ms][DEBUG] START check_scloud
[2025-08-21 05:22:10][350962372064904][931 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:22:10][350962372064904][1197 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23612276 72268 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:22:10][350962372064904][1197 ms][DEBUG] targetPkg: running
[2025-08-21 05:22:10][350962372064904][1197 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 05:22:10][350962372064904][1197 ms][DEBUG] rawBody.length=1160
[2025-08-21 05:22:10][350962372064904][1197 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTYyMzcyMDY0OTA0IiwibW9kZWwiOiJTTS1TOTA4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q0MlJGWUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDE0In0='" -e "main()" -q"
[2025-08-21 05:22:10][350962372064904][1197 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:22:10][350962372064904][1197 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTYyMzcyMDY0OTA0IiwibW9kZWwiOiJTTS1TOTA4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q0MlJGWUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDE0In0='" -e "main()" -q"
[2025-08-21 05:22:13][350962372064904][3868 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTYyMzcyMDY0OTA0IiwibW9kZWwiOiJTTS1TOTA4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q0MlJGWUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDE0In0="\r\n
[2025-08-21 05:22:16][350962372064904][7554 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c249d86a-e0ae-432c-82cc-9620fdde49ed","id":"QR_c249d86a-e0ae-432c-82cc-9620fdde49ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:22:16][350962372064904][7554 ms][DEBUG] proc_open done in 6357 ms; code=0; res.len=3152
[2025-08-21 05:22:16][350962372064904][7555 ms][DEBUG] END   runCmdUntilRes#1 in 6357 ms
[2025-08-21 05:22:16][350962372064904][7555 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:22:28][356414815901346][0 ms][INFO] === Request start ===
[2025-08-21 05:22:28][356414815901346][1 ms][DEBUG] START check_frida
[2025-08-21 05:22:28][356414815901346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:22:29][356414815901346][313 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2263084   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:22:29][356414815901346][313 ms][DEBUG] check_frida: running
[2025-08-21 05:22:29][356414815901346][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 05:22:29][356414815901346][313 ms][DEBUG] START check_internet
[2025-08-21 05:22:29][356414815901346][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 05:22:29][356414815901346][641 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.687/219.687/219.687/0.000 ms\n
[2025-08-21 05:22:29][356414815901346][641 ms][DEBUG] check_internet: online
[2025-08-21 05:22:29][356414815901346][641 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 05:22:29][356414815901346][641 ms][DEBUG] START check_scloud
[2025-08-21 05:22:29][356414815901346][641 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:22:29][356414815901346][938 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23629792 72868 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:22:29][356414815901346][938 ms][DEBUG] targetPkg: running
[2025-08-21 05:22:29][356414815901346][938 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 05:22:29][356414815901346][938 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:22:29][356414815901346][938 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE1OTAxMzQ2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYyOCJ9'" -e "main()" -q"
[2025-08-21 05:22:29][356414815901346][938 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:22:29][356414815901346][938 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE1OTAxMzQ2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYyOCJ9'" -e "main()" -q"
[2025-08-21 05:22:32][356414815901346][3609 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE0ODE1OTAxMzQ2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYyOCJ9"\r\n
[2025-08-21 05:22:34][356414815901346][5546 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n
[2025-08-21 05:22:34][356414815901346][5546 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=101
[2025-08-21 05:22:34][356414815901346][5546 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-21 05:22:34][356414815901346][5546 ms][INFO] SUCCESS response from frida (len=101)
[2025-08-21 05:22:34][][0 ms][INFO] === Request start ===
[2025-08-21 05:22:34][][1 ms][DEBUG] START check_frida
[2025-08-21 05:22:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:22:35][][274 ms][DEBUG] SU: done in 272 ms; outroot         20950     1 2279504   4404 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:22:35][][274 ms][DEBUG] check_frida: running
[2025-08-21 05:22:35][][274 ms][DEBUG] END   check_frida in 273 ms
[2025-08-21 05:22:35][][274 ms][DEBUG] START check_internet
[2025-08-21 05:22:35][][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 05:22:35][][508 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.018/143.018/143.018/0.000 ms\n
[2025-08-21 05:22:35][][508 ms][DEBUG] check_internet: online
[2025-08-21 05:22:35][][508 ms][DEBUG] END   check_internet in 235 ms
[2025-08-21 05:22:35][][508 ms][DEBUG] START check_scloud
[2025-08-21 05:22:35][][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:22:35][][805 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23629824 72024 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:22:35][][805 ms][DEBUG] targetPkg: running
[2025-08-21 05:22:35][][805 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 05:22:35][][805 ms][DEBUG] rawBody.length=1131
[2025-08-21 05:22:35][][805 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQ2NSJ9'" -e "main()" -q"
[2025-08-21 05:22:35][][805 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:22:35][][805 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQ2NSJ9'" -e "main()" -q"
[2025-08-21 05:22:38][][3460 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQ2NSJ9"\r\n
[2025-08-21 05:22:39][][4976 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n
[2025-08-21 05:22:39][][4976 ms][DEBUG] proc_open done in 4171 ms; code=0; res.len=101
[2025-08-21 05:22:39][][4976 ms][DEBUG] END   runCmdUntilRes#1 in 4171 ms
[2025-08-21 05:22:39][][4976 ms][INFO] SUCCESS response from frida (len=101)
[2025-08-21 05:22:40][][0 ms][INFO] === Request start ===
[2025-08-21 05:22:40][][1 ms][DEBUG] START check_frida
[2025-08-21 05:22:40][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:22:40][][245 ms][DEBUG] SU: done in 244 ms; outroot         20950     1 2279504   4412 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:22:40][][246 ms][DEBUG] check_frida: running
[2025-08-21 05:22:40][][246 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 05:22:40][][246 ms][DEBUG] START check_internet
[2025-08-21 05:22:40][][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 05:22:40][][480 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.628/145.628/145.628/0.000 ms\n
[2025-08-21 05:22:40][][480 ms][DEBUG] check_internet: online
[2025-08-21 05:22:40][][480 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 05:22:40][][480 ms][DEBUG] START check_scloud
[2025-08-21 05:22:40][][480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:22:40][][777 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23629856 72580 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:22:40][][777 ms][DEBUG] targetPkg: running
[2025-08-21 05:22:40][][777 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 05:22:40][][777 ms][DEBUG] rawBody.length=1131
[2025-08-21 05:22:40][][777 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkzOCJ9'" -e "main()" -q"
[2025-08-21 05:22:40][][777 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:22:40][][777 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkzOCJ9'" -e "main()" -q"
[2025-08-21 05:22:43][][3417 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkzOCJ9"\r\n
[2025-08-21 05:22:44][][4916 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n
[2025-08-21 05:22:44][][4917 ms][DEBUG] proc_open done in 4140 ms; code=0; res.len=101
[2025-08-21 05:22:44][][4917 ms][DEBUG] END   runCmdUntilRes#1 in 4140 ms
[2025-08-21 05:22:44][][4917 ms][INFO] SUCCESS response from frida (len=101)
[2025-08-21 05:22:47][356414815901346][0 ms][INFO] === Request start ===
[2025-08-21 05:22:47][356414815901346][1 ms][DEBUG] START check_frida
[2025-08-21 05:22:47][356414815901346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:22:47][356414815901346][306 ms][DEBUG] SU: done in 305 ms; outroot         20950     1 2279504   4420 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:22:47][356414815901346][306 ms][DEBUG] check_frida: running
[2025-08-21 05:22:47][356414815901346][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 05:22:47][356414815901346][307 ms][DEBUG] START check_internet
[2025-08-21 05:22:47][356414815901346][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 05:22:48][356414815901346][635 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.184/227.184/227.184/0.000 ms\n
[2025-08-21 05:22:48][356414815901346][635 ms][DEBUG] check_internet: online
[2025-08-21 05:22:48][356414815901346][635 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 05:22:48][356414815901346][635 ms][DEBUG] START check_scloud
[2025-08-21 05:22:48][356414815901346][635 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:22:48][356414815901346][931 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23629888 72464 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:22:48][356414815901346][931 ms][DEBUG] targetPkg: running
[2025-08-21 05:22:48][356414815901346][931 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 05:22:48][356414815901346][931 ms][DEBUG] rawBody.length=1160
[2025-08-21 05:22:48][356414815901346][931 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE1OTAxMzQ2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjI3In0='" -e "main()" -q"
[2025-08-21 05:22:48][356414815901346][931 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:22:48][356414815901346][931 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE1OTAxMzQ2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjI3In0='" -e "main()" -q"
[2025-08-21 05:22:50][356414815901346][3571 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE0ODE1OTAxMzQ2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjI3In0="\r\n
[2025-08-21 05:22:54][356414815901346][6758 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_383f2e57-d1f2-4628-b5a9-3e97bcca0c91","id":"QR_383f2e57-d1f2-4628-b5a9-3e97bcca0c91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:22:54][356414815901346][6758 ms][DEBUG] proc_open done in 5827 ms; code=0; res.len=3152
[2025-08-21 05:22:54][356414815901346][6758 ms][DEBUG] END   runCmdUntilRes#1 in 5827 ms
[2025-08-21 05:22:54][356414815901346][6758 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:27:04][351477978633910][0 ms][INFO] === Request start ===
[2025-08-21 05:27:04][351477978633910][0 ms][DEBUG] START check_frida
[2025-08-21 05:27:04][351477978633910][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:27:04][351477978633910][298 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:27:04][351477978633910][298 ms][DEBUG] check_frida: running
[2025-08-21 05:27:04][351477978633910][298 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 05:27:04][351477978633910][298 ms][DEBUG] START check_scloud
[2025-08-21 05:27:04][351477978633910][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:27:05][351477978633910][579 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23629920 71868 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:27:05][351477978633910][579 ms][DEBUG] targetPkg: running
[2025-08-21 05:27:05][351477978633910][579 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 05:27:05][351477978633910][579 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:27:05][351477978633910][580 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc4NjMzOTEwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDVLOEZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI3MyJ9'" -e "main()" -q"
[2025-08-21 05:27:05][351477978633910][580 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:27:05][351477978633910][580 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc4NjMzOTEwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDVLOEZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI3MyJ9'" -e "main()" -q"
[2025-08-21 05:27:07][351477978633910][3157 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDc3OTc4NjMzOTEwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDVLOEZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI3MyJ9"\r\n
[2025-08-21 05:27:09][351477978633910][5093 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_933df272-aa0f-4d3e-bcef-f3d870c3ba69","id":"QR_933df272-aa0f-4d3e-bcef-f3d870c3ba69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:27:09][351477978633910][5094 ms][DEBUG] proc_open done in 4514 ms; code=0; res.len=3152
[2025-08-21 05:27:09][351477978633910][5094 ms][DEBUG] END   runCmdUntilRes#1 in 4514 ms
[2025-08-21 05:27:09][351477978633910][5094 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:37:03][351877472568597][0 ms][INFO] === Request start ===
[2025-08-21 05:37:03][351877472568597][0 ms][DEBUG] START check_frida
[2025-08-21 05:37:03][351877472568597][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:37:04][351877472568597][308 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2262072   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:37:04][351877472568597][308 ms][DEBUG] check_frida: running
[2025-08-21 05:37:04][351877472568597][308 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 05:37:04][351877472568597][308 ms][DEBUG] START check_scloud
[2025-08-21 05:37:04][351877472568597][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:37:04][351877472568597][590 ms][DEBUG] SU: done in 282 ms; outu0_a118      20979 10674 23612468 72880 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:37:04][351877472568597][590 ms][DEBUG] targetPkg: running
[2025-08-21 05:37:04][351877472568597][590 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 05:37:04][351877472568597][590 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:37:04][351877472568597][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDcyNTY4NTk3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDhHNDZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYxMCJ9'" -e "main()" -q"
[2025-08-21 05:37:04][351877472568597][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:37:04][351877472568597][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDcyNTY4NTk3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDhHNDZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYxMCJ9'" -e "main()" -q"
[2025-08-21 05:37:06][351877472568597][3198 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDcyNTY4NTk3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDhHNDZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYxMCJ9"\r\n
[2025-08-21 05:37:09][351877472568597][5541 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c40f7121-8b65-4dc3-9c6a-298141b863d2","id":"QR_c40f7121-8b65-4dc3-9c6a-298141b863d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:37:09][351877472568597][5541 ms][DEBUG] proc_open done in 4951 ms; code=0; res.len=3152
[2025-08-21 05:37:09][351877472568597][5541 ms][DEBUG] END   runCmdUntilRes#1 in 4951 ms
[2025-08-21 05:37:09][351877472568597][5542 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:37:18][354177290212644][0 ms][INFO] === Request start ===
[2025-08-21 05:37:18][354177290212644][1 ms][DEBUG] START check_frida
[2025-08-21 05:37:18][354177290212644][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:37:18][354177290212644][314 ms][DEBUG] SU: done in 313 ms; outroot         20950     1 2279504   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:37:18][354177290212644][314 ms][DEBUG] check_frida: running
[2025-08-21 05:37:18][354177290212644][314 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 05:37:18][354177290212644][314 ms][DEBUG] START check_scloud
[2025-08-21 05:37:18][354177290212644][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:37:18][354177290212644][626 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23629984 72376 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:37:18][354177290212644][626 ms][DEBUG] targetPkg: running
[2025-08-21 05:37:18][354177290212644][626 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 05:37:18][354177290212644][626 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:37:18][354177290212644][626 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTc3MjkwMjEyNjQ0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMEZCUUhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQS0QiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgzNSJ9'" -e "main()" -q"
[2025-08-21 05:37:18][354177290212644][626 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:37:18][354177290212644][626 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTc3MjkwMjEyNjQ0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMEZCUUhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQS0QiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgzNSJ9'" -e "main()" -q"
[2025-08-21 05:37:21][354177290212644][3235 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTc3MjkwMjEyNjQ0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMEZCUUhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQS0QiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgzNSJ9"\r\n
[2025-08-21 05:37:23][354177290212644][5000 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5563151f-05a1-4447-bf96-bdd05bb4f256","id":"QR_5563151f-05a1-4447-bf96-bdd05bb4f256","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:37:23][354177290212644][5000 ms][DEBUG] proc_open done in 4374 ms; code=0; res.len=3152
[2025-08-21 05:37:23][354177290212644][5000 ms][DEBUG] END   runCmdUntilRes#1 in 4374 ms
[2025-08-21 05:37:23][354177290212644][5000 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:44:08][352677532474813][0 ms][INFO] === Request start ===
[2025-08-21 05:44:08][352677532474813][0 ms][DEBUG] START check_frida
[2025-08-21 05:44:08][352677532474813][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:44:08][352677532474813][292 ms][DEBUG] SU: done in 292 ms; outroot         20950     1 2263084   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:44:08][352677532474813][292 ms][DEBUG] check_frida: running
[2025-08-21 05:44:08][352677532474813][292 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 05:44:08][352677532474813][292 ms][DEBUG] START check_internet
[2025-08-21 05:44:08][352677532474813][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 05:44:08][352677532474813][745 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.561/201.561/201.561/0.000 ms\n
[2025-08-21 05:44:08][352677532474813][745 ms][DEBUG] check_internet: online
[2025-08-21 05:44:08][352677532474813][746 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 05:44:08][352677532474813][746 ms][DEBUG] START check_scloud
[2025-08-21 05:44:08][352677532474813][746 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:44:09][352677532474813][995 ms][DEBUG] SU: done in 249 ms; outu0_a118      20979 10674 23612532 71916 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:44:09][352677532474813][995 ms][DEBUG] targetPkg: running
[2025-08-21 05:44:09][352677532474813][995 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 05:44:09][352677532474813][995 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:44:09][352677532474813][996 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMyNDc0ODEzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEI1QTZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA0OCJ9'" -e "main()" -q"
[2025-08-21 05:44:09][352677532474813][996 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:44:09][352677532474813][996 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMyNDc0ODEzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEI1QTZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA0OCJ9'" -e "main()" -q"
[2025-08-21 05:44:11][352677532474813][3619 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjc3NTMyNDc0ODEzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEI1QTZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA0OCJ9"\r\n
[2025-08-21 05:44:13][352677532474813][5713 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e757dd94-492a-4d29-98b0-852d30a4d981","id":"QR_e757dd94-492a-4d29-98b0-852d30a4d981","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:44:13][352677532474813][5713 ms][DEBUG] proc_open done in 4718 ms; code=0; res.len=3152
[2025-08-21 05:44:13][352677532474813][5713 ms][DEBUG] END   runCmdUntilRes#1 in 4718 ms
[2025-08-21 05:44:13][352677532474813][5713 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:46:06][353680115214944][0 ms][INFO] === Request start ===
[2025-08-21 05:46:06][353680115214944][1 ms][DEBUG] START check_frida
[2025-08-21 05:46:06][353680115214944][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:46:07][353680115214944][307 ms][DEBUG] SU: done in 306 ms; outroot         20950     1 2263084   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:46:07][353680115214944][307 ms][DEBUG] check_frida: running
[2025-08-21 05:46:07][353680115214944][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 05:46:07][353680115214944][307 ms][DEBUG] START check_internet
[2025-08-21 05:46:07][353680115214944][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 05:46:07][353680115214944][745 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.552/201.552/201.552/0.000 ms\n
[2025-08-21 05:46:07][353680115214944][745 ms][DEBUG] check_internet: online
[2025-08-21 05:46:07][353680115214944][745 ms][DEBUG] END   check_internet in 437 ms
[2025-08-21 05:46:07][353680115214944][745 ms][DEBUG] START check_scloud
[2025-08-21 05:46:07][353680115214944][745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:46:07][353680115214944][1026 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23630048 72528 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:46:07][353680115214944][1026 ms][DEBUG] targetPkg: running
[2025-08-21 05:46:07][353680115214944][1026 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 05:46:07][353680115214944][1026 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:46:07][353680115214944][1026 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjgwMTE1MjE0OTQ0IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4zM0RNOEVLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYVEMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk4OCJ9'" -e "main()" -q"
[2025-08-21 05:46:07][353680115214944][1026 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:46:07][353680115214944][1027 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjgwMTE1MjE0OTQ0IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4zM0RNOEVLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYVEMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk4OCJ9'" -e "main()" -q"
[2025-08-21 05:46:10][353680115214944][3619 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjgwMTE1MjE0OTQ0IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4zM0RNOEVLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYVEMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk4OCJ9"\r\n
[2025-08-21 05:46:13][353680115214944][6759 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8613fd88-0e88-4af1-9d3f-e0753703ab8c","id":"QR_8613fd88-0e88-4af1-9d3f-e0753703ab8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:46:13][353680115214944][6759 ms][DEBUG] proc_open done in 5732 ms; code=0; res.len=3152
[2025-08-21 05:46:13][353680115214944][6759 ms][DEBUG] END   runCmdUntilRes#1 in 5732 ms
[2025-08-21 05:46:13][353680115214944][6759 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:50:04][357962505242057][1 ms][INFO] === Request start ===
[2025-08-21 05:50:04][357962505242057][2 ms][DEBUG] START check_frida
[2025-08-21 05:50:04][357962505242057][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:50:05][357962505242057][297 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2264096   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:50:05][357962505242057][297 ms][DEBUG] check_frida: running
[2025-08-21 05:50:05][357962505242057][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 05:50:05][357962505242057][297 ms][DEBUG] START check_internet
[2025-08-21 05:50:05][357962505242057][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 05:50:05][357962505242057][828 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.595/200.595/200.595/0.000 ms\n
[2025-08-21 05:50:05][357962505242057][828 ms][DEBUG] check_internet: online
[2025-08-21 05:50:05][357962505242057][828 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 05:50:05][357962505242057][828 ms][DEBUG] START check_scloud
[2025-08-21 05:50:05][357962505242057][828 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:50:05][357962505242057][1063 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23630080 72360 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:50:05][357962505242057][1063 ms][DEBUG] targetPkg: running
[2025-08-21 05:50:05][357962505242057][1063 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 05:50:05][357962505242057][1063 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:50:05][357962505242057][1063 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA1MjQyMDU3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDYwOVpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc5OSJ9'" -e "main()" -q"
[2025-08-21 05:50:05][357962505242057][1063 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:50:05][357962505242057][1063 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA1MjQyMDU3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDYwOVpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc5OSJ9'" -e "main()" -q"
[2025-08-21 05:50:08][357962505242057][3609 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTYyNTA1MjQyMDU3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDYwOVpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc5OSJ9"\r\n
[2025-08-21 05:50:10][357962505242057][5686 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2afe6dba-687f-40e2-ba07-322250a488f1","id":"QR_2afe6dba-687f-40e2-ba07-322250a488f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:50:10][357962505242057][5687 ms][DEBUG] proc_open done in 4624 ms; code=0; res.len=3152
[2025-08-21 05:50:10][357962505242057][5687 ms][DEBUG] END   runCmdUntilRes#1 in 4624 ms
[2025-08-21 05:50:10][357962505242057][5687 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:52:07][351681593330675][1 ms][INFO] === Request start ===
[2025-08-21 05:52:07][351681593330675][2 ms][DEBUG] START check_frida
[2025-08-21 05:52:07][351681593330675][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:52:07][351681593330675][268 ms][DEBUG] SU: done in 266 ms; outroot         20950     1 2263084   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:52:07][351681593330675][268 ms][DEBUG] check_frida: running
[2025-08-21 05:52:07][351681593330675][268 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 05:52:07][351681593330675][268 ms][DEBUG] START check_internet
[2025-08-21 05:52:07][351681593330675][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 05:52:08][351681593330675][565 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.952/204.952/204.952/0.000 ms\n
[2025-08-21 05:52:08][351681593330675][565 ms][DEBUG] check_internet: online
[2025-08-21 05:52:08][351681593330675][565 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 05:52:08][351681593330675][565 ms][DEBUG] START check_scloud
[2025-08-21 05:52:08][351681593330675][565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:52:08][351681593330675][848 ms][DEBUG] SU: done in 282 ms; outu0_a118      20979 10674 23630112 72952 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:52:08][351681593330675][848 ms][DEBUG] targetPkg: running
[2025-08-21 05:52:08][351681593330675][848 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 05:52:08][351681593330675][848 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:52:08][351681593330675][848 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjgxNTkzMzMwNjc1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMFJOQ0ZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDE4MCJ9'" -e "main()" -q"
[2025-08-21 05:52:08][351681593330675][848 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:52:08][351681593330675][848 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjgxNTkzMzMwNjc1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMFJOQ0ZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDE4MCJ9'" -e "main()" -q"
[2025-08-21 05:52:11][351681593330675][3408 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjgxNTkzMzMwNjc1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMFJOQ0ZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDE4MCJ9"\r\n
[2025-08-21 05:52:13][351681593330675][5486 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c712ee2-d4c1-4ad6-a80c-d2cbde609660","id":"QR_0c712ee2-d4c1-4ad6-a80c-d2cbde609660","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:52:13][351681593330675][5486 ms][DEBUG] proc_open done in 4638 ms; code=0; res.len=3152
[2025-08-21 05:52:13][351681593330675][5486 ms][DEBUG] END   runCmdUntilRes#1 in 4638 ms
[2025-08-21 05:52:13][351681593330675][5486 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:53:06][352257980187595][0 ms][INFO] === Request start ===
[2025-08-21 05:53:06][352257980187595][1 ms][DEBUG] START check_frida
[2025-08-21 05:53:06][352257980187595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:53:06][352257980187595][277 ms][DEBUG] SU: done in 276 ms; outroot         20950     1 2263084   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:53:06][352257980187595][277 ms][DEBUG] check_frida: running
[2025-08-21 05:53:06][352257980187595][277 ms][DEBUG] END   check_frida in 276 ms
[2025-08-21 05:53:06][352257980187595][277 ms][DEBUG] START check_scloud
[2025-08-21 05:53:06][352257980187595][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:53:07][352257980187595][558 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23630144 72660 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:53:07][352257980187595][558 ms][DEBUG] targetPkg: running
[2025-08-21 05:53:07][352257980187595][558 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 05:53:07][352257980187595][558 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:53:07][352257980187595][558 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg2MyJ9'" -e "main()" -q"
[2025-08-21 05:53:07][352257980187595][558 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:53:07][352257980187595][558 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg2MyJ9'" -e "main()" -q"
[2025-08-21 05:53:09][352257980187595][3151 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg2MyJ9"\r\n
[2025-08-21 05:53:11][352257980187595][5010 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 05:53:11][352257980187595][5010 ms][DEBUG] proc_open done in 4452 ms; code=0; res.len=93
[2025-08-21 05:53:11][352257980187595][5010 ms][DEBUG] END   runCmdUntilRes#1 in 4452 ms
[2025-08-21 05:53:11][352257980187595][5010 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 05:53:11][][0 ms][INFO] === Request start ===
[2025-08-21 05:53:11][][1 ms][DEBUG] START check_frida
[2025-08-21 05:53:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:53:12][][292 ms][DEBUG] SU: done in 291 ms; outroot         20950     1 2279504   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:53:12][][292 ms][DEBUG] check_frida: running
[2025-08-21 05:53:12][][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 05:53:12][][292 ms][DEBUG] START check_scloud
[2025-08-21 05:53:12][][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:53:12][][573 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23630176 72124 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:53:12][][573 ms][DEBUG] targetPkg: running
[2025-08-21 05:53:12][][573 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 05:53:12][][574 ms][DEBUG] rawBody.length=1131
[2025-08-21 05:53:12][][574 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU5OSJ9'" -e "main()" -q"
[2025-08-21 05:53:12][][574 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:53:12][][574 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU5OSJ9'" -e "main()" -q"
[2025-08-21 05:53:15][][3135 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU5OSJ9"\r\n
[2025-08-21 05:53:16][][4900 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 05:53:16][][4900 ms][DEBUG] proc_open done in 4327 ms; code=0; res.len=107
[2025-08-21 05:53:16][][4900 ms][DEBUG] END   runCmdUntilRes#1 in 4327 ms
[2025-08-21 05:53:16][][4900 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 05:53:17][][0 ms][INFO] === Request start ===
[2025-08-21 05:53:17][][1 ms][DEBUG] START check_frida
[2025-08-21 05:53:17][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:53:17][][239 ms][DEBUG] SU: done in 238 ms; outroot         20950     1 2279504   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:53:17][][239 ms][DEBUG] check_frida: running
[2025-08-21 05:53:17][][239 ms][DEBUG] END   check_frida in 238 ms
[2025-08-21 05:53:17][][239 ms][DEBUG] START check_scloud
[2025-08-21 05:53:17][][239 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:53:17][][505 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23630208 72676 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:53:17][][505 ms][DEBUG] targetPkg: running
[2025-08-21 05:53:17][][505 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 05:53:17][][505 ms][DEBUG] rawBody.length=1131
[2025-08-21 05:53:17][][505 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgxNiJ9'" -e "main()" -q"
[2025-08-21 05:53:17][][505 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:53:17][][505 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgxNiJ9'" -e "main()" -q"
[2025-08-21 05:53:20][][3020 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgxNiJ9"\r\n
[2025-08-21 05:53:21][][4488 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 05:53:21][][4488 ms][DEBUG] proc_open done in 3983 ms; code=0; res.len=107
[2025-08-21 05:53:21][][4488 ms][DEBUG] END   runCmdUntilRes#1 in 3983 ms
[2025-08-21 05:53:21][][4488 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 05:53:24][352257980187595][0 ms][INFO] === Request start ===
[2025-08-21 05:53:24][352257980187595][1 ms][DEBUG] START check_frida
[2025-08-21 05:53:24][352257980187595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:53:24][352257980187595][296 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2279504   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:53:24][352257980187595][296 ms][DEBUG] check_frida: running
[2025-08-21 05:53:24][352257980187595][296 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 05:53:24][352257980187595][297 ms][DEBUG] START check_scloud
[2025-08-21 05:53:24][352257980187595][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:53:24][352257980187595][578 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23630240 73328 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:53:24][352257980187595][578 ms][DEBUG] targetPkg: running
[2025-08-21 05:53:24][352257980187595][578 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 05:53:24][352257980187595][578 ms][DEBUG] rawBody.length=1160
[2025-08-21 05:53:24][352257980187595][578 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTI2In0='" -e "main()" -q"
[2025-08-21 05:53:24][352257980187595][578 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:53:24][352257980187595][578 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTI2In0='" -e "main()" -q"
[2025-08-21 05:53:27][352257980187595][3124 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTI2In0="\r\n
[2025-08-21 05:53:30][352257980187595][6982 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55e8dff4-5c55-40cb-b829-63f2ce6f5793","id":"QR_55e8dff4-5c55-40cb-b829-63f2ce6f5793","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:53:30][352257980187595][6983 ms][DEBUG] proc_open done in 6405 ms; code=0; res.len=3152
[2025-08-21 05:53:30][352257980187595][6983 ms][DEBUG] END   runCmdUntilRes#1 in 6405 ms
[2025-08-21 05:53:30][352257980187595][6983 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 05:58:08][358184575686993][1 ms][INFO] === Request start ===
[2025-08-21 05:58:08][358184575686993][2 ms][DEBUG] START check_frida
[2025-08-21 05:58:08][358184575686993][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 05:58:08][358184575686993][246 ms][DEBUG] SU: done in 244 ms; outroot         20950     1 2263084   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 05:58:08][358184575686993][246 ms][DEBUG] check_frida: running
[2025-08-21 05:58:08][358184575686993][246 ms][DEBUG] END   check_frida in 244 ms
[2025-08-21 05:58:08][358184575686993][246 ms][DEBUG] START check_internet
[2025-08-21 05:58:08][358184575686993][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 05:58:09][358184575686993][777 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.827/201.827/201.827/0.000 ms\n
[2025-08-21 05:58:09][358184575686993][777 ms][DEBUG] check_internet: online
[2025-08-21 05:58:09][358184575686993][777 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 05:58:09][358184575686993][777 ms][DEBUG] START check_scloud
[2025-08-21 05:58:09][358184575686993][777 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 05:58:09][358184575686993][1027 ms][DEBUG] SU: done in 249 ms; outu0_a118      20979 10674 23630272 72776 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 05:58:09][358184575686993][1027 ms][DEBUG] targetPkg: running
[2025-08-21 05:58:09][358184575686993][1027 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 05:58:09][358184575686993][1027 ms][DEBUG] rawBody.length=1161
[2025-08-21 05:58:09][358184575686993][1027 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTg0NTc1Njg2OTkzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMExZUThSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgwOSJ9'" -e "main()" -q"
[2025-08-21 05:58:09][358184575686993][1027 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 05:58:09][358184575686993][1027 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTg0NTc1Njg2OTkzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMExZUThSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgwOSJ9'" -e "main()" -q"
[2025-08-21 05:58:11][358184575686993][3573 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MTg0NTc1Njg2OTkzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMExZUThSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgwOSJ9"\r\n
[2025-08-21 05:58:13][358184575686993][5651 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0230acce-5fe6-4312-af6d-108f5e53e159","id":"QR_0230acce-5fe6-4312-af6d-108f5e53e159","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 05:58:13][358184575686993][5651 ms][DEBUG] proc_open done in 4624 ms; code=0; res.len=3152
[2025-08-21 05:58:13][358184575686993][5651 ms][DEBUG] END   runCmdUntilRes#1 in 4624 ms
[2025-08-21 05:58:13][358184575686993][5651 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:03:07][357718899458034][1 ms][INFO] === Request start ===
[2025-08-21 06:03:07][357718899458034][2 ms][DEBUG] START check_frida
[2025-08-21 06:03:07][357718899458034][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:03:07][357718899458034][304 ms][DEBUG] SU: done in 303 ms; outroot         20950     1 2263084   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:03:07][357718899458034][304 ms][DEBUG] check_frida: running
[2025-08-21 06:03:07][357718899458034][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 06:03:07][357718899458034][304 ms][DEBUG] START check_scloud
[2025-08-21 06:03:07][357718899458034][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:03:07][357718899458034][601 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23630304 72064 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:03:07][357718899458034][601 ms][DEBUG] targetPkg: running
[2025-08-21 06:03:07][357718899458034][601 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:03:07][357718899458034][601 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:03:07][357718899458034][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NzE4ODk5NDU4MDM0IiwibW9kZWwiOiJTTS1NMTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dCMDRYTkRQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk2NCJ9'" -e "main()" -q"
[2025-08-21 06:03:07][357718899458034][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:03:07][357718899458034][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NzE4ODk5NDU4MDM0IiwibW9kZWwiOiJTTS1NMTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dCMDRYTkRQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk2NCJ9'" -e "main()" -q"
[2025-08-21 06:03:10][357718899458034][3225 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NzE4ODk5NDU4MDM0IiwibW9kZWwiOiJTTS1NMTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dCMDRYTkRQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk2NCJ9"\r\n
[2025-08-21 06:03:12][357718899458034][5724 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4b3762f-13bb-4e6e-823b-cd0e33ea0348","id":"QR_a4b3762f-13bb-4e6e-823b-cd0e33ea0348","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:03:12][357718899458034][5725 ms][DEBUG] proc_open done in 5123 ms; code=0; res.len=3152
[2025-08-21 06:03:12][357718899458034][5725 ms][DEBUG] END   runCmdUntilRes#1 in 5123 ms
[2025-08-21 06:03:12][357718899458034][5725 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:10:06][357153477191684][1 ms][INFO] === Request start ===
[2025-08-21 06:10:06][357153477191684][2 ms][DEBUG] START check_frida
[2025-08-21 06:10:06][357153477191684][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:10:06][357153477191684][305 ms][DEBUG] SU: done in 304 ms; outroot         20950     1 2263084   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:10:06][357153477191684][305 ms][DEBUG] check_frida: running
[2025-08-21 06:10:06][357153477191684][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 06:10:06][357153477191684][305 ms][DEBUG] START check_internet
[2025-08-21 06:10:06][357153477191684][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:10:07][357153477191684][774 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.300/202.300/202.300/0.000 ms\n
[2025-08-21 06:10:07][357153477191684][774 ms][DEBUG] check_internet: online
[2025-08-21 06:10:07][357153477191684][774 ms][DEBUG] END   check_internet in 468 ms
[2025-08-21 06:10:07][357153477191684][774 ms][DEBUG] START check_scloud
[2025-08-21 06:10:07][357153477191684][774 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:10:07][357153477191684][1039 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23612852 73376 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:10:07][357153477191684][1039 ms][DEBUG] targetPkg: running
[2025-08-21 06:10:07][357153477191684][1039 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 06:10:07][357153477191684][1039 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:10:07][357153477191684][1039 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MTUzNDc3MTkxNjg0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFBBUFBYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAxNiJ9'" -e "main()" -q"
[2025-08-21 06:10:07][357153477191684][1039 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:10:07][357153477191684][1039 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MTUzNDc3MTkxNjg0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFBBUFBYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAxNiJ9'" -e "main()" -q"
[2025-08-21 06:10:10][357153477191684][3695 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MTUzNDc3MTkxNjg0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFBBUFBYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAxNiJ9"\r\n
[2025-08-21 06:10:15][357153477191684][9147 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_069110a3-2d89-441b-94b6-a422f1774c6c","id":"QR_069110a3-2d89-441b-94b6-a422f1774c6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:10:15][357153477191684][9147 ms][DEBUG] proc_open done in 8108 ms; code=0; res.len=3152
[2025-08-21 06:10:15][357153477191684][9148 ms][DEBUG] END   runCmdUntilRes#1 in 8108 ms
[2025-08-21 06:10:15][357153477191684][9148 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:11:09][350482803432075][0 ms][INFO] === Request start ===
[2025-08-21 06:11:09][350482803432075][1 ms][DEBUG] START check_frida
[2025-08-21 06:11:09][350482803432075][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:11:09][350482803432075][296 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2263084   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:11:09][350482803432075][296 ms][DEBUG] check_frida: running
[2025-08-21 06:11:09][350482803432075][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 06:11:09][350482803432075][296 ms][DEBUG] START check_scloud
[2025-08-21 06:11:09][350482803432075][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:11:09][350482803432075][576 ms][DEBUG] SU: done in 280 ms; outu0_a118      20979 10674 23630368 73180 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:11:09][350482803432075][576 ms][DEBUG] targetPkg: running
[2025-08-21 06:11:09][350482803432075][576 ms][DEBUG] END   check_scloud in 280 ms
[2025-08-21 06:11:09][350482803432075][576 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:11:09][350482803432075][576 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDgyODAzNDMyMDc1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQxNSJ9'" -e "main()" -q"
[2025-08-21 06:11:09][350482803432075][576 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:11:09][350482803432075][576 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDgyODAzNDMyMDc1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQxNSJ9'" -e "main()" -q"
[2025-08-21 06:11:12][350482803432075][3215 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDgyODAzNDMyMDc1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQxNSJ9"\r\n
[2025-08-21 06:11:14][350482803432075][5199 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 06:11:14][350482803432075][5199 ms][DEBUG] proc_open done in 4623 ms; code=0; res.len=93
[2025-08-21 06:11:14][350482803432075][5199 ms][DEBUG] END   runCmdUntilRes#1 in 4623 ms
[2025-08-21 06:11:14][350482803432075][5199 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 06:11:14][][0 ms][INFO] === Request start ===
[2025-08-21 06:11:14][][1 ms][DEBUG] START check_frida
[2025-08-21 06:11:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:11:15][][276 ms][DEBUG] SU: done in 275 ms; outroot         20950     1 2279504   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:11:15][][276 ms][DEBUG] check_frida: running
[2025-08-21 06:11:15][][276 ms][DEBUG] END   check_frida in 275 ms
[2025-08-21 06:11:15][][276 ms][DEBUG] START check_scloud
[2025-08-21 06:11:15][][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:11:15][][573 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23630400 73712 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:11:15][][573 ms][DEBUG] targetPkg: running
[2025-08-21 06:11:15][][573 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:11:15][][573 ms][DEBUG] rawBody.length=1131
[2025-08-21 06:11:15][][573 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ2NyJ9'" -e "main()" -q"
[2025-08-21 06:11:15][][573 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:11:15][][573 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ2NyJ9'" -e "main()" -q"
[2025-08-21 06:11:18][][3213 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ2NyJ9"\r\n
[2025-08-21 06:11:19][][4665 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 06:11:19][][4665 ms][DEBUG] proc_open done in 4093 ms; code=0; res.len=107
[2025-08-21 06:11:19][][4665 ms][DEBUG] END   runCmdUntilRes#1 in 4093 ms
[2025-08-21 06:11:19][][4665 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 06:11:19][][0 ms][INFO] === Request start ===
[2025-08-21 06:11:19][][1 ms][DEBUG] START check_frida
[2025-08-21 06:11:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:11:20][][292 ms][DEBUG] SU: done in 291 ms; outroot         20950     1 2279504   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:11:20][][293 ms][DEBUG] check_frida: running
[2025-08-21 06:11:20][][293 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 06:11:20][][293 ms][DEBUG] START check_scloud
[2025-08-21 06:11:20][][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:11:20][][588 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23630432 72640 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:11:20][][589 ms][DEBUG] targetPkg: running
[2025-08-21 06:11:20][][589 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 06:11:20][][589 ms][DEBUG] rawBody.length=1131
[2025-08-21 06:11:20][][589 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA4MSJ9'" -e "main()" -q"
[2025-08-21 06:11:20][][589 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:11:20][][589 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA4MSJ9'" -e "main()" -q"
[2025-08-21 06:11:23][][3228 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA4MSJ9"\r\n
[2025-08-21 06:11:24][][4681 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 06:11:24][][4681 ms][DEBUG] proc_open done in 4092 ms; code=0; res.len=107
[2025-08-21 06:11:24][][4681 ms][DEBUG] END   runCmdUntilRes#1 in 4092 ms
[2025-08-21 06:11:24][][4681 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 06:11:27][350482803432075][1 ms][INFO] === Request start ===
[2025-08-21 06:11:27][350482803432075][1 ms][DEBUG] START check_frida
[2025-08-21 06:11:27][350482803432075][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:11:27][350482803432075][297 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2279504   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:11:27][350482803432075][297 ms][DEBUG] check_frida: running
[2025-08-21 06:11:27][350482803432075][297 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 06:11:27][350482803432075][297 ms][DEBUG] START check_scloud
[2025-08-21 06:11:27][350482803432075][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:11:27][350482803432075][578 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23630464 73212 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:11:27][350482803432075][578 ms][DEBUG] targetPkg: running
[2025-08-21 06:11:27][350482803432075][578 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 06:11:27][350482803432075][578 ms][DEBUG] rawBody.length=1160
[2025-08-21 06:11:27][350482803432075][578 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDgyODAzNDMyMDc1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTI4In0='" -e "main()" -q"
[2025-08-21 06:11:27][350482803432075][578 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:11:27][350482803432075][578 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDgyODAzNDMyMDc1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTI4In0='" -e "main()" -q"
[2025-08-21 06:11:30][350482803432075][3233 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDgyODAzNDMyMDc1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgzMDQzR05SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTI4In0="\r\n
[2025-08-21 06:11:33][350482803432075][6639 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_985aef72-2cb9-4dc9-88bc-b18db54a49ec","id":"QR_985aef72-2cb9-4dc9-88bc-b18db54a49ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:11:33][350482803432075][6639 ms][DEBUG] proc_open done in 6061 ms; code=0; res.len=3152
[2025-08-21 06:11:33][350482803432075][6639 ms][DEBUG] END   runCmdUntilRes#1 in 6062 ms
[2025-08-21 06:11:33][350482803432075][6640 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:12:46][355347586127496][1 ms][INFO] === Request start ===
[2025-08-21 06:12:46][355347586127496][2 ms][DEBUG] START check_frida
[2025-08-21 06:12:46][355347586127496][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:12:46][355347586127496][308 ms][DEBUG] SU: done in 306 ms; outroot         20950     1 2263084   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:12:46][355347586127496][308 ms][DEBUG] check_frida: running
[2025-08-21 06:12:46][355347586127496][308 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 06:12:46][355347586127496][308 ms][DEBUG] START check_internet
[2025-08-21 06:12:46][355347586127496][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:12:47][355347586127496][573 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=180 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 180.935/180.935/180.935/0.000 ms\n
[2025-08-21 06:12:47][355347586127496][573 ms][DEBUG] check_internet: online
[2025-08-21 06:12:47][355347586127496][573 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 06:12:47][355347586127496][573 ms][DEBUG] START check_scloud
[2025-08-21 06:12:47][355347586127496][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:12:47][355347586127496][857 ms][DEBUG] SU: done in 283 ms; outu0_a118      20979 10674 23630496 72912 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:12:47][355347586127496][857 ms][DEBUG] targetPkg: running
[2025-08-21 06:12:47][355347586127496][857 ms][DEBUG] END   check_scloud in 284 ms
[2025-08-21 06:12:47][355347586127496][857 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:12:47][355347586127496][857 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQ3NTg2MTI3NDk2IiwibW9kZWwiOiJTTS1OOTgxTiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ044MFlYR05NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMzMiJ9'" -e "main()" -q"
[2025-08-21 06:12:47][355347586127496][857 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:12:47][355347586127496][857 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQ3NTg2MTI3NDk2IiwibW9kZWwiOiJTTS1OOTgxTiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ044MFlYR05NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMzMiJ9'" -e "main()" -q"
[2025-08-21 06:12:49][355347586127496][3494 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MzQ3NTg2MTI3NDk2IiwibW9kZWwiOiJTTS1OOTgxTiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ044MFlYR05NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMzMiJ9"\r\n
[2025-08-21 06:12:52][355347586127496][5775 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4245c2ee-a864-4d26-af8f-0d382b7b06cf","id":"QR_4245c2ee-a864-4d26-af8f-0d382b7b06cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:12:52][355347586127496][5775 ms][DEBUG] proc_open done in 4918 ms; code=0; res.len=3152
[2025-08-21 06:12:52][355347586127496][5775 ms][DEBUG] END   runCmdUntilRes#1 in 4918 ms
[2025-08-21 06:12:52][355347586127496][5775 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:12:58][356544399148672][0 ms][INFO] === Request start ===
[2025-08-21 06:12:58][356544399148672][1 ms][DEBUG] START check_frida
[2025-08-21 06:12:58][356544399148672][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:12:59][356544399148672][257 ms][DEBUG] SU: done in 256 ms; outroot         20950     1 2279504   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:12:59][356544399148672][257 ms][DEBUG] check_frida: running
[2025-08-21 06:12:59][356544399148672][257 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 06:12:59][356544399148672][257 ms][DEBUG] START check_internet
[2025-08-21 06:12:59][356544399148672][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:12:59][356544399148672][523 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.107/167.107/167.107/0.000 ms\n
[2025-08-21 06:12:59][356544399148672][523 ms][DEBUG] check_internet: online
[2025-08-21 06:12:59][356544399148672][523 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 06:12:59][356544399148672][523 ms][DEBUG] START check_scloud
[2025-08-21 06:12:59][356544399148672][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:12:59][356544399148672][819 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23630528 73512 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:12:59][356544399148672][819 ms][DEBUG] targetPkg: running
[2025-08-21 06:12:59][356544399148672][819 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 06:12:59][356544399148672][819 ms][DEBUG] rawBody.length=1160
[2025-08-21 06:12:59][356544399148672][819 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0Mzk5MTQ4NjcyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gyMDdaUkJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTUwIn0='" -e "main()" -q"
[2025-08-21 06:12:59][356544399148672][820 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:12:59][356544399148672][820 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0Mzk5MTQ4NjcyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gyMDdaUkJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTUwIn0='" -e "main()" -q"
[2025-08-21 06:13:02][356544399148672][3428 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NTQ0Mzk5MTQ4NjcyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gyMDdaUkJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTUwIn0="\r\n
[2025-08-21 06:13:05][356544399148672][7052 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_988d1cd9-0bbf-4874-b3c7-5d88af862f7b","id":"QR_988d1cd9-0bbf-4874-b3c7-5d88af862f7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:13:05][356544399148672][7052 ms][DEBUG] proc_open done in 6233 ms; code=0; res.len=3152
[2025-08-21 06:13:05][356544399148672][7052 ms][DEBUG] END   runCmdUntilRes#1 in 6233 ms
[2025-08-21 06:13:05][356544399148672][7052 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:13:09][353310804557185][0 ms][INFO] === Request start ===
[2025-08-21 06:13:09][353310804557185][1 ms][DEBUG] START check_frida
[2025-08-21 06:13:09][353310804557185][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:13:09][353310804557185][268 ms][DEBUG] SU: done in 267 ms; outroot         20950     1 2279504   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:13:09][353310804557185][268 ms][DEBUG] check_frida: running
[2025-08-21 06:13:09][353310804557185][268 ms][DEBUG] END   check_frida in 267 ms
[2025-08-21 06:13:09][353310804557185][268 ms][DEBUG] START check_scloud
[2025-08-21 06:13:09][353310804557185][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:13:10][353310804557185][565 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23630560 72860 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:13:10][353310804557185][565 ms][DEBUG] targetPkg: running
[2025-08-21 06:13:10][353310804557185][565 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:13:10][353310804557185][565 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:13:10][353310804557185][565 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEwODA0NTU3MTg1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTcwMyJ9'" -e "main()" -q"
[2025-08-21 06:13:10][353310804557185][565 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:13:10][353310804557185][565 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEwODA0NTU3MTg1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTcwMyJ9'" -e "main()" -q"
[2025-08-21 06:13:12][353310804557185][3220 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEwODA0NTU3MTg1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTcwMyJ9"\r\n
[2025-08-21 06:13:14][353310804557185][4845 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 06:13:14][353310804557185][4846 ms][DEBUG] proc_open done in 4280 ms; code=0; res.len=93
[2025-08-21 06:13:14][353310804557185][4846 ms][DEBUG] END   runCmdUntilRes#1 in 4280 ms
[2025-08-21 06:13:14][353310804557185][4846 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 06:13:14][][0 ms][INFO] === Request start ===
[2025-08-21 06:13:14][][1 ms][DEBUG] START check_frida
[2025-08-21 06:13:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:13:14][][261 ms][DEBUG] SU: done in 260 ms; outroot         20950     1 2279504   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:13:14][][261 ms][DEBUG] check_frida: running
[2025-08-21 06:13:14][][261 ms][DEBUG] END   check_frida in 260 ms
[2025-08-21 06:13:14][][261 ms][DEBUG] START check_scloud
[2025-08-21 06:13:14][][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:13:15][][558 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23630592 73460 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:13:15][][558 ms][DEBUG] targetPkg: running
[2025-08-21 06:13:15][][558 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:13:15][][558 ms][DEBUG] rawBody.length=1131
[2025-08-21 06:13:15][][559 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg3MCJ9'" -e "main()" -q"
[2025-08-21 06:13:15][][559 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:13:15][][559 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg3MCJ9'" -e "main()" -q"
[2025-08-21 06:13:17][][3167 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg3MCJ9"\r\n
[2025-08-21 06:13:19][][4573 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 06:13:19][][4573 ms][DEBUG] proc_open done in 4014 ms; code=0; res.len=107
[2025-08-21 06:13:19][][4573 ms][DEBUG] END   runCmdUntilRes#1 in 4015 ms
[2025-08-21 06:13:19][][4573 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 06:13:19][][0 ms][INFO] === Request start ===
[2025-08-21 06:13:19][][1 ms][DEBUG] START check_frida
[2025-08-21 06:13:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:13:19][][308 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2279504   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:13:19][][308 ms][DEBUG] check_frida: running
[2025-08-21 06:13:19][][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 06:13:19][][308 ms][DEBUG] START check_scloud
[2025-08-21 06:13:19][][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:13:20][][604 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23630624 73148 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:13:20][][604 ms][DEBUG] targetPkg: running
[2025-08-21 06:13:20][][604 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 06:13:20][][604 ms][DEBUG] rawBody.length=1131
[2025-08-21 06:13:20][][605 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ0NCJ9'" -e "main()" -q"
[2025-08-21 06:13:20][][605 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:13:20][][605 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ0NCJ9'" -e "main()" -q"
[2025-08-21 06:13:22][][3244 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ0NCJ9"\r\n
[2025-08-21 06:13:24][][4666 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 06:13:24][][4666 ms][DEBUG] proc_open done in 4061 ms; code=0; res.len=107
[2025-08-21 06:13:24][][4666 ms][DEBUG] END   runCmdUntilRes#1 in 4062 ms
[2025-08-21 06:13:24][][4666 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 06:13:26][353310804557185][0 ms][INFO] === Request start ===
[2025-08-21 06:13:26][353310804557185][1 ms][DEBUG] START check_frida
[2025-08-21 06:13:26][353310804557185][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:13:26][353310804557185][258 ms][DEBUG] SU: done in 257 ms; outroot         20950     1 2279504   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:13:26][353310804557185][258 ms][DEBUG] check_frida: running
[2025-08-21 06:13:26][353310804557185][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 06:13:26][353310804557185][258 ms][DEBUG] START check_scloud
[2025-08-21 06:13:26][353310804557185][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:13:27][353310804557185][540 ms][DEBUG] SU: done in 282 ms; outu0_a118      20979 10674 23630656 72724 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:13:27][353310804557185][540 ms][DEBUG] targetPkg: running
[2025-08-21 06:13:27][353310804557185][540 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 06:13:27][353310804557185][540 ms][DEBUG] rawBody.length=1160
[2025-08-21 06:13:27][353310804557185][541 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEwODA0NTU3MTg1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTAzIn0='" -e "main()" -q"
[2025-08-21 06:13:27][353310804557185][541 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:13:27][353310804557185][541 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEwODA0NTU3MTg1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTAzIn0='" -e "main()" -q"
[2025-08-21 06:13:29][353310804557185][3195 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEwODA0NTU3MTg1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMUc2WVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTAzIn0="\r\n
[2025-08-21 06:13:32][353310804557185][6273 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4072adad-cc95-4667-8a3d-58413ce7e21e","id":"QR_4072adad-cc95-4667-8a3d-58413ce7e21e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:13:32][353310804557185][6273 ms][DEBUG] proc_open done in 5732 ms; code=0; res.len=3152
[2025-08-21 06:13:32][353310804557185][6273 ms][DEBUG] END   runCmdUntilRes#1 in 5733 ms
[2025-08-21 06:13:32][353310804557185][6273 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:15:44][353427861877429][1 ms][INFO] === Request start ===
[2025-08-21 06:15:44][353427861877429][2 ms][DEBUG] START check_frida
[2025-08-21 06:15:44][353427861877429][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:15:44][353427861877429][309 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2263084   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:15:44][353427861877429][309 ms][DEBUG] check_frida: running
[2025-08-21 06:15:44][353427861877429][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 06:15:44][353427861877429][309 ms][DEBUG] START check_scloud
[2025-08-21 06:15:44][353427861877429][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:15:44][353427861877429][590 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23630688 73464 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:15:44][353427861877429][590 ms][DEBUG] targetPkg: running
[2025-08-21 06:15:44][353427861877429][590 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 06:15:44][353427861877429][591 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:15:44][353427861877429][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDI3ODYxODc3NDI5IiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1I3MFIwV1NBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkyOSJ9'" -e "main()" -q"
[2025-08-21 06:15:44][353427861877429][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:15:44][353427861877429][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDI3ODYxODc3NDI5IiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1I3MFIwV1NBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkyOSJ9'" -e "main()" -q"
[2025-08-21 06:15:47][353427861877429][3229 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDI3ODYxODc3NDI5IiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1I3MFIwV1NBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkyOSJ9"\r\n
[2025-08-21 06:15:49][353427861877429][5526 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce5a0acb-3984-4ade-8601-0f9a665bb870","id":"QR_ce5a0acb-3984-4ade-8601-0f9a665bb870","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:15:49][353427861877429][5526 ms][DEBUG] proc_open done in 4935 ms; code=0; res.len=3152
[2025-08-21 06:15:49][353427861877429][5526 ms][DEBUG] END   runCmdUntilRes#1 in 4935 ms
[2025-08-21 06:15:49][353427861877429][5526 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:15:54][357042144334126][1 ms][INFO] === Request start ===
[2025-08-21 06:15:54][357042144334126][2 ms][DEBUG] START check_frida
[2025-08-21 06:15:54][357042144334126][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:15:54][357042144334126][301 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2279504   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:15:54][357042144334126][301 ms][DEBUG] check_frida: running
[2025-08-21 06:15:54][357042144334126][301 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 06:15:54][357042144334126][301 ms][DEBUG] START check_scloud
[2025-08-21 06:15:54][357042144334126][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:15:55][357042144334126][597 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23630720 74060 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:15:55][357042144334126][597 ms][DEBUG] targetPkg: running
[2025-08-21 06:15:55][357042144334126][597 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 06:15:55][357042144334126][597 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:15:55][357042144334126][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQyMTQ0MzM0MTI2IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTcyNllCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjIxOCJ9'" -e "main()" -q"
[2025-08-21 06:15:55][357042144334126][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:15:55][357042144334126][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQyMTQ0MzM0MTI2IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTcyNllCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjIxOCJ9'" -e "main()" -q"
[2025-08-21 06:15:57][357042144334126][3237 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MDQyMTQ0MzM0MTI2IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTcyNllCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjIxOCJ9"\r\n
[2025-08-21 06:15:59][357042144334126][5143 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c792ef2-ef6e-4db5-9b6a-ef870d521bc7","id":"QR_5c792ef2-ef6e-4db5-9b6a-ef870d521bc7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:15:59][357042144334126][5143 ms][DEBUG] proc_open done in 4546 ms; code=0; res.len=3152
[2025-08-21 06:15:59][357042144334126][5143 ms][DEBUG] END   runCmdUntilRes#1 in 4546 ms
[2025-08-21 06:15:59][357042144334126][5143 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:16:07][350026552866668][0 ms][INFO] === Request start ===
[2025-08-21 06:16:07][350026552866668][1 ms][DEBUG] START check_frida
[2025-08-21 06:16:07][350026552866668][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:16:07][352967355066980][0 ms][INFO] === Request start ===
[2025-08-21 06:16:07][350026552866668][307 ms][DEBUG] SU: done in 306 ms; outroot         20950     1 2279504   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:16:07][350026552866668][308 ms][DEBUG] check_frida: running
[2025-08-21 06:16:07][350026552866668][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 06:16:07][350026552866668][308 ms][DEBUG] START check_internet
[2025-08-21 06:16:07][350026552866668][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:16:08][350026552866668][776 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.000/202.000/202.000/0.000 ms\n
[2025-08-21 06:16:08][350026552866668][776 ms][DEBUG] check_internet: online
[2025-08-21 06:16:08][350026552866668][776 ms][DEBUG] END   check_internet in 468 ms
[2025-08-21 06:16:08][350026552866668][776 ms][DEBUG] START check_scloud
[2025-08-21 06:16:08][350026552866668][776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:16:08][350026552866668][1057 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23630752 73816 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:16:08][350026552866668][1057 ms][DEBUG] targetPkg: running
[2025-08-21 06:16:08][350026552866668][1057 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 06:16:08][350026552866668][1057 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:16:08][350026552866668][1058 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI2NTUyODY2NjY4IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMTQ3RTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODYzOCJ9'" -e "main()" -q"
[2025-08-21 06:16:08][350026552866668][1058 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:16:08][350026552866668][1058 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI2NTUyODY2NjY4IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMTQ3RTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODYzOCJ9'" -e "main()" -q"
[2025-08-21 06:16:11][350026552866668][3697 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDI2NTUyODY2NjY4IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMTQ3RTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODYzOCJ9"\r\n
[2025-08-21 06:16:13][350026552866668][5665 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58935dc7-3ba0-4d5d-be89-f21b5c485c89","id":"QR_58935dc7-3ba0-4d5d-be89-f21b5c485c89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:16:13][350026552866668][5665 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 06:16:13][350026552866668][5665 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-21 06:16:13][350026552866668][5665 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:16:13][352967355066980][6084 ms][DEBUG] START check_frida
[2025-08-21 06:16:13][352967355066980][6084 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:16:14][352967355066980][6397 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2279504   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:16:14][352967355066980][6397 ms][DEBUG] check_frida: running
[2025-08-21 06:16:14][352967355066980][6397 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 06:16:14][352967355066980][6397 ms][DEBUG] START check_internet
[2025-08-21 06:16:14][352967355066980][6397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:16:14][352967355066980][6631 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.437/141.437/141.437/0.000 ms\n
[2025-08-21 06:16:14][352967355066980][6631 ms][DEBUG] check_internet: online
[2025-08-21 06:16:14][352967355066980][6631 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 06:16:14][352967355066980][6631 ms][DEBUG] START check_scloud
[2025-08-21 06:16:14][352967355066980][6631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:16:14][352967355066980][6896 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23630784 73464 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:16:14][352967355066980][6896 ms][DEBUG] targetPkg: running
[2025-08-21 06:16:14][352967355066980][6896 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 06:16:14][352967355066980][6896 ms][DEBUG] rawBody.length=1160
[2025-08-21 06:16:14][352967355066980][6897 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzU1MDY2OTgwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDY3MTRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDEyIn0='" -e "main()" -q"
[2025-08-21 06:16:14][352967355066980][6897 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:16:14][352967355066980][6897 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzU1MDY2OTgwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDY3MTRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDEyIn0='" -e "main()" -q"
[2025-08-21 06:16:17][352967355066980][9536 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTY3MzU1MDY2OTgwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDY3MTRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDEyIn0="\r\n
[2025-08-21 06:16:20][352967355066980][12973 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14b36887-dfdc-491f-ae11-1407e3aba369","id":"QR_14b36887-dfdc-491f-ae11-1407e3aba369","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:16:20][352967355066980][12973 ms][DEBUG] proc_open done in 6076 ms; code=0; res.len=3152
[2025-08-21 06:16:20][352967355066980][12973 ms][DEBUG] END   runCmdUntilRes#1 in 6076 ms
[2025-08-21 06:16:20][352967355066980][12973 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:16:47][358080740831870][0 ms][INFO] === Request start ===
[2025-08-21 06:16:47][358080740831870][1 ms][DEBUG] START check_frida
[2025-08-21 06:16:47][358080740831870][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:16:47][358080740831870][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:16:47][358080740831870][309 ms][DEBUG] check_frida: running
[2025-08-21 06:16:47][358080740831870][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 06:16:47][358080740831870][309 ms][DEBUG] START check_internet
[2025-08-21 06:16:47][358080740831870][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:16:47][358080740831870][623 ms][DEBUG] SU: done in 314 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.827/223.827/223.827/0.000 ms\n
[2025-08-21 06:16:47][358080740831870][623 ms][DEBUG] check_internet: online
[2025-08-21 06:16:47][358080740831870][623 ms][DEBUG] END   check_internet in 314 ms
[2025-08-21 06:16:47][358080740831870][623 ms][DEBUG] START check_scloud
[2025-08-21 06:16:47][358080740831870][623 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:16:47][358080740831870][902 ms][DEBUG] SU: done in 279 ms; outu0_a118      20979 10674 23630816 74048 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:16:47][358080740831870][902 ms][DEBUG] targetPkg: running
[2025-08-21 06:16:47][358080740831870][902 ms][DEBUG] END   check_scloud in 279 ms
[2025-08-21 06:16:47][358080740831870][902 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:16:47][358080740831870][902 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MDgwNzQwODMxODcwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQwNSJ9'" -e "main()" -q"
[2025-08-21 06:16:47][358080740831870][902 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:16:47][358080740831870][902 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MDgwNzQwODMxODcwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQwNSJ9'" -e "main()" -q"
[2025-08-21 06:16:50][358080740831870][3527 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MDgwNzQwODMxODcwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQwNSJ9"\r\n
[2025-08-21 06:16:52][358080740831870][5479 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 06:16:52][358080740831870][5480 ms][DEBUG] proc_open done in 4577 ms; code=0; res.len=115
[2025-08-21 06:16:52][358080740831870][5480 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 06:16:52][358080740831870][5480 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 06:16:52][][0 ms][INFO] === Request start ===
[2025-08-21 06:16:52][][1 ms][DEBUG] START check_frida
[2025-08-21 06:16:52][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:16:53][][272 ms][DEBUG] SU: done in 271 ms; outroot         20950     1 2279504   4416 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:16:53][][272 ms][DEBUG] check_frida: running
[2025-08-21 06:16:53][][272 ms][DEBUG] END   check_frida in 271 ms
[2025-08-21 06:16:53][][272 ms][DEBUG] START check_internet
[2025-08-21 06:16:53][][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:16:53][][507 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.877/145.877/145.877/0.000 ms\n
[2025-08-21 06:16:53][][507 ms][DEBUG] check_internet: online
[2025-08-21 06:16:53][][507 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 06:16:53][][507 ms][DEBUG] START check_scloud
[2025-08-21 06:16:53][][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:16:53][][772 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23630848 73380 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:16:53][][772 ms][DEBUG] targetPkg: running
[2025-08-21 06:16:53][][772 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 06:16:53][][772 ms][DEBUG] rawBody.length=1131
[2025-08-21 06:16:53][][772 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEzNyJ9'" -e "main()" -q"
[2025-08-21 06:16:53][][772 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:16:53][][772 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEzNyJ9'" -e "main()" -q"
[2025-08-21 06:16:56][][3428 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEzNyJ9"\r\n
[2025-08-21 06:16:57][][4958 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 06:16:57][][4958 ms][DEBUG] proc_open done in 4186 ms; code=0; res.len=107
[2025-08-21 06:16:57][][4958 ms][DEBUG] END   runCmdUntilRes#1 in 4186 ms
[2025-08-21 06:16:57][][4958 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 06:16:58][][0 ms][INFO] === Request start ===
[2025-08-21 06:16:58][][1 ms][DEBUG] START check_frida
[2025-08-21 06:16:58][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:16:58][][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2279504   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:16:58][][309 ms][DEBUG] check_frida: running
[2025-08-21 06:16:58][][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 06:16:58][][309 ms][DEBUG] START check_internet
[2025-08-21 06:16:58][][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:16:58][][559 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.050/147.050/147.050/0.000 ms\n
[2025-08-21 06:16:58][][559 ms][DEBUG] check_internet: online
[2025-08-21 06:16:58][][559 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 06:16:58][][559 ms][DEBUG] START check_scloud
[2025-08-21 06:16:58][][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:16:59][][856 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23630880 73940 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:16:59][][856 ms][DEBUG] targetPkg: running
[2025-08-21 06:16:59][][856 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:16:59][][856 ms][DEBUG] rawBody.length=1131
[2025-08-21 06:16:59][][856 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc0NyJ9'" -e "main()" -q"
[2025-08-21 06:16:59][][856 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:16:59][][856 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc0NyJ9'" -e "main()" -q"
[2025-08-21 06:17:01][][3480 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc0NyJ9"\r\n
[2025-08-21 06:17:03][][4964 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 06:17:03][][4964 ms][DEBUG] proc_open done in 4108 ms; code=0; res.len=107
[2025-08-21 06:17:03][][4964 ms][DEBUG] END   runCmdUntilRes#1 in 4108 ms
[2025-08-21 06:17:03][][4964 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 06:17:05][358080740831870][0 ms][INFO] === Request start ===
[2025-08-21 06:17:05][358080740831870][1 ms][DEBUG] START check_frida
[2025-08-21 06:17:05][358080740831870][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:17:05][353684140525084][0 ms][INFO] === Request start ===
[2025-08-21 06:17:05][358080740831870][300 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2279504   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:17:05][358080740831870][301 ms][DEBUG] check_frida: running
[2025-08-21 06:17:05][358080740831870][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 06:17:05][358080740831870][301 ms][DEBUG] START check_scloud
[2025-08-21 06:17:05][358080740831870][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:17:05][358080740831870][597 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23630912 74516 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:17:05][358080740831870][597 ms][DEBUG] targetPkg: running
[2025-08-21 06:17:05][358080740831870][597 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 06:17:05][358080740831870][597 ms][DEBUG] rawBody.length=1160
[2025-08-21 06:17:05][358080740831870][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MDgwNzQwODMxODcwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDg0In0='" -e "main()" -q"
[2025-08-21 06:17:05][358080740831870][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:17:05][358080740831870][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MDgwNzQwODMxODcwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDg0In0='" -e "main()" -q"
[2025-08-21 06:17:08][358080740831870][3237 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MDgwNzQwODMxODcwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDg0In0="\r\n
[2025-08-21 06:17:13][358080740831870][7986 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d38fe08-f5a2-4bd9-b48b-9bb985d0ca14","id":"QR_7d38fe08-f5a2-4bd9-b48b-9bb985d0ca14","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:17:13][358080740831870][7986 ms][DEBUG] proc_open done in 7389 ms; code=0; res.len=3152
[2025-08-21 06:17:13][358080740831870][7986 ms][DEBUG] END   runCmdUntilRes#1 in 7389 ms
[2025-08-21 06:17:13][358080740831870][7986 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:17:13][353684140525084][8108 ms][DEBUG] START check_frida
[2025-08-21 06:17:13][353684140525084][8108 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:17:13][353684140525084][8405 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2279504   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:17:13][353684140525084][8405 ms][DEBUG] check_frida: running
[2025-08-21 06:17:13][353684140525084][8405 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 06:17:13][353684140525084][8405 ms][DEBUG] START check_scloud
[2025-08-21 06:17:13][353684140525084][8405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:17:13][353684140525084][8718 ms][DEBUG] SU: done in 313 ms; outu0_a118      20979 10674 23630944 74112 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:17:13][353684140525084][8718 ms][DEBUG] targetPkg: running
[2025-08-21 06:17:13][353684140525084][8718 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 06:17:13][353684140525084][8718 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:17:13][353684140525084][8718 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQwNTI1MDg0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MDBCNDlIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTAxNyJ9'" -e "main()" -q"
[2025-08-21 06:17:13][353684140525084][8718 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:17:13][353684140525084][8718 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQwNTI1MDg0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MDBCNDlIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTAxNyJ9'" -e "main()" -q"
[2025-08-21 06:17:16][353684140525084][11357 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjg0MTQwNTI1MDg0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MDBCNDlIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTAxNyJ9"\r\n
[2025-08-21 06:17:18][353684140525084][13185 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6be42446-149d-4d2f-a9c4-0b90b328f911","id":"QR_6be42446-149d-4d2f-a9c4-0b90b328f911","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:17:18][353684140525084][13185 ms][DEBUG] proc_open done in 4467 ms; code=0; res.len=3152
[2025-08-21 06:17:18][353684140525084][13185 ms][DEBUG] END   runCmdUntilRes#1 in 4467 ms
[2025-08-21 06:17:18][353684140525084][13185 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:19:48][352600226214675][1 ms][INFO] === Request start ===
[2025-08-21 06:19:48][352600226214675][2 ms][DEBUG] START check_frida
[2025-08-21 06:19:48][352600226214675][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:19:48][352600226214675][296 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2263084   4380 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:19:48][352600226214675][296 ms][DEBUG] check_frida: running
[2025-08-21 06:19:48][352600226214675][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 06:19:48][352600226214675][296 ms][DEBUG] START check_scloud
[2025-08-21 06:19:48][352600226214675][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:19:48][352600226214675][593 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23630976 74636 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:19:48][352600226214675][593 ms][DEBUG] targetPkg: running
[2025-08-21 06:19:48][352600226214675][593 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:19:48][352600226214675][594 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:19:48][352600226214675][594 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI2MjE0Njc1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MFpDOFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTloiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQ3NyJ9'" -e "main()" -q"
[2025-08-21 06:19:48][352600226214675][594 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:19:48][352600226214675][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI2MjE0Njc1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MFpDOFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTloiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQ3NyJ9'" -e "main()" -q"
[2025-08-21 06:19:51][352600226214675][3264 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjAwMjI2MjE0Njc1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MFpDOFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTloiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQ3NyJ9"\r\n
[2025-08-21 06:19:53][352600226214675][5576 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a1d408c-564c-4399-9842-a33e91411c01","id":"QR_5a1d408c-564c-4399-9842-a33e91411c01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:19:53][352600226214675][5576 ms][DEBUG] proc_open done in 4982 ms; code=0; res.len=3152
[2025-08-21 06:19:53][352600226214675][5576 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 06:19:53][352600226214675][5576 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:20:00][353176440284934][0 ms][INFO] === Request start ===
[2025-08-21 06:20:00][353176440284934][1 ms][DEBUG] START check_frida
[2025-08-21 06:20:00][353176440284934][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:20:00][353176440284934][251 ms][DEBUG] SU: done in 249 ms; outroot         20950     1 2279504   4412 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:20:00][353176440284934][251 ms][DEBUG] check_frida: running
[2025-08-21 06:20:00][353176440284934][251 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 06:20:00][353176440284934][251 ms][DEBUG] START check_internet
[2025-08-21 06:20:00][353176440284934][251 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:20:01][353176440284934][719 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.744/201.744/201.744/0.000 ms\n
[2025-08-21 06:20:01][353176440284934][719 ms][DEBUG] check_internet: online
[2025-08-21 06:20:01][353176440284934][719 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 06:20:01][353176440284934][720 ms][DEBUG] START check_scloud
[2025-08-21 06:20:01][353176440284934][720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:20:01][353176440284934][1000 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631008 73732 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:20:01][353176440284934][1000 ms][DEBUG] targetPkg: running
[2025-08-21 06:20:01][353176440284934][1001 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 06:20:01][353176440284934][1001 ms][DEBUG] rawBody.length=1160
[2025-08-21 06:20:01][353176440284934][1001 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTc2NDQwMjg0OTM0IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMDFNS0dSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Mzg3In0='" -e "main()" -q"
[2025-08-21 06:20:01][353176440284934][1001 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:20:01][353176440284934][1001 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTc2NDQwMjg0OTM0IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMDFNS0dSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Mzg3In0='" -e "main()" -q"
[2025-08-21 06:20:04][353176440284934][3687 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTc2NDQwMjg0OTM0IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMDFNS0dSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Mzg3In0="\r\n
[2025-08-21 06:20:07][350637542620013][1 ms][INFO] === Request start ===
[2025-08-21 06:20:07][353176440284934][7249 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f9e23e6-a7ca-4c65-bdf6-227299ebd37a","id":"QR_2f9e23e6-a7ca-4c65-bdf6-227299ebd37a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:20:07][353176440284934][7249 ms][DEBUG] proc_open done in 6248 ms; code=0; res.len=3152
[2025-08-21 06:20:07][353176440284934][7250 ms][DEBUG] END   runCmdUntilRes#1 in 6249 ms
[2025-08-21 06:20:07][353176440284934][7250 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:20:08][350637542620013][1001 ms][DEBUG] START check_frida
[2025-08-21 06:20:08][350637542620013][1001 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:20:08][350637542620013][1314 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2279504   4416 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:20:08][350637542620013][1314 ms][DEBUG] check_frida: running
[2025-08-21 06:20:08][350637542620013][1314 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 06:20:08][350637542620013][1314 ms][DEBUG] START check_internet
[2025-08-21 06:20:08][350637542620013][1314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:20:08][350637542620013][1611 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.098/215.098/215.098/0.000 ms\n
[2025-08-21 06:20:08][350637542620013][1611 ms][DEBUG] check_internet: online
[2025-08-21 06:20:08][350637542620013][1611 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 06:20:08][350637542620013][1611 ms][DEBUG] START check_scloud
[2025-08-21 06:20:08][350637542620013][1611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:20:09][350637542620013][1907 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23631040 74296 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:20:09][350637542620013][1908 ms][DEBUG] targetPkg: running
[2025-08-21 06:20:09][350637542620013][1908 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:20:09][350637542620013][1908 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:20:09][350637542620013][1908 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQyNjIwMDEzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1MiJ9'" -e "main()" -q"
[2025-08-21 06:20:09][350637542620013][1908 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:20:09][350637542620013][1908 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQyNjIwMDEzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1MiJ9'" -e "main()" -q"
[2025-08-21 06:20:11][350637542620013][4563 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjM3NTQyNjIwMDEzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1MiJ9"\r\n
[2025-08-21 06:20:13][350637542620013][6125 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 06:20:13][350637542620013][6125 ms][DEBUG] proc_open done in 4218 ms; code=0; res.len=93
[2025-08-21 06:20:13][350637542620013][6126 ms][DEBUG] END   runCmdUntilRes#1 in 4218 ms
[2025-08-21 06:20:13][350637542620013][6126 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 06:20:13][][0 ms][INFO] === Request start ===
[2025-08-21 06:20:13][][1 ms][DEBUG] START check_frida
[2025-08-21 06:20:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:20:13][][313 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2279504   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:20:13][][313 ms][DEBUG] check_frida: running
[2025-08-21 06:20:13][][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 06:20:13][][313 ms][DEBUG] START check_internet
[2025-08-21 06:20:13][][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:20:14][][563 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.344/146.344/146.344/0.000 ms\n
[2025-08-21 06:20:14][][563 ms][DEBUG] check_internet: online
[2025-08-21 06:20:14][][563 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 06:20:14][][563 ms][DEBUG] START check_scloud
[2025-08-21 06:20:14][][563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:20:14][][844 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631072 73820 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:20:14][][844 ms][DEBUG] targetPkg: running
[2025-08-21 06:20:14][][844 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 06:20:14][][844 ms][DEBUG] rawBody.length=1131
[2025-08-21 06:20:14][][844 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9'" -e "main()" -q"
[2025-08-21 06:20:14][][844 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:20:14][][844 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9'" -e "main()" -q"
[2025-08-21 06:20:15][356737571016127][0 ms][INFO] === Request start ===
[2025-08-21 06:20:17][][3500 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9"\r\n
[2025-08-21 06:20:18][][4984 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 06:20:18][][4984 ms][DEBUG] proc_open done in 4139 ms; code=0; res.len=107
[2025-08-21 06:20:18][][4984 ms][DEBUG] END   runCmdUntilRes#1 in 4140 ms
[2025-08-21 06:20:18][][4984 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 06:20:18][][0 ms][INFO] === Request start ===
[2025-08-21 06:20:18][][1 ms][DEBUG] START check_frida
[2025-08-21 06:20:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:20:19][][294 ms][DEBUG] SU: done in 293 ms; outroot         20950     1 2279504   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:20:19][][294 ms][DEBUG] check_frida: running
[2025-08-21 06:20:19][][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 06:20:19][][294 ms][DEBUG] START check_internet
[2025-08-21 06:20:19][][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:20:19][][559 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=155 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 155.228/155.228/155.228/0.000 ms\n
[2025-08-21 06:20:19][][559 ms][DEBUG] check_internet: online
[2025-08-21 06:20:19][][559 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 06:20:19][][559 ms][DEBUG] START check_scloud
[2025-08-21 06:20:19][][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:20:19][][840 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631104 74356 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:20:19][][840 ms][DEBUG] targetPkg: running
[2025-08-21 06:20:19][][840 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 06:20:19][][840 ms][DEBUG] rawBody.length=1131
[2025-08-21 06:20:19][][840 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA3OSJ9'" -e "main()" -q"
[2025-08-21 06:20:19][][840 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:20:19][][840 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA3OSJ9'" -e "main()" -q"
[2025-08-21 06:20:22][][3496 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA3OSJ9"\r\n
[2025-08-21 06:20:23][][4980 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 06:20:23][][4980 ms][DEBUG] proc_open done in 4140 ms; code=0; res.len=107
[2025-08-21 06:20:23][][4980 ms][DEBUG] END   runCmdUntilRes#1 in 4140 ms
[2025-08-21 06:20:23][][4980 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 06:20:24][356737571016127][9131 ms][DEBUG] START check_frida
[2025-08-21 06:20:24][356737571016127][9131 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:20:24][356737571016127][9444 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2279504   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:20:24][356737571016127][9444 ms][DEBUG] check_frida: running
[2025-08-21 06:20:24][356737571016127][9444 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 06:20:24][356737571016127][9444 ms][DEBUG] START check_internet
[2025-08-21 06:20:24][356737571016127][9444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:20:24][356737571016127][9678 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.364/141.364/141.364/0.000 ms\n
[2025-08-21 06:20:24][356737571016127][9678 ms][DEBUG] check_internet: online
[2025-08-21 06:20:24][356737571016127][9678 ms][DEBUG] END   check_internet in 235 ms
[2025-08-21 06:20:24][356737571016127][9678 ms][DEBUG] START check_scloud
[2025-08-21 06:20:24][356737571016127][9678 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:20:25][356737571016127][9976 ms][DEBUG] SU: done in 298 ms; outu0_a118      20979 10674 23631136 73368 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:20:25][356737571016127][9976 ms][DEBUG] targetPkg: running
[2025-08-21 06:20:25][356737571016127][9976 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 06:20:25][356737571016127][9976 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:20:25][356737571016127][9976 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzM3NTcxMDE2MTI3IiwibW9kZWwiOiJTTS1TOTA4RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q5MEdRR1NNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzOSJ9'" -e "main()" -q"
[2025-08-21 06:20:25][356737571016127][9977 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:20:25][356737571016127][9977 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzM3NTcxMDE2MTI3IiwibW9kZWwiOiJTTS1TOTA4RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q5MEdRR1NNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzOSJ9'" -e "main()" -q"
[2025-08-21 06:20:26][350637542620013][0 ms][INFO] === Request start ===
[2025-08-21 06:20:27][356737571016127][12599 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NzM3NTcxMDE2MTI3IiwibW9kZWwiOiJTTS1TOTA4RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q5MEdRR1NNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzOSJ9"\r\n
[2025-08-21 06:20:29][356737571016127][14724 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_714c1073-419a-4f2b-8e9c-e0c0c5aa6cf0","id":"QR_714c1073-419a-4f2b-8e9c-e0c0c5aa6cf0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:20:29][356737571016127][14724 ms][DEBUG] proc_open done in 4747 ms; code=0; res.len=3152
[2025-08-21 06:20:29][356737571016127][14724 ms][DEBUG] END   runCmdUntilRes#1 in 4747 ms
[2025-08-21 06:20:29][356737571016127][14724 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:20:30][350637542620013][4053 ms][DEBUG] START check_frida
[2025-08-21 06:20:30][350637542620013][4054 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:20:30][350637542620013][4366 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2279504   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:20:30][350637542620013][4366 ms][DEBUG] check_frida: running
[2025-08-21 06:20:30][350637542620013][4366 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 06:20:30][350637542620013][4366 ms][DEBUG] START check_internet
[2025-08-21 06:20:30][350637542620013][4366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:20:30][350637542620013][4600 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.803/143.803/143.803/0.000 ms\n
[2025-08-21 06:20:30][350637542620013][4600 ms][DEBUG] check_internet: online
[2025-08-21 06:20:30][350637542620013][4600 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 06:20:30][350637542620013][4600 ms][DEBUG] START check_scloud
[2025-08-21 06:20:30][350637542620013][4600 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:20:31][350637542620013][4897 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23631168 73956 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:20:31][350637542620013][4897 ms][DEBUG] targetPkg: running
[2025-08-21 06:20:31][350637542620013][4897 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:20:31][350637542620013][4897 ms][DEBUG] rawBody.length=1160
[2025-08-21 06:20:31][350637542620013][4897 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQyNjIwMDEzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzEyIn0='" -e "main()" -q"
[2025-08-21 06:20:31][350637542620013][4898 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:20:31][350637542620013][4898 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQyNjIwMDEzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzEyIn0='" -e "main()" -q"
[2025-08-21 06:20:33][350637542620013][7553 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjM3NTQyNjIwMDEzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDI3QVBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzEyIn0="\r\n
[2025-08-21 06:20:37][351695960585463][0 ms][INFO] === Request start ===
[2025-08-21 06:20:37][350637542620013][10942 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8a2a8b5-d4f7-4772-9b49-7216cd5f00a8","id":"QR_e8a2a8b5-d4f7-4772-9b49-7216cd5f00a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:20:37][350637542620013][10943 ms][DEBUG] proc_open done in 6045 ms; code=0; res.len=3152
[2025-08-21 06:20:37][350637542620013][10943 ms][DEBUG] END   runCmdUntilRes#1 in 6045 ms
[2025-08-21 06:20:37][350637542620013][10943 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:20:38][351695960585463][1006 ms][DEBUG] START check_frida
[2025-08-21 06:20:38][351695960585463][1006 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:20:38][351695960585463][1303 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2279504   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:20:38][351695960585463][1303 ms][DEBUG] check_frida: running
[2025-08-21 06:20:38][351695960585463][1303 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 06:20:38][351695960585463][1303 ms][DEBUG] START check_internet
[2025-08-21 06:20:38][351695960585463][1303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:20:38][351695960585463][1631 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.825/232.825/232.825/0.000 ms\n
[2025-08-21 06:20:38][351695960585463][1631 ms][DEBUG] check_internet: online
[2025-08-21 06:20:38][351695960585463][1631 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 06:20:38][351695960585463][1632 ms][DEBUG] START check_scloud
[2025-08-21 06:20:38][351695960585463][1632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:20:38][351695960585463][1928 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23631200 73484 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:20:38][351695960585463][1928 ms][DEBUG] targetPkg: running
[2025-08-21 06:20:38][351695960585463][1928 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 06:20:38][351695960585463][1928 ms][DEBUG] rawBody.length=1160
[2025-08-21 06:20:38][351695960585463][1928 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjk1OTYwNTg1NDYzIiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDVTTVRYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODkxIn0='" -e "main()" -q"
[2025-08-21 06:20:38][351695960585463][1928 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:20:38][351695960585463][1928 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjk1OTYwNTg1NDYzIiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDVTTVRYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODkxIn0='" -e "main()" -q"
[2025-08-21 06:20:41][351695960585463][4599 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjk1OTYwNTg1NDYzIiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDVTTVRYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODkxIn0="\r\n
[2025-08-21 06:20:44][351695960585463][7708 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb781587-d68a-4c79-b9a8-e7c4c195be43","id":"QR_eb781587-d68a-4c79-b9a8-e7c4c195be43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:20:44][351695960585463][7708 ms][DEBUG] proc_open done in 5780 ms; code=0; res.len=3152
[2025-08-21 06:20:44][351695960585463][7708 ms][DEBUG] END   runCmdUntilRes#1 in 5780 ms
[2025-08-21 06:20:44][351695960585463][7708 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:20:45][351978523235531][0 ms][INFO] === Request start ===
[2025-08-21 06:20:45][351978523235531][1 ms][DEBUG] START check_frida
[2025-08-21 06:20:45][351978523235531][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:20:46][351978523235531][289 ms][DEBUG] SU: done in 288 ms; outroot         20950     1 2279504   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:20:46][351978523235531][289 ms][DEBUG] check_frida: running
[2025-08-21 06:20:46][351978523235531][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 06:20:46][351978523235531][289 ms][DEBUG] START check_internet
[2025-08-21 06:20:46][351978523235531][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:20:46][351978523235531][555 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.561/142.561/142.561/0.000 ms\n
[2025-08-21 06:20:46][351978523235531][555 ms][DEBUG] check_internet: online
[2025-08-21 06:20:46][351978523235531][555 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 06:20:46][351978523235531][555 ms][DEBUG] START check_scloud
[2025-08-21 06:20:46][351978523235531][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:20:46][351978523235531][836 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631232 74060 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:20:46][351978523235531][836 ms][DEBUG] targetPkg: running
[2025-08-21 06:20:46][351978523235531][836 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 06:20:46][351978523235531][836 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:20:46][351978523235531][836 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIzMjM1NTMxIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMDVKRzlaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU5OCJ9'" -e "main()" -q"
[2025-08-21 06:20:46][351978523235531][836 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:20:46][351978523235531][836 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIzMjM1NTMxIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMDVKRzlaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU5OCJ9'" -e "main()" -q"
[2025-08-21 06:20:49][351978523235531][3476 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxOTc4NTIzMjM1NTMxIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMDVKRzlaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU5OCJ9"\r\n
[2025-08-21 06:20:51][351978523235531][5835 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45f36862-a686-453e-875e-2cfdffacccf0","id":"QR_45f36862-a686-453e-875e-2cfdffacccf0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:20:51][351978523235531][5835 ms][DEBUG] proc_open done in 4999 ms; code=0; res.len=3152
[2025-08-21 06:20:51][351978523235531][5835 ms][DEBUG] END   runCmdUntilRes#1 in 4999 ms
[2025-08-21 06:20:51][351978523235531][5835 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:27:06][351477978883234][1 ms][INFO] === Request start ===
[2025-08-21 06:27:06][351477978883234][2 ms][DEBUG] START check_frida
[2025-08-21 06:27:06][351477978883234][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:27:06][351477978883234][309 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2262072   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:27:06][351477978883234][309 ms][DEBUG] check_frida: running
[2025-08-21 06:27:06][351477978883234][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 06:27:06][351477978883234][309 ms][DEBUG] START check_scloud
[2025-08-21 06:27:06][351477978883234][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:27:07][351477978883234][606 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23613780 73660 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:27:07][351477978883234][606 ms][DEBUG] targetPkg: running
[2025-08-21 06:27:07][351477978883234][606 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:27:07][351477978883234][606 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:27:07][351477978883234][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc4ODgzMjM0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDdOVEtIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQwMyJ9'" -e "main()" -q"
[2025-08-21 06:27:07][351477978883234][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:27:07][351477978883234][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc4ODgzMjM0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDdOVEtIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQwMyJ9'" -e "main()" -q"
[2025-08-21 06:27:07][351477972925387][1 ms][INFO] === Request start ===
[2025-08-21 06:27:09][351477978883234][3246 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDc3OTc4ODgzMjM0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDdOVEtIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQwMyJ9"\r\n
[2025-08-21 06:27:13][351477978883234][7167 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_606e6b48-ea55-4694-a906-8aeb2f7432e9","id":"QR_606e6b48-ea55-4694-a906-8aeb2f7432e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:27:13][351477978883234][7167 ms][DEBUG] proc_open done in 6561 ms; code=0; res.len=3152
[2025-08-21 06:27:13][351477978883234][7167 ms][DEBUG] END   runCmdUntilRes#1 in 6562 ms
[2025-08-21 06:27:13][351477978883234][7167 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:27:13][351477972925387][6080 ms][DEBUG] START check_frida
[2025-08-21 06:27:13][351477972925387][6080 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:27:14][351477972925387][6393 ms][DEBUG] SU: done in 314 ms; outroot         20950     1 2279504   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:27:14][351477972925387][6394 ms][DEBUG] check_frida: running
[2025-08-21 06:27:14][351477972925387][6394 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 06:27:14][351477972925387][6394 ms][DEBUG] START check_scloud
[2025-08-21 06:27:14][351477972925387][6394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:27:14][351477972925387][6674 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631296 74272 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:27:14][351477972925387][6675 ms][DEBUG] targetPkg: running
[2025-08-21 06:27:14][351477972925387][6675 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 06:27:14][351477972925387][6675 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:27:14][351477972925387][6675 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTcyOTI1Mzg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFNKR0hWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU0NCJ9'" -e "main()" -q"
[2025-08-21 06:27:14][351477972925387][6675 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:27:14][351477972925387][6675 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTcyOTI1Mzg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFNKR0hWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU0NCJ9'" -e "main()" -q"
[2025-08-21 06:27:17][351477972925387][9329 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDc3OTcyOTI1Mzg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFNKR0hWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU0NCJ9"\r\n
[2025-08-21 06:27:21][351477972925387][14062 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ea8402d-2703-417f-b38d-852b928ec2d7","id":"QR_3ea8402d-2703-417f-b38d-852b928ec2d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:27:21][351477972925387][14063 ms][DEBUG] proc_open done in 7388 ms; code=0; res.len=3152
[2025-08-21 06:27:21][351477972925387][14063 ms][DEBUG] END   runCmdUntilRes#1 in 7388 ms
[2025-08-21 06:27:21][351477972925387][14063 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:32:10][358503088046041][1 ms][INFO] === Request start ===
[2025-08-21 06:32:10][358503088046041][2 ms][DEBUG] START check_frida
[2025-08-21 06:32:10][358503088046041][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:32:10][358503088046041][276 ms][DEBUG] SU: done in 274 ms; outroot         20950     1 2262072   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:32:10][358503088046041][276 ms][DEBUG] check_frida: running
[2025-08-21 06:32:10][358503088046041][276 ms][DEBUG] END   check_frida in 275 ms
[2025-08-21 06:32:10][358503088046041][276 ms][DEBUG] START check_internet
[2025-08-21 06:32:10][358503088046041][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:32:11][358503088046041][899 ms][DEBUG] SU: done in 623 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.913/201.913/201.913/0.000 ms\n
[2025-08-21 06:32:11][358503088046041][899 ms][DEBUG] check_internet: online
[2025-08-21 06:32:11][358503088046041][899 ms][DEBUG] END   check_internet in 623 ms
[2025-08-21 06:32:11][358503088046041][899 ms][DEBUG] START check_scloud
[2025-08-21 06:32:11][358503088046041][899 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:32:11][358503088046041][1165 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23631328 73804 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:32:11][358503088046041][1165 ms][DEBUG] targetPkg: running
[2025-08-21 06:32:11][358503088046041][1165 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 06:32:11][358503088046041][1165 ms][DEBUG] rawBody.length=1160
[2025-08-21 06:32:11][358503088046041][1165 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTAzMDg4MDQ2MDQxIiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTkMwQ0M0VlAiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlhFRiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDgwIn0='" -e "main()" -q"
[2025-08-21 06:32:11][358503088046041][1165 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:32:11][358503088046041][1165 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTAzMDg4MDQ2MDQxIiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTkMwQ0M0VlAiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlhFRiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDgwIn0='" -e "main()" -q"
[2025-08-21 06:32:14][358503088046041][3789 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NTAzMDg4MDQ2MDQxIiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTkMwQ0M0VlAiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlhFRiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDgwIn0="\r\n
[2025-08-21 06:32:17][358503088046041][7116 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f981571-591c-4a49-a580-de61f0ce0dd3","id":"QR_6f981571-591c-4a49-a580-de61f0ce0dd3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:32:17][358503088046041][7116 ms][DEBUG] proc_open done in 5951 ms; code=0; res.len=3152
[2025-08-21 06:32:17][358503088046041][7117 ms][DEBUG] END   runCmdUntilRes#1 in 5951 ms
[2025-08-21 06:32:17][358503088046041][7117 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:38:09][357962507718153][1 ms][INFO] === Request start ===
[2025-08-21 06:38:09][357962507718153][1 ms][DEBUG] START check_frida
[2025-08-21 06:38:09][357962507718153][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:38:09][357962507718153][300 ms][DEBUG] SU: done in 298 ms; outroot         20950     1 2263084   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:38:09][357962507718153][300 ms][DEBUG] check_frida: running
[2025-08-21 06:38:09][357962507718153][300 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 06:38:09][357962507718153][300 ms][DEBUG] START check_internet
[2025-08-21 06:38:09][357962507718153][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:38:09][357962507718153][708 ms][DEBUG] SU: done in 408 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.790/201.790/201.790/0.000 ms\n
[2025-08-21 06:38:09][357962507718153][708 ms][DEBUG] check_internet: online
[2025-08-21 06:38:09][357962507718153][708 ms][DEBUG] END   check_internet in 408 ms
[2025-08-21 06:38:09][357962507718153][708 ms][DEBUG] START check_scloud
[2025-08-21 06:38:09][357962507718153][708 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:38:10][357962507718153][972 ms][DEBUG] SU: done in 263 ms; outu0_a118      20979 10674 23631360 73476 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:38:10][357962507718153][972 ms][DEBUG] targetPkg: running
[2025-08-21 06:38:10][357962507718153][972 ms][DEBUG] END   check_scloud in 264 ms
[2025-08-21 06:38:10][357962507718153][972 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:38:10][357962507718153][972 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA3NzE4MTUzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEJKSEJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU3MiJ9'" -e "main()" -q"
[2025-08-21 06:38:10][357962507718153][972 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:38:10][357962507718153][972 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA3NzE4MTUzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEJKSEJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU3MiJ9'" -e "main()" -q"
[2025-08-21 06:38:12][357962507718153][3643 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTYyNTA3NzE4MTUzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEJKSEJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU3MiJ9"\r\n
[2025-08-21 06:38:15][357962507718153][5908 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afcfa76e-c659-4379-9018-1cae9a979a78","id":"QR_afcfa76e-c659-4379-9018-1cae9a979a78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:38:15][357962507718153][5908 ms][DEBUG] proc_open done in 4936 ms; code=0; res.len=3152
[2025-08-21 06:38:15][357962507718153][5908 ms][DEBUG] END   runCmdUntilRes#1 in 4936 ms
[2025-08-21 06:38:15][357962507718153][5908 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:43:06][351978522445859][1 ms][INFO] === Request start ===
[2025-08-21 06:43:06][351978522445859][1 ms][DEBUG] START check_frida
[2025-08-21 06:43:06][351978522445859][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:43:07][351978522445859][309 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2263084   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:43:07][351978522445859][309 ms][DEBUG] check_frida: running
[2025-08-21 06:43:07][351978522445859][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 06:43:07][351978522445859][309 ms][DEBUG] START check_scloud
[2025-08-21 06:43:07][351978522445859][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:43:07][351978522445859][590 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631392 72756 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:43:07][351978522445859][590 ms][DEBUG] targetPkg: running
[2025-08-21 06:43:07][351978522445859][590 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 06:43:07][351978522445859][590 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:43:07][351978522445859][590 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIyNDQ1ODU5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMFkyOVRNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE0MyJ9'" -e "main()" -q"
[2025-08-21 06:43:07][351978522445859][590 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:43:07][351978522445859][590 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIyNDQ1ODU5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMFkyOVRNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE0MyJ9'" -e "main()" -q"
[2025-08-21 06:43:09][351978522445859][3214 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxOTc4NTIyNDQ1ODU5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMFkyOVRNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE0MyJ9"\r\n
[2025-08-21 06:43:11][351978522445859][5229 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1144aaa-7c34-45b1-a229-4ac79c605438","id":"QR_a1144aaa-7c34-45b1-a229-4ac79c605438","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:43:11][351978522445859][5230 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 06:43:11][351978522445859][5230 ms][DEBUG] END   runCmdUntilRes#1 in 4640 ms
[2025-08-21 06:43:11][351978522445859][5230 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:50:04][357435844738077][1 ms][INFO] === Request start ===
[2025-08-21 06:50:04][357435844738077][2 ms][DEBUG] START check_frida
[2025-08-21 06:50:04][357435844738077][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:50:04][357435844738077][298 ms][DEBUG] SU: done in 296 ms; outroot         20950     1 2263084   4408 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:50:04][357435844738077][298 ms][DEBUG] check_frida: running
[2025-08-21 06:50:04][357435844738077][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 06:50:04][357435844738077][298 ms][DEBUG] START check_internet
[2025-08-21 06:50:04][357435844738077][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:50:05][357435844738077][720 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.252/200.252/200.252/0.000 ms\n
[2025-08-21 06:50:05][357435844738077][720 ms][DEBUG] check_internet: online
[2025-08-21 06:50:05][357435844738077][720 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 06:50:05][357435844738077][720 ms][DEBUG] START check_scloud
[2025-08-21 06:50:05][357435844738077][720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:50:05][357435844738077][1016 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23613940 73576 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:50:05][357435844738077][1016 ms][DEBUG] targetPkg: running
[2025-08-21 06:50:05][357435844738077][1016 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 06:50:05][357435844738077][1016 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:50:05][357435844738077][1016 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0NzM4MDc3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MFNKQVlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI3NyJ9'" -e "main()" -q"
[2025-08-21 06:50:05][357435844738077][1016 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:50:05][357435844738077][1016 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0NzM4MDc3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MFNKQVlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI3NyJ9'" -e "main()" -q"
[2025-08-21 06:50:08][357435844738077][3656 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDM1ODQ0NzM4MDc3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MFNKQVlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI3NyJ9"\r\n
[2025-08-21 06:50:10][357435844738077][5781 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_711d0218-bb5e-4d8b-8baa-1381f94bccca","id":"QR_711d0218-bb5e-4d8b-8baa-1381f94bccca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:50:10][357435844738077][5781 ms][DEBUG] proc_open done in 4765 ms; code=0; res.len=3152
[2025-08-21 06:50:10][357435844738077][5781 ms][DEBUG] END   runCmdUntilRes#1 in 4765 ms
[2025-08-21 06:50:10][357435844738077][5782 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:50:16][355859831960547][1 ms][INFO] === Request start ===
[2025-08-21 06:50:16][355859831960547][2 ms][DEBUG] START check_frida
[2025-08-21 06:50:16][355859831960547][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:50:16][355859831960547][259 ms][DEBUG] SU: done in 257 ms; outroot         20950     1 2279504   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:50:16][355859831960547][259 ms][DEBUG] check_frida: running
[2025-08-21 06:50:16][355859831960547][259 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 06:50:16][355859831960547][259 ms][DEBUG] START check_internet
[2025-08-21 06:50:16][355859831960547][259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:50:17][355859831960547][556 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.028/190.028/190.028/0.000 ms\n
[2025-08-21 06:50:17][355859831960547][556 ms][DEBUG] check_internet: online
[2025-08-21 06:50:17][355859831960547][556 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 06:50:17][355859831960547][556 ms][DEBUG] START check_scloud
[2025-08-21 06:50:17][355859831960547][556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:50:17][355859831960547][852 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23631456 73224 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:50:17][355859831960547][852 ms][DEBUG] targetPkg: running
[2025-08-21 06:50:17][355859831960547][852 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:50:17][355859831960547][852 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:50:17][355859831960547][853 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU5ODMxOTYwNTQ3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDME4yQ1pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA5NCJ9'" -e "main()" -q"
[2025-08-21 06:50:17][355859831960547][853 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:50:17][355859831960547][853 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU5ODMxOTYwNTQ3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDME4yQ1pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA5NCJ9'" -e "main()" -q"
[2025-08-21 06:50:20][355859831960547][3523 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODU5ODMxOTYwNTQ3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDME4yQ1pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA5NCJ9"\r\n
[2025-08-21 06:50:24][355859831960547][8210 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a56e6c2-554b-4b2d-b8e7-1977e16cdb78","id":"QR_3a56e6c2-554b-4b2d-b8e7-1977e16cdb78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:50:24][355859831960547][8211 ms][DEBUG] proc_open done in 7358 ms; code=0; res.len=3152
[2025-08-21 06:50:24][355859831960547][8211 ms][DEBUG] END   runCmdUntilRes#1 in 7358 ms
[2025-08-21 06:50:24][355859831960547][8211 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:52:11][358184570890012][0 ms][INFO] === Request start ===
[2025-08-21 06:52:11][358184570890012][1 ms][DEBUG] START check_frida
[2025-08-21 06:52:11][358184570890012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:52:11][358184570890012][287 ms][DEBUG] SU: done in 286 ms; outroot         20950     1 2263084   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:52:11][358184570890012][287 ms][DEBUG] check_frida: running
[2025-08-21 06:52:11][358184570890012][287 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 06:52:11][358184570890012][287 ms][DEBUG] START check_internet
[2025-08-21 06:52:11][358184570890012][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:52:12][358184570890012][598 ms][DEBUG] SU: done in 311 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.965/193.965/193.965/0.000 ms\n
[2025-08-21 06:52:12][358184570890012][598 ms][DEBUG] check_internet: online
[2025-08-21 06:52:12][358184570890012][598 ms][DEBUG] END   check_internet in 311 ms
[2025-08-21 06:52:12][358184570890012][598 ms][DEBUG] START check_scloud
[2025-08-21 06:52:12][358184570890012][598 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:52:12][358184570890012][897 ms][DEBUG] SU: done in 298 ms; outu0_a118      20979 10674 23631488 73340 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:52:12][358184570890012][897 ms][DEBUG] targetPkg: running
[2025-08-21 06:52:12][358184570890012][897 ms][DEBUG] END   check_scloud in 299 ms
[2025-08-21 06:52:12][358184570890012][897 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:52:12][358184570890012][897 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTg0NTcwODkwMDEyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMDNKSFFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM0MCJ9'" -e "main()" -q"
[2025-08-21 06:52:12][358184570890012][897 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:52:12][358184570890012][897 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTg0NTcwODkwMDEyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMDNKSFFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM0MCJ9'" -e "main()" -q"
[2025-08-21 06:52:15][358184570890012][3519 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MTg0NTcwODkwMDEyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMDNKSFFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM0MCJ9"\r\n
[2025-08-21 06:52:17][358184570890012][5659 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a20eed0c-ca59-4902-bcef-1e725eee2657","id":"QR_a20eed0c-ca59-4902-bcef-1e725eee2657","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:52:17][358184570890012][5659 ms][DEBUG] proc_open done in 4762 ms; code=0; res.len=3152
[2025-08-21 06:52:17][358184570890012][5659 ms][DEBUG] END   runCmdUntilRes#1 in 4762 ms
[2025-08-21 06:52:17][358184570890012][5660 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:55:06][352060482227525][1 ms][INFO] === Request start ===
[2025-08-21 06:55:06][352060482227525][2 ms][DEBUG] START check_frida
[2025-08-21 06:55:06][352060482227525][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:55:07][352060482227525][298 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:55:07][352060482227525][299 ms][DEBUG] check_frida: running
[2025-08-21 06:55:07][352060482227525][299 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 06:55:07][352060482227525][299 ms][DEBUG] START check_scloud
[2025-08-21 06:55:07][352060482227525][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:55:07][352060482227525][580 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631520 72512 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:55:07][352060482227525][580 ms][DEBUG] targetPkg: running
[2025-08-21 06:55:07][352060482227525][580 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 06:55:07][352060482227525][580 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:55:07][352060482227525][580 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDYwNDgyMjI3NTI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMDdWSjNaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE2NCJ9'" -e "main()" -q"
[2025-08-21 06:55:07][352060482227525][580 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:55:07][352060482227525][580 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDYwNDgyMjI3NTI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMDdWSjNaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE2NCJ9'" -e "main()" -q"
[2025-08-21 06:55:10][352060482227525][3220 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDYwNDgyMjI3NTI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMDdWSjNaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE2NCJ9"\r\n
[2025-08-21 06:55:12][352060482227525][5391 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a01e0397-775e-4f49-b4ce-3cd4bf9e36fc","id":"QR_a01e0397-775e-4f49-b4ce-3cd4bf9e36fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:55:12][352060482227525][5391 ms][DEBUG] proc_open done in 4811 ms; code=0; res.len=3152
[2025-08-21 06:55:12][352060482227525][5391 ms][DEBUG] END   runCmdUntilRes#1 in 4811 ms
[2025-08-21 06:55:12][352060482227525][5391 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:56:06][352549939161360][0 ms][INFO] === Request start ===
[2025-08-21 06:56:06][352549939161360][1 ms][DEBUG] START check_frida
[2025-08-21 06:56:06][352549939161360][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:56:07][352549939161360][315 ms][DEBUG] SU: done in 314 ms; outroot         20950     1 2263084   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:56:07][352549939161360][315 ms][DEBUG] check_frida: running
[2025-08-21 06:56:07][352549939161360][315 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 06:56:07][352549939161360][315 ms][DEBUG] START check_internet
[2025-08-21 06:56:07][352549939161360][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 06:56:07][352549939161360][815 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.093/202.093/202.093/0.000 ms\n
[2025-08-21 06:56:07][352549939161360][815 ms][DEBUG] check_internet: online
[2025-08-21 06:56:07][352549939161360][815 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 06:56:07][352549939161360][815 ms][DEBUG] START check_scloud
[2025-08-21 06:56:07][352549939161360][815 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:56:08][352549939161360][1080 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23631552 73096 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:56:08][352549939161360][1080 ms][DEBUG] targetPkg: running
[2025-08-21 06:56:08][352549939161360][1080 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 06:56:08][352549939161360][1080 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:56:08][352549939161360][1080 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM5MTYxMzYwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMDI5U0pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUxNSJ9'" -e "main()" -q"
[2025-08-21 06:56:08][352549939161360][1080 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:56:08][352549939161360][1080 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM5MTYxMzYwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMDI5U0pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUxNSJ9'" -e "main()" -q"
[2025-08-21 06:56:10][352549939161360][3751 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTQ5OTM5MTYxMzYwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMDI5U0pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUxNSJ9"\r\n
[2025-08-21 06:56:12][352549939161360][5923 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4efae48a-8e47-4e18-9a38-b5366c4665b3","id":"QR_4efae48a-8e47-4e18-9a38-b5366c4665b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:56:12][352549939161360][5923 ms][DEBUG] proc_open done in 4843 ms; code=0; res.len=3152
[2025-08-21 06:56:12][352549939161360][5923 ms][DEBUG] END   runCmdUntilRes#1 in 4843 ms
[2025-08-21 06:56:12][352549939161360][5923 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:57:06][352600228302700][0 ms][INFO] === Request start ===
[2025-08-21 06:57:06][352600228302700][1 ms][DEBUG] START check_frida
[2025-08-21 06:57:06][352600228302700][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:57:06][352600228302700][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:57:06][352600228302700][303 ms][DEBUG] check_frida: running
[2025-08-21 06:57:06][352600228302700][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 06:57:06][352600228302700][303 ms][DEBUG] START check_scloud
[2025-08-21 06:57:06][352600228302700][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:57:06][352600228302700][584 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631584 72940 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:57:06][352600228302700][584 ms][DEBUG] targetPkg: running
[2025-08-21 06:57:06][352600228302700][584 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 06:57:06][352600228302700][584 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:57:06][352600228302700][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI4MzAyNzAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MEM4UjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA5OCJ9'" -e "main()" -q"
[2025-08-21 06:57:06][352600228302700][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:57:06][352600228302700][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI4MzAyNzAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MEM4UjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA5OCJ9'" -e "main()" -q"
[2025-08-21 06:57:09][352600228302700][3193 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjAwMjI4MzAyNzAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MEM4UjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA5OCJ9"\r\n
[2025-08-21 06:57:11][352600228302700][5427 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e60ce9d7-d2a6-4066-83d0-4e9b197ba328","id":"QR_e60ce9d7-d2a6-4066-83d0-4e9b197ba328","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:57:11][352600228302700][5427 ms][DEBUG] proc_open done in 4842 ms; code=0; res.len=3152
[2025-08-21 06:57:11][352600228302700][5427 ms][DEBUG] END   runCmdUntilRes#1 in 4842 ms
[2025-08-21 06:57:11][352600228302700][5427 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 06:59:06][359290410946903][1 ms][INFO] === Request start ===
[2025-08-21 06:59:06][359290410946903][2 ms][DEBUG] START check_frida
[2025-08-21 06:59:06][359290410946903][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 06:59:06][359290410946903][293 ms][DEBUG] SU: done in 292 ms; outroot         20950     1 2263084   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 06:59:06][359290410946903][293 ms][DEBUG] check_frida: running
[2025-08-21 06:59:06][359290410946903][293 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 06:59:06][359290410946903][293 ms][DEBUG] START check_scloud
[2025-08-21 06:59:06][359290410946903][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 06:59:07][359290410946903][590 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23631616 72380 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 06:59:07][359290410946903][590 ms][DEBUG] targetPkg: running
[2025-08-21 06:59:07][359290410946903][590 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 06:59:07][359290410946903][590 ms][DEBUG] rawBody.length=1161
[2025-08-21 06:59:07][359290410946903][590 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MjkwNDEwOTQ2OTAzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMFBXNENMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIxNCJ9'" -e "main()" -q"
[2025-08-21 06:59:07][359290410946903][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 06:59:07][359290410946903][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MjkwNDEwOTQ2OTAzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMFBXNENMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIxNCJ9'" -e "main()" -q"
[2025-08-21 06:59:09][359290410946903][3230 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MjkwNDEwOTQ2OTAzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMFBXNENMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIxNCJ9"\r\n
[2025-08-21 06:59:11][359290410946903][5479 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69c065ea-69eb-46b8-8040-6f67f4e288da","id":"QR_69c065ea-69eb-46b8-8040-6f67f4e288da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 06:59:11][359290410946903][5480 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 06:59:11][359290410946903][5480 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 06:59:11][359290410946903][5480 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:01:06][359142451572629][1 ms][INFO] === Request start ===
[2025-08-21 07:01:06][359142451572629][2 ms][DEBUG] START check_frida
[2025-08-21 07:01:06][359142451572629][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:01:06][359142451572629][275 ms][DEBUG] SU: done in 273 ms; outroot         20950     1 2263084   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:01:06][359142451572629][275 ms][DEBUG] check_frida: running
[2025-08-21 07:01:06][359142451572629][275 ms][DEBUG] END   check_frida in 273 ms
[2025-08-21 07:01:06][359142451572629][275 ms][DEBUG] START check_scloud
[2025-08-21 07:01:06][359142451572629][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:01:07][359142451572629][556 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631648 72888 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:01:07][359142451572629][556 ms][DEBUG] targetPkg: running
[2025-08-21 07:01:07][359142451572629][556 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:01:07][359142451572629][556 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:01:07][359142451572629][556 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTQyNDUxNTcyNjI5IiwibW9kZWwiOiJTTS1BMjM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcyMDFUOVlaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTA3MiJ9'" -e "main()" -q"
[2025-08-21 07:01:07][359142451572629][556 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:01:07][359142451572629][556 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTQyNDUxNTcyNjI5IiwibW9kZWwiOiJTTS1BMjM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcyMDFUOVlaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTA3MiJ9'" -e "main()" -q"
[2025-08-21 07:01:09][359142451572629][3180 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTQyNDUxNTcyNjI5IiwibW9kZWwiOiJTTS1BMjM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcyMDFUOVlaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTA3MiJ9"\r\n
[2025-08-21 07:01:12][359142451572629][5758 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95de3bf4-16ba-4488-8786-f094f2c2d021","id":"QR_95de3bf4-16ba-4488-8786-f094f2c2d021","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:01:12][359142451572629][5758 ms][DEBUG] proc_open done in 5202 ms; code=0; res.len=3152
[2025-08-21 07:01:12][359142451572629][5758 ms][DEBUG] END   runCmdUntilRes#1 in 5202 ms
[2025-08-21 07:01:12][359142451572629][5758 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:02:06][353936444502601][0 ms][INFO] === Request start ===
[2025-08-21 07:02:06][353936444502601][1 ms][DEBUG] START check_frida
[2025-08-21 07:02:06][353936444502601][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:02:06][353936444502601][288 ms][DEBUG] SU: done in 286 ms; outroot         20950     1 2263084   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:02:06][353936444502601][288 ms][DEBUG] check_frida: running
[2025-08-21 07:02:06][353936444502601][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 07:02:06][353936444502601][288 ms][DEBUG] START check_internet
[2025-08-21 07:02:06][353936444502601][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:02:07][353936444502601][787 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.912/201.912/201.912/0.000 ms\n
[2025-08-21 07:02:07][353936444502601][787 ms][DEBUG] check_internet: online
[2025-08-21 07:02:07][353936444502601][787 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 07:02:07][353936444502601][787 ms][DEBUG] START check_scloud
[2025-08-21 07:02:07][353936444502601][788 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:02:07][353936444502601][1053 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23631680 72504 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:02:07][353936444502601][1053 ms][DEBUG] targetPkg: running
[2025-08-21 07:02:07][353936444502601][1053 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 07:02:07][353936444502601][1053 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:02:07][353936444502601][1053 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTM2NDQ0NTAyNjAxIiwibW9kZWwiOiJTTS1GNzQxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjBLWjhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3NCJ9'" -e "main()" -q"
[2025-08-21 07:02:07][353936444502601][1053 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:02:07][353936444502601][1053 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTM2NDQ0NTAyNjAxIiwibW9kZWwiOiJTTS1GNzQxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjBLWjhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3NCJ9'" -e "main()" -q"
[2025-08-21 07:02:09][352177393321955][1 ms][INFO] === Request start ===
[2025-08-21 07:02:10][353936444502601][3677 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTM2NDQ0NTAyNjAxIiwibW9kZWwiOiJTTS1GNzQxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjBLWjhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3NCJ9"\r\n
[2025-08-21 07:02:12][353936444502601][5833 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a97b0d2b-b2c7-42d0-9415-09e88d36fcc0","id":"QR_a97b0d2b-b2c7-42d0-9415-09e88d36fcc0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:02:12][353936444502601][5834 ms][DEBUG] proc_open done in 4781 ms; code=0; res.len=3152
[2025-08-21 07:02:12][353936444502601][5834 ms][DEBUG] END   runCmdUntilRes#1 in 4781 ms
[2025-08-21 07:02:12][353936444502601][5834 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:02:12][352177393321955][3042 ms][DEBUG] START check_frida
[2025-08-21 07:02:12][352177393321955][3042 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:02:12][352177393321955][3354 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2279504   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:02:12][352177393321955][3355 ms][DEBUG] check_frida: running
[2025-08-21 07:02:12][352177393321955][3355 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 07:02:12][352177393321955][3355 ms][DEBUG] START check_internet
[2025-08-21 07:02:12][352177393321955][3355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:02:13][352177393321955][3589 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=129 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 129.054/129.054/129.054/0.000 ms\n
[2025-08-21 07:02:13][352177393321955][3589 ms][DEBUG] check_internet: online
[2025-08-21 07:02:13][352177393321955][3589 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 07:02:13][352177393321955][3589 ms][DEBUG] START check_scloud
[2025-08-21 07:02:13][352177393321955][3589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:02:13][352177393321955][3854 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23631712 73600 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:02:13][352177393321955][3854 ms][DEBUG] targetPkg: running
[2025-08-21 07:02:13][352177393321955][3854 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 07:02:13][352177393321955][3854 ms][DEBUG] rawBody.length=1160
[2025-08-21 07:02:13][352177393321955][3854 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTc3MzkzMzIxOTU1IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ0MDk1Vk5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjI0In0='" -e "main()" -q"
[2025-08-21 07:02:13][352177393321955][3855 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:02:13][352177393321955][3855 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTc3MzkzMzIxOTU1IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ0MDk1Vk5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjI0In0='" -e "main()" -q"
[2025-08-21 07:02:15][352177393321955][6463 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMTc3MzkzMzIxOTU1IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ0MDk1Vk5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjI0In0="\r\n
[2025-08-21 07:02:20][350524540009631][1 ms][INFO] === Request start ===
[2025-08-21 07:02:20][352177393321955][11102 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77d4299f-3cc4-4718-859a-f06642ea3d9e","id":"QR_77d4299f-3cc4-4718-859a-f06642ea3d9e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:02:20][352177393321955][11103 ms][DEBUG] proc_open done in 7248 ms; code=0; res.len=3152
[2025-08-21 07:02:20][352177393321955][11103 ms][DEBUG] END   runCmdUntilRes#1 in 7248 ms
[2025-08-21 07:02:20][352177393321955][11103 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:02:21][350524540009631][1005 ms][DEBUG] START check_frida
[2025-08-21 07:02:21][350524540009631][1005 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:02:21][350524540009631][1318 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2279504   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:02:21][350524540009631][1318 ms][DEBUG] check_frida: running
[2025-08-21 07:02:21][350524540009631][1318 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 07:02:21][350524540009631][1318 ms][DEBUG] START check_internet
[2025-08-21 07:02:21][350524540009631][1318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:02:21][350524540009631][1568 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.432/157.432/157.432/0.000 ms\n
[2025-08-21 07:02:21][350524540009631][1568 ms][DEBUG] check_internet: online
[2025-08-21 07:02:21][350524540009631][1568 ms][DEBUG] END   check_internet in 249 ms
[2025-08-21 07:02:21][350524540009631][1568 ms][DEBUG] START check_scloud
[2025-08-21 07:02:21][350524540009631][1568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:02:22][350524540009631][1865 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23631744 72624 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:02:22][350524540009631][1865 ms][DEBUG] targetPkg: running
[2025-08-21 07:02:22][350524540009631][1865 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 07:02:22][350524540009631][1865 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:02:22][350524540009631][1865 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTI0NTQwMDA5NjMxIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g3MUgwUTlWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc0NiJ9'" -e "main()" -q"
[2025-08-21 07:02:22][350524540009631][1865 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:02:22][350524540009631][1865 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTI0NTQwMDA5NjMxIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g3MUgwUTlWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc0NiJ9'" -e "main()" -q"
[2025-08-21 07:02:24][350524540009631][4536 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTI0NTQwMDA5NjMxIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g3MUgwUTlWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc0NiJ9"\r\n
[2025-08-21 07:02:26][350524540009631][6785 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88508be6-153f-483a-a82b-f59fe5e709f6","id":"QR_88508be6-153f-483a-a82b-f59fe5e709f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:02:26][350524540009631][6785 ms][DEBUG] proc_open done in 4921 ms; code=0; res.len=3152
[2025-08-21 07:02:26][350524540009631][6785 ms][DEBUG] END   runCmdUntilRes#1 in 4921 ms
[2025-08-21 07:02:26][350524540009631][6785 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:03:07][350702693036342][0 ms][INFO] === Request start ===
[2025-08-21 07:03:07][350702693036342][1 ms][DEBUG] START check_frida
[2025-08-21 07:03:07][350702693036342][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:03:07][350702693036342][301 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2263084   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:03:07][350702693036342][301 ms][DEBUG] check_frida: running
[2025-08-21 07:03:07][350702693036342][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 07:03:07][350702693036342][301 ms][DEBUG] START check_scloud
[2025-08-21 07:03:07][350702693036342][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:03:08][350702693036342][597 ms][DEBUG] SU: done in 295 ms; outu0_a118      20979 10674 23631776 73140 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:03:08][350702693036342][597 ms][DEBUG] targetPkg: running
[2025-08-21 07:03:08][350702693036342][597 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 07:03:08][350702693036342][597 ms][DEBUG] rawBody.length=1160
[2025-08-21 07:03:08][350702693036342][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAyNjkzMDM2MzQyIiwibW9kZWwiOiJTTS1TOTExVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c2MEVCRThNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTczIn0='" -e "main()" -q"
[2025-08-21 07:03:08][350702693036342][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:03:08][350702693036342][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAyNjkzMDM2MzQyIiwibW9kZWwiOiJTTS1TOTExVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c2MEVCRThNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTczIn0='" -e "main()" -q"
[2025-08-21 07:03:10][350702693036342][3252 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzAyNjkzMDM2MzQyIiwibW9kZWwiOiJTTS1TOTExVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c2MEVCRThNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTczIn0="\r\n
[2025-08-21 07:03:14][350702693036342][7110 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_421c58f7-f387-4e21-9720-eb5c5b165701","id":"QR_421c58f7-f387-4e21-9720-eb5c5b165701","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:03:14][350702693036342][7111 ms][DEBUG] proc_open done in 6514 ms; code=0; res.len=3152
[2025-08-21 07:03:14][350702693036342][7111 ms][DEBUG] END   runCmdUntilRes#1 in 6514 ms
[2025-08-21 07:03:14][350702693036342][7111 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:07:20][351351023991955][1 ms][INFO] === Request start ===
[2025-08-21 07:07:20][351351023991955][2 ms][DEBUG] START check_frida
[2025-08-21 07:07:20][351351023991955][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:07:20][351351023991955][301 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2263084   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:07:20][351351023991955][301 ms][DEBUG] check_frida: running
[2025-08-21 07:07:20][351351023991955][301 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 07:07:20][351351023991955][301 ms][DEBUG] START check_scloud
[2025-08-21 07:07:20][351351023991955][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:07:21][351351023991955][597 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23631808 73596 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:07:21][351351023991955][598 ms][DEBUG] targetPkg: running
[2025-08-21 07:07:21][351351023991955][598 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 07:07:21][351351023991955][598 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:07:21][351351023991955][598 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzUxMDIzOTkxOTU1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g3MUFaQ0xMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc1MSJ9'" -e "main()" -q"
[2025-08-21 07:07:21][351351023991955][598 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:07:21][351351023991955][598 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzUxMDIzOTkxOTU1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g3MUFaQ0xMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc1MSJ9'" -e "main()" -q"
[2025-08-21 07:07:23][351351023991955][3175 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzUxMDIzOTkxOTU1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g3MUFaQ0xMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc1MSJ9"\r\n
[2025-08-21 07:07:26][351351023991955][5643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db5bb363-828a-4d3c-9b2f-ba8575d92a1f","id":"QR_db5bb363-828a-4d3c-9b2f-ba8575d92a1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:07:26][351351023991955][5643 ms][DEBUG] proc_open done in 5046 ms; code=0; res.len=3152
[2025-08-21 07:07:26][351351023991955][5643 ms][DEBUG] END   runCmdUntilRes#1 in 5046 ms
[2025-08-21 07:07:26][351351023991955][5643 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:10:07][352350276541599][1 ms][INFO] === Request start ===
[2025-08-21 07:10:07][352350276541599][2 ms][DEBUG] START check_frida
[2025-08-21 07:10:07][352350276541599][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:10:07][352350276541599][297 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2263084   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:10:07][352350276541599][297 ms][DEBUG] check_frida: running
[2025-08-21 07:10:07][352350276541599][297 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 07:10:07][352350276541599][297 ms][DEBUG] START check_internet
[2025-08-21 07:10:07][352350276541599][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:10:08][352350276541599][828 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.966/201.966/201.966/0.000 ms\n
[2025-08-21 07:10:08][352350276541599][828 ms][DEBUG] check_internet: online
[2025-08-21 07:10:08][352350276541599][828 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 07:10:08][352350276541599][828 ms][DEBUG] START check_scloud
[2025-08-21 07:10:08][352350276541599][828 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:10:08][352350276541599][1109 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631840 74148 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:10:08][352350276541599][1109 ms][DEBUG] targetPkg: running
[2025-08-21 07:10:08][352350276541599][1109 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:10:08][352350276541599][1109 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:10:08][352350276541599][1109 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzUwMjc2NTQxNTk5IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c5MlQzMUZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc1NyJ9'" -e "main()" -q"
[2025-08-21 07:10:08][352350276541599][1109 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:10:08][352350276541599][1110 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzUwMjc2NTQxNTk5IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c5MlQzMUZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc1NyJ9'" -e "main()" -q"
[2025-08-21 07:10:11][352350276541599][3765 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzUwMjc2NTQxNTk5IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c5MlQzMUZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc1NyJ9"\r\n
[2025-08-21 07:10:13][352350276541599][6233 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c8f33b2-fb34-4e48-a821-fae167558ea3","id":"QR_4c8f33b2-fb34-4e48-a821-fae167558ea3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:10:13][352350276541599][6233 ms][DEBUG] proc_open done in 5123 ms; code=0; res.len=3152
[2025-08-21 07:10:13][352350276541599][6233 ms][DEBUG] END   runCmdUntilRes#1 in 5123 ms
[2025-08-21 07:10:13][352350276541599][6233 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:14:08][350938289915586][1 ms][INFO] === Request start ===
[2025-08-21 07:14:08][350938289915586][2 ms][DEBUG] START check_frida
[2025-08-21 07:14:08][350938289915586][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:14:09][350938289915586][294 ms][DEBUG] SU: done in 292 ms; outroot         20950     1 2263084   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:14:09][350938289915586][294 ms][DEBUG] check_frida: running
[2025-08-21 07:14:09][350938289915586][294 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 07:14:09][350938289915586][294 ms][DEBUG] START check_internet
[2025-08-21 07:14:09][350938289915586][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:14:09][350938289915586][684 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.522/297.522/297.522/0.000 ms\n
[2025-08-21 07:14:09][350938289915586][684 ms][DEBUG] check_internet: online
[2025-08-21 07:14:09][350938289915586][684 ms][DEBUG] END   check_internet in 390 ms
[2025-08-21 07:14:09][350938289915586][684 ms][DEBUG] START check_scloud
[2025-08-21 07:14:09][350938289915586][684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:14:09][350938289915586][965 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23631872 73524 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:14:09][350938289915586][965 ms][DEBUG] targetPkg: running
[2025-08-21 07:14:09][350938289915586][965 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:14:09][350938289915586][965 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:14:09][350938289915586][965 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg5OTE1NTg2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFZQNDhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMyNyJ9'" -e "main()" -q"
[2025-08-21 07:14:09][350938289915586][965 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:14:09][350938289915586][965 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg5OTE1NTg2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFZQNDhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMyNyJ9'" -e "main()" -q"
[2025-08-21 07:14:12][350938289915586][3573 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg5OTE1NTg2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFZQNDhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMyNyJ9"\r\n
[2025-08-21 07:14:15][350938289915586][6198 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01004948-3d8c-4752-a044-ce17e6538ad4","id":"QR_01004948-3d8c-4752-a044-ce17e6538ad4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:14:15][350938289915586][6198 ms][DEBUG] proc_open done in 5233 ms; code=0; res.len=3152
[2025-08-21 07:14:15][350938289915586][6198 ms][DEBUG] END   runCmdUntilRes#1 in 5233 ms
[2025-08-21 07:14:15][350938289915586][6198 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:14:20][356369481513256][0 ms][INFO] === Request start ===
[2025-08-21 07:14:20][356369481513256][1 ms][DEBUG] START check_frida
[2025-08-21 07:14:20][356369481513256][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:14:20][356369481513256][296 ms][DEBUG] SU: done in 294 ms; outroot         20950     1 2279504   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:14:20][356369481513256][296 ms][DEBUG] check_frida: running
[2025-08-21 07:14:20][356369481513256][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 07:14:20][356369481513256][296 ms][DEBUG] START check_internet
[2025-08-21 07:14:20][356369481513256][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:14:20][356369481513256][592 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.541/204.541/204.541/0.000 ms\n
[2025-08-21 07:14:20][356369481513256][592 ms][DEBUG] check_internet: online
[2025-08-21 07:14:20][356369481513256][592 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 07:14:20][356369481513256][592 ms][DEBUG] START check_scloud
[2025-08-21 07:14:20][356369481513256][592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:14:21][356369481513256][875 ms][DEBUG] SU: done in 283 ms; outu0_a118      20979 10674 23631904 74084 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:14:21][356369481513256][875 ms][DEBUG] targetPkg: running
[2025-08-21 07:14:21][356369481513256][875 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 07:14:21][356369481513256][875 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:14:21][356369481513256][875 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzY5NDgxNTEzMjU2IiwibW9kZWwiOiJTTS1TOTA2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RCMDE5UVJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTloiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUzNCJ9'" -e "main()" -q"
[2025-08-21 07:14:21][356369481513256][875 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:14:21][356369481513256][876 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzY5NDgxNTEzMjU2IiwibW9kZWwiOiJTTS1TOTA2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RCMDE5UVJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTloiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUzNCJ9'" -e "main()" -q"
[2025-08-21 07:14:23][356369481513256][3514 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MzY5NDgxNTEzMjU2IiwibW9kZWwiOiJTTS1TOTA2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RCMDE5UVJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTloiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUzNCJ9"\r\n
[2025-08-21 07:14:25][356369481513256][5388 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e263a2b-64f2-405e-8d0e-9bf18c7302fe","id":"QR_8e263a2b-64f2-405e-8d0e-9bf18c7302fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:14:25][356369481513256][5388 ms][DEBUG] proc_open done in 4512 ms; code=0; res.len=3152
[2025-08-21 07:14:25][356369481513256][5388 ms][DEBUG] END   runCmdUntilRes#1 in 4513 ms
[2025-08-21 07:14:25][356369481513256][5388 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:15:08][351832198692510][0 ms][INFO] === Request start ===
[2025-08-21 07:15:08][351832198692510][1 ms][DEBUG] START check_frida
[2025-08-21 07:15:08][351832198692510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:15:09][351832198692510][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:15:09][351832198692510][303 ms][DEBUG] check_frida: running
[2025-08-21 07:15:09][351832198692510][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 07:15:09][351832198692510][303 ms][DEBUG] START check_scloud
[2025-08-21 07:15:09][351832198692510][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:15:09][351832198692510][537 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23631936 73544 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:15:09][351832198692510][537 ms][DEBUG] targetPkg: running
[2025-08-21 07:15:09][351832198692510][538 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 07:15:09][351832198692510][538 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:15:09][351832198692510][538 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODMyMTk4NjkyNTEwIiwibW9kZWwiOiJTTS1BMjE3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5DMEpXQUhBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk2MyJ9'" -e "main()" -q"
[2025-08-21 07:15:09][351832198692510][538 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:15:09][351832198692510][538 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODMyMTk4NjkyNTEwIiwibW9kZWwiOiJTTS1BMjE3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5DMEpXQUhBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk2MyJ9'" -e "main()" -q"
[2025-08-21 07:15:11][351832198692510][3177 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODMyMTk4NjkyNTEwIiwibW9kZWwiOiJTTS1BMjE3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5DMEpXQUhBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk2MyJ9"\r\n
[2025-08-21 07:15:14][351832198692510][5380 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c8d5030-e03b-4e66-a34c-abbaadecd8ac","id":"QR_0c8d5030-e03b-4e66-a34c-abbaadecd8ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:15:14][351832198692510][5380 ms][DEBUG] proc_open done in 4842 ms; code=0; res.len=3152
[2025-08-21 07:15:14][351832198692510][5380 ms][DEBUG] END   runCmdUntilRes#1 in 4842 ms
[2025-08-21 07:15:14][351832198692510][5380 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:15:20][358453420379017][0 ms][INFO] === Request start ===
[2025-08-21 07:15:20][358453420379017][1 ms][DEBUG] START check_frida
[2025-08-21 07:15:20][358453420379017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:15:20][358453420379017][288 ms][DEBUG] SU: done in 287 ms; outroot         20950     1 2279504   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:15:20][358453420379017][289 ms][DEBUG] check_frida: running
[2025-08-21 07:15:20][358453420379017][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 07:15:20][358453420379017][289 ms][DEBUG] START check_scloud
[2025-08-21 07:15:20][358453420379017][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:15:20][358453420379017][585 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23631968 74116 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:15:20][358453420379017][585 ms][DEBUG] targetPkg: running
[2025-08-21 07:15:20][358453420379017][585 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 07:15:20][358453420379017][585 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:15:20][358453420379017][585 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NDUzNDIwMzc5MDE3IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MFdSU0NIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY2OCJ9'" -e "main()" -q"
[2025-08-21 07:15:20][358453420379017][585 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:15:20][358453420379017][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NDUzNDIwMzc5MDE3IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MFdSU0NIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY2OCJ9'" -e "main()" -q"
[2025-08-21 07:15:23][358453420379017][3225 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NDUzNDIwMzc5MDE3IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MFdSU0NIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY2OCJ9"\r\n
[2025-08-21 07:15:25][358453420379017][5678 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_507b9281-12bd-49f7-bff3-17d57e1b7f8e","id":"QR_507b9281-12bd-49f7-bff3-17d57e1b7f8e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:15:25][358453420379017][5678 ms][DEBUG] proc_open done in 5093 ms; code=0; res.len=3152
[2025-08-21 07:15:25][358453420379017][5678 ms][DEBUG] END   runCmdUntilRes#1 in 5093 ms
[2025-08-21 07:15:25][358453420379017][5678 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:16:06][351272338779242][0 ms][INFO] === Request start ===
[2025-08-21 07:16:06][351272338779242][1 ms][DEBUG] START check_frida
[2025-08-21 07:16:06][351272338779242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:16:06][351272338779242][299 ms][DEBUG] SU: done in 298 ms; outroot         20950     1 2263084   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:16:06][351272338779242][299 ms][DEBUG] check_frida: running
[2025-08-21 07:16:06][351272338779242][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 07:16:06][351272338779242][299 ms][DEBUG] START check_internet
[2025-08-21 07:16:06][351272338779242][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:16:17][351272338779242][10515 ms][DEBUG] SU: done in 10216 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, 100% packet loss, time 0ms\n\n
[2025-08-21 07:16:17][351272338779242][10515 ms][WARN] check_internet: offline
[2025-08-21 07:16:17][351272338779242][10515 ms][DEBUG] END   check_internet in 10216 ms
[2025-08-21 07:16:18][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 07:16:18][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 07:16:18][][41 ms][DEBUG] ADB: done in 40 ms; out
[2025-08-21 07:16:18][][41 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 07:16:19][][104 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 07:16:19][][104 ms][DEBUG] END   check_boot_completed in 104 ms
[2025-08-21 07:16:19][351272338779242][104 ms][INFO] === Request start ===
[2025-08-21 07:16:19][351272338779242][104 ms][DEBUG] START check_frida
[2025-08-21 07:16:19][351272338779242][104 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:16:19][351272338779242][400 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:16:19][351272338779242][401 ms][DEBUG] check_frida: running
[2025-08-21 07:16:19][351272338779242][401 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 07:16:19][351272338779242][401 ms][DEBUG] START check_internet
[2025-08-21 07:16:19][351272338779242][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:16:19][351272338779242][697 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.504/205.504/205.504/0.000 ms\n
[2025-08-21 07:16:19][351272338779242][697 ms][DEBUG] check_internet: online
[2025-08-21 07:16:19][351272338779242][697 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 07:16:19][351272338779242][697 ms][DEBUG] START check_scloud
[2025-08-21 07:16:19][351272338779242][698 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:16:19][351272338779242][980 ms][DEBUG] SU: done in 283 ms; outu0_a118      20979 10674 23632000 73128 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:16:19][351272338779242][980 ms][DEBUG] targetPkg: running
[2025-08-21 07:16:19][351272338779242][980 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 07:16:19][351272338779242][980 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:16:19][351272338779242][981 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM4Nzc5MjQyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEY5NTZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM3MiJ9'" -e "main()" -q"
[2025-08-21 07:16:19][351272338779242][981 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:16:19][351272338779242][981 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM4Nzc5MjQyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEY5NTZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM3MiJ9'" -e "main()" -q"
[2025-08-21 07:16:22][351272338779242][3618 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcyMzM4Nzc5MjQyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEY5NTZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM3MiJ9"\r\n
[2025-08-21 07:16:24][351272338779242][5430 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60cbfe57-3e9d-4fbd-8e01-7d311b90e581","id":"QR_60cbfe57-3e9d-4fbd-8e01-7d311b90e581","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:16:24][351272338779242][5431 ms][DEBUG] proc_open done in 4450 ms; code=0; res.len=3152
[2025-08-21 07:16:24][351272338779242][5431 ms][DEBUG] END   runCmdUntilRes#1 in 4450 ms
[2025-08-21 07:16:24][351272338779242][5431 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:17:09][352949521462640][0 ms][INFO] === Request start ===
[2025-08-21 07:17:09][352949521462640][1 ms][DEBUG] START check_frida
[2025-08-21 07:17:09][352949521462640][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:17:09][352949521462640][261 ms][DEBUG] SU: done in 259 ms; outroot         20950     1 2263084   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:17:09][352949521462640][261 ms][DEBUG] check_frida: running
[2025-08-21 07:17:09][352949521462640][261 ms][DEBUG] END   check_frida in 259 ms
[2025-08-21 07:17:09][352949521462640][261 ms][DEBUG] START check_scloud
[2025-08-21 07:17:09][352949521462640][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:17:10][352949521462640][495 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23632032 73704 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:17:10][352949521462640][495 ms][DEBUG] targetPkg: running
[2025-08-21 07:17:10][352949521462640][495 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 07:17:10][352949521462640][495 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:17:10][352949521462640][495 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTQ5NTIxNDYyNjQwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMEVURzZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzczMyJ9'" -e "main()" -q"
[2025-08-21 07:17:10][352949521462640][495 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:17:10][352949521462640][495 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTQ5NTIxNDYyNjQwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMEVURzZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzczMyJ9'" -e "main()" -q"
[2025-08-21 07:17:12][352949521462640][3104 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTQ5NTIxNDYyNjQwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMEVURzZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzczMyJ9"\r\n
[2025-08-21 07:17:15][352949521462640][5587 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4e645aa-d2ee-40b8-9665-1db09da76e7d","id":"QR_c4e645aa-d2ee-40b8-9665-1db09da76e7d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:17:15][352949521462640][5588 ms][DEBUG] proc_open done in 5092 ms; code=0; res.len=3152
[2025-08-21 07:17:15][352949521462640][5588 ms][DEBUG] END   runCmdUntilRes#1 in 5093 ms
[2025-08-21 07:17:15][352949521462640][5588 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:18:06][350814494427958][1 ms][INFO] === Request start ===
[2025-08-21 07:18:06][350814494427958][2 ms][DEBUG] START check_frida
[2025-08-21 07:18:06][350814494427958][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:18:07][350814494427958][259 ms][DEBUG] SU: done in 257 ms; outroot         20950     1 2263084   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:18:07][350814494427958][259 ms][DEBUG] check_frida: running
[2025-08-21 07:18:07][350814494427958][259 ms][DEBUG] END   check_frida in 258 ms
[2025-08-21 07:18:07][350814494427958][259 ms][DEBUG] START check_internet
[2025-08-21 07:18:07][350814494427958][259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:18:07][350814494427958][556 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.641/206.641/206.641/0.000 ms\n
[2025-08-21 07:18:07][350814494427958][556 ms][DEBUG] check_internet: online
[2025-08-21 07:18:07][350814494427958][556 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 07:18:07][350814494427958][556 ms][DEBUG] START check_scloud
[2025-08-21 07:18:07][350814494427958][556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:18:07][350814494427958][837 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632064 73388 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:18:07][350814494427958][837 ms][DEBUG] targetPkg: running
[2025-08-21 07:18:07][350814494427958][837 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:18:07][350814494427958][837 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:18:07][350814494427958][838 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk0NDI3OTU4IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MzJFRkdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE5OSJ9'" -e "main()" -q"
[2025-08-21 07:18:07][350814494427958][838 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:18:07][350814494427958][838 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk0NDI3OTU4IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MzJFRkdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE5OSJ9'" -e "main()" -q"
[2025-08-21 07:18:10][350814494427958][3477 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODE0NDk0NDI3OTU4IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MzJFRkdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE5OSJ9"\r\n
[2025-08-21 07:18:12][350814494427958][5524 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_202d210d-cee3-402a-a761-8cb35c670ec9","id":"QR_202d210d-cee3-402a-a761-8cb35c670ec9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:18:12][350814494427958][5524 ms][DEBUG] proc_open done in 4686 ms; code=0; res.len=3152
[2025-08-21 07:18:12][350814494427958][5524 ms][DEBUG] END   runCmdUntilRes#1 in 4686 ms
[2025-08-21 07:18:12][350814494427958][5524 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:22:07][353194561317748][1 ms][INFO] === Request start ===
[2025-08-21 07:22:07][353194561317748][2 ms][DEBUG] START check_frida
[2025-08-21 07:22:07][353194561317748][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:22:08][353194561317748][297 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2263084   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:22:08][353194561317748][297 ms][DEBUG] check_frida: running
[2025-08-21 07:22:08][353194561317748][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 07:22:08][353194561317748][297 ms][DEBUG] START check_internet
[2025-08-21 07:22:08][353194561317748][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:22:08][353194561317748][639 ms][DEBUG] SU: done in 342 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.488/135.488/135.488/0.000 ms\n
[2025-08-21 07:22:08][353194561317748][639 ms][DEBUG] check_internet: online
[2025-08-21 07:22:08][353194561317748][639 ms][DEBUG] END   check_internet in 342 ms
[2025-08-21 07:22:08][353194561317748][639 ms][DEBUG] START check_scloud
[2025-08-21 07:22:08][353194561317748][639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:22:08][353194561317748][905 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23632096 73340 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:22:08][353194561317748][905 ms][DEBUG] targetPkg: running
[2025-08-21 07:22:08][353194561317748][905 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 07:22:08][353194561317748][905 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:22:08][353194561317748][905 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTk0NTYxMzE3NzQ4IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE42NDRSMFFCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM1MCJ9'" -e "main()" -q"
[2025-08-21 07:22:08][353194561317748][905 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:22:08][353194561317748][905 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTk0NTYxMzE3NzQ4IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE42NDRSMFFCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM1MCJ9'" -e "main()" -q"
[2025-08-21 07:22:11][353194561317748][3576 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTk0NTYxMzE3NzQ4IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE42NDRSMFFCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM1MCJ9"\r\n
[2025-08-21 07:22:14][353194561317748][6356 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e82494e3-c38c-4c01-92c6-69e9b81b1f19","id":"QR_e82494e3-c38c-4c01-92c6-69e9b81b1f19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:22:14][353194561317748][6356 ms][DEBUG] proc_open done in 5452 ms; code=0; res.len=3152
[2025-08-21 07:22:14][353194561317748][6356 ms][DEBUG] END   runCmdUntilRes#1 in 5452 ms
[2025-08-21 07:22:14][353194561317748][6357 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:24:05][352384579046725][0 ms][INFO] === Request start ===
[2025-08-21 07:24:05][352384579046725][1 ms][DEBUG] START check_frida
[2025-08-21 07:24:05][352384579046725][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:24:06][352384579046725][301 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2263084   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:24:06][352384579046725][301 ms][DEBUG] check_frida: running
[2025-08-21 07:24:06][352384579046725][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 07:24:06][352384579046725][301 ms][DEBUG] START check_internet
[2025-08-21 07:24:06][352384579046725][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:24:06][352384579046725][613 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=213 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 213.967/213.967/213.967/0.000 ms\n
[2025-08-21 07:24:06][352384579046725][613 ms][DEBUG] check_internet: online
[2025-08-21 07:24:06][352384579046725][614 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 07:24:06][352384579046725][614 ms][DEBUG] START check_scloud
[2025-08-21 07:24:06][352384579046725][614 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:24:06][352384579046725][910 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23632128 74088 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:24:06][352384579046725][910 ms][DEBUG] targetPkg: running
[2025-08-21 07:24:06][352384579046725][910 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 07:24:06][352384579046725][910 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:24:06][352384579046725][910 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzg0NTc5MDQ2NzI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MExYUVlXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY0NiJ9'" -e "main()" -q"
[2025-08-21 07:24:06][352384579046725][910 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:24:06][352384579046725][910 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzg0NTc5MDQ2NzI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MExYUVlXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY0NiJ9'" -e "main()" -q"
[2025-08-21 07:24:09][352384579046725][3566 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzg0NTc5MDQ2NzI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MExYUVlXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY0NiJ9"\r\n
[2025-08-21 07:24:11][352384579046725][6018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27d99311-b7d9-4512-9d4c-c5339b20da8c","id":"QR_27d99311-b7d9-4512-9d4c-c5339b20da8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:24:11][352384579046725][6019 ms][DEBUG] proc_open done in 5109 ms; code=0; res.len=3152
[2025-08-21 07:24:11][352384579046725][6019 ms][DEBUG] END   runCmdUntilRes#1 in 5109 ms
[2025-08-21 07:24:11][352384579046725][6019 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:28:09][350545461218141][1 ms][INFO] === Request start ===
[2025-08-21 07:28:09][350545461218141][2 ms][DEBUG] START check_frida
[2025-08-21 07:28:09][350545461218141][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:28:09][350545461218141][336 ms][DEBUG] SU: done in 335 ms; outroot         20950     1 2263084   4140 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:28:09][350545461218141][336 ms][DEBUG] check_frida: running
[2025-08-21 07:28:09][350545461218141][336 ms][DEBUG] END   check_frida in 335 ms
[2025-08-21 07:28:09][350545461218141][337 ms][DEBUG] START check_internet
[2025-08-21 07:28:09][350545461218141][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:28:10][350545461218141][788 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.843/200.843/200.843/0.000 ms\n
[2025-08-21 07:28:10][350545461218141][788 ms][DEBUG] check_internet: online
[2025-08-21 07:28:10][350545461218141][788 ms][DEBUG] END   check_internet in 452 ms
[2025-08-21 07:28:10][350545461218141][788 ms][DEBUG] START check_scloud
[2025-08-21 07:28:10][350545461218141][788 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:28:10][350545461218141][1054 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23632160 69396 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:28:10][350545461218141][1054 ms][DEBUG] targetPkg: running
[2025-08-21 07:28:10][350545461218141][1054 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 07:28:10][350545461218141][1054 ms][DEBUG] rawBody.length=1160
[2025-08-21 07:28:10][350545461218141][1054 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYxMjE4MTQxIiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWTIwM0s1OUUiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzYyIn0='" -e "main()" -q"
[2025-08-21 07:28:10][350545461218141][1054 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:28:10][350545461218141][1054 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYxMjE4MTQxIiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWTIwM0s1OUUiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzYyIn0='" -e "main()" -q"
[2025-08-21 07:28:13][350545461218141][3694 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTQ1NDYxMjE4MTQxIiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWTIwM0s1OUUiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzYyIn0="\r\n
[2025-08-21 07:28:15][350545461218141][5959 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4304979-1dcf-4b30-9492-b8fb3310240f","id":"QR_a4304979-1dcf-4b30-9492-b8fb3310240f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:28:15][350545461218141][5960 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 07:28:15][350545461218141][5960 ms][DEBUG] END   runCmdUntilRes#1 in 4906 ms
[2025-08-21 07:28:15][350545461218141][5960 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:29:05][353033302084565][0 ms][INFO] === Request start ===
[2025-08-21 07:29:05][353033302084565][1 ms][DEBUG] START check_frida
[2025-08-21 07:29:05][353033302084565][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:29:05][353033302084565][259 ms][DEBUG] SU: done in 258 ms; outroot         20950     1 2263084   4232 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:29:05][353033302084565][259 ms][DEBUG] check_frida: running
[2025-08-21 07:29:05][353033302084565][259 ms][DEBUG] END   check_frida in 258 ms
[2025-08-21 07:29:05][353033302084565][259 ms][DEBUG] START check_scloud
[2025-08-21 07:29:05][353033302084565][259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:29:05][353033302084565][556 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23632192 71496 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:29:05][353033302084565][556 ms][DEBUG] targetPkg: running
[2025-08-21 07:29:05][353033302084565][556 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 07:29:05][353033302084565][556 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:29:05][353033302084565][556 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDMzMzAyMDg0NTY1IiwibW9kZWwiOiJTTS1NMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMEcwSEFSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY1NCJ9'" -e "main()" -q"
[2025-08-21 07:29:05][353033302084565][556 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:29:05][353033302084565][556 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDMzMzAyMDg0NTY1IiwibW9kZWwiOiJTTS1NMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMEcwSEFSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY1NCJ9'" -e "main()" -q"
[2025-08-21 07:29:08][353033302084565][3196 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDMzMzAyMDg0NTY1IiwibW9kZWwiOiJTTS1NMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMEcwSEFSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY1NCJ9"\r\n
[2025-08-21 07:29:10][353033302084565][5508 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be867f64-536e-4ef1-ae69-826d7a09e66c","id":"QR_be867f64-536e-4ef1-ae69-826d7a09e66c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:29:10][353033302084565][5508 ms][DEBUG] proc_open done in 4952 ms; code=0; res.len=3152
[2025-08-21 07:29:10][353033302084565][5508 ms][DEBUG] END   runCmdUntilRes#1 in 4952 ms
[2025-08-21 07:29:10][353033302084565][5508 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:33:05][351199553262630][1 ms][INFO] === Request start ===
[2025-08-21 07:33:05][351199553262630][2 ms][DEBUG] START check_frida
[2025-08-21 07:33:05][351199553262630][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:33:06][351199553262630][308 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2262072   4280 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:33:06][351199553262630][309 ms][DEBUG] check_frida: running
[2025-08-21 07:33:06][351199553262630][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 07:33:06][351199553262630][309 ms][DEBUG] START check_scloud
[2025-08-21 07:33:06][351199553262630][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:33:06][351199553262630][590 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632224 71272 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:33:06][351199553262630][590 ms][DEBUG] targetPkg: running
[2025-08-21 07:33:06][351199553262630][590 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:33:06][351199553262630][590 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:33:06][351199553262630][590 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTk5NTUzMjYyNjMwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MFM2MTdYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI3NyJ9'" -e "main()" -q"
[2025-08-21 07:33:06][351199553262630][590 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:33:06][351199553262630][590 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTk5NTUzMjYyNjMwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MFM2MTdYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI3NyJ9'" -e "main()" -q"
[2025-08-21 07:33:09][351199553262630][3229 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTk5NTUzMjYyNjMwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MFM2MTdYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI3NyJ9"\r\n
[2025-08-21 07:33:11][351199553262630][5619 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4001253-dafd-4030-9887-3948309f258f","id":"QR_b4001253-dafd-4030-9887-3948309f258f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:33:11][351199553262630][5620 ms][DEBUG] proc_open done in 5029 ms; code=0; res.len=3152
[2025-08-21 07:33:11][351199553262630][5620 ms][DEBUG] END   runCmdUntilRes#1 in 5030 ms
[2025-08-21 07:33:11][351199553262630][5620 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:33:17][355042520358477][0 ms][INFO] === Request start ===
[2025-08-21 07:33:17][355042520358477][1 ms][DEBUG] START check_frida
[2025-08-21 07:33:17][355042520358477][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:33:18][355042520358477][284 ms][DEBUG] SU: done in 283 ms; outroot         20950     1 2279504   4336 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:33:18][355042520358477][284 ms][DEBUG] check_frida: running
[2025-08-21 07:33:18][355042520358477][284 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 07:33:18][355042520358477][284 ms][DEBUG] START check_scloud
[2025-08-21 07:33:18][355042520358477][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:33:18][355042520358477][581 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23632256 72044 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:33:18][355042520358477][581 ms][DEBUG] targetPkg: running
[2025-08-21 07:33:18][355042520358477][581 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 07:33:18][355042520358477][581 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:33:18][355042520358477][581 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDQyNTIwMzU4NDc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcyMUQ4WldaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgzNiJ9'" -e "main()" -q"
[2025-08-21 07:33:18][355042520358477][581 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:33:18][355042520358477][581 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDQyNTIwMzU4NDc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcyMUQ4WldaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgzNiJ9'" -e "main()" -q"
[2025-08-21 07:33:21][355042520358477][3236 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDQyNTIwMzU4NDc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcyMUQ4WldaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgzNiJ9"\r\n
[2025-08-21 07:33:23][355042520358477][5189 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4750f290-2ea9-4208-ab6e-05c83ed51fe2","id":"QR_4750f290-2ea9-4208-ab6e-05c83ed51fe2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:33:23][355042520358477][5189 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 07:33:23][355042520358477][5189 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-21 07:33:23][355042520358477][5189 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:33:28][351137777749347][0 ms][INFO] === Request start ===
[2025-08-21 07:33:28][351137777749347][1 ms][DEBUG] START check_frida
[2025-08-21 07:33:28][351137777749347][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:33:29][351137777749347][311 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2279504   4332 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:33:29][351137777749347][311 ms][DEBUG] check_frida: running
[2025-08-21 07:33:29][351137777749347][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 07:33:29][351137777749347][311 ms][DEBUG] START check_scloud
[2025-08-21 07:33:29][351137777749347][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:33:29][351137777749347][624 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23632288 71548 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:33:29][351137777749347][624 ms][DEBUG] targetPkg: running
[2025-08-21 07:33:29][351137777749347][624 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 07:33:29][351137777749347][624 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:33:29][351137777749347][624 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTM3Nzc3NzQ5MzQ3IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MFFRMkFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTYxMyJ9'" -e "main()" -q"
[2025-08-21 07:33:29][351137777749347][624 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:33:29][351137777749347][624 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTM3Nzc3NzQ5MzQ3IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MFFRMkFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTYxMyJ9'" -e "main()" -q"
[2025-08-21 07:33:32][351137777749347][3279 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTM3Nzc3NzQ5MzQ3IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MFFRMkFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTYxMyJ9"\r\n
[2025-08-21 07:33:34][351137777749347][5154 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e5d1e62-c90d-4c0f-86c3-cecd68ffa2ab","id":"QR_9e5d1e62-c90d-4c0f-86c3-cecd68ffa2ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:33:34][351137777749347][5154 ms][DEBUG] proc_open done in 4530 ms; code=0; res.len=3152
[2025-08-21 07:33:34][351137777749347][5154 ms][DEBUG] END   runCmdUntilRes#1 in 4530 ms
[2025-08-21 07:33:34][351137777749347][5154 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:33:38][350013907977598][0 ms][INFO] === Request start ===
[2025-08-21 07:33:38][350013907977598][1 ms][DEBUG] START check_frida
[2025-08-21 07:33:38][350013907977598][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:33:39][350013907977598][246 ms][DEBUG] SU: done in 245 ms; outroot         20950     1 2279504   4340 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:33:39][350013907977598][247 ms][DEBUG] check_frida: running
[2025-08-21 07:33:39][350013907977598][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 07:33:39][350013907977598][247 ms][DEBUG] START check_scloud
[2025-08-21 07:33:39][350013907977598][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:33:39][350013907977598][543 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23632320 72108 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:33:39][350013907977598][543 ms][DEBUG] targetPkg: running
[2025-08-21 07:33:39][350013907977598][543 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 07:33:39][350013907977598][543 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:33:39][350013907977598][543 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzOTA3OTc3NTk4IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MUQ4NzZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxMSJ9'" -e "main()" -q"
[2025-08-21 07:33:39][350013907977598][544 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:33:39][350013907977598][544 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzOTA3OTc3NTk4IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MUQ4NzZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxMSJ9'" -e "main()" -q"
[2025-08-21 07:33:42][350013907977598][3199 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzOTA3OTc3NTk4IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MUQ4NzZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxMSJ9"\r\n
[2025-08-21 07:33:43][350013907977598][5026 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17e9580e-ff18-4b5d-a75c-ebabbcf1510e","id":"QR_17e9580e-ff18-4b5d-a75c-ebabbcf1510e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:33:43][350013907977598][5027 ms][DEBUG] proc_open done in 4483 ms; code=0; res.len=3152
[2025-08-21 07:33:43][350013907977598][5027 ms][DEBUG] END   runCmdUntilRes#1 in 4484 ms
[2025-08-21 07:33:43][350013907977598][5027 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:34:06][356080123627632][0 ms][INFO] === Request start ===
[2025-08-21 07:34:06][356080123627632][1 ms][DEBUG] START check_frida
[2025-08-21 07:34:06][356080123627632][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:34:06][356080123627632][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4356 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:34:06][356080123627632][303 ms][DEBUG] check_frida: running
[2025-08-21 07:34:06][356080123627632][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 07:34:06][356080123627632][303 ms][DEBUG] START check_internet
[2025-08-21 07:34:06][356080123627632][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:34:06][356080123627632][803 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.848/203.848/203.848/0.000 ms\n
[2025-08-21 07:34:06][356080123627632][803 ms][DEBUG] check_internet: online
[2025-08-21 07:34:06][356080123627632][803 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 07:34:06][356080123627632][803 ms][DEBUG] START check_scloud
[2025-08-21 07:34:06][356080123627632][803 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:34:07][356080123627632][1100 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23632352 71660 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:34:07][356080123627632][1100 ms][DEBUG] targetPkg: running
[2025-08-21 07:34:07][356080123627632][1100 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 07:34:07][356080123627632][1100 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:34:07][356080123627632][1100 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MDgwMTIzNjI3NjMyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c2MEg1R1NFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgwNiJ9'" -e "main()" -q"
[2025-08-21 07:34:07][356080123627632][1100 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:34:07][356080123627632][1100 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MDgwMTIzNjI3NjMyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c2MEg1R1NFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgwNiJ9'" -e "main()" -q"
[2025-08-21 07:34:09][356080123627632][3739 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MDgwMTIzNjI3NjMyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c2MEg1R1NFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgwNiJ9"\r\n
[2025-08-21 07:34:11][356080123627632][5848 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fa84a4b-f737-45fc-8285-e954531bb404","id":"QR_5fa84a4b-f737-45fc-8285-e954531bb404","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:34:11][356080123627632][5849 ms][DEBUG] proc_open done in 4749 ms; code=0; res.len=3152
[2025-08-21 07:34:11][356080123627632][5849 ms][DEBUG] END   runCmdUntilRes#1 in 4749 ms
[2025-08-21 07:34:11][356080123627632][5849 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:36:07][356414818059043][1 ms][INFO] === Request start ===
[2025-08-21 07:36:07][356414818059043][2 ms][DEBUG] START check_frida
[2025-08-21 07:36:07][356414818059043][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:36:07][356414818059043][291 ms][DEBUG] SU: done in 289 ms; outroot         20950     1 2263084   4344 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:36:07][356414818059043][291 ms][DEBUG] check_frida: running
[2025-08-21 07:36:07][356414818059043][291 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 07:36:07][356414818059043][291 ms][DEBUG] START check_internet
[2025-08-21 07:36:07][356414818059043][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:36:07][356414818059043][744 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.859/200.859/200.859/0.000 ms\n
[2025-08-21 07:36:07][356414818059043][744 ms][DEBUG] check_internet: online
[2025-08-21 07:36:07][356414818059043][744 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 07:36:07][356414818059043][744 ms][DEBUG] START check_scloud
[2025-08-21 07:36:07][356414818059043][744 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:36:08][356414818059043][994 ms][DEBUG] SU: done in 249 ms; outu0_a118      20979 10674 23632384 70796 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:36:08][356414818059043][994 ms][DEBUG] targetPkg: running
[2025-08-21 07:36:08][356414818059043][994 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 07:36:08][356414818059043][994 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:36:08][356414818059043][994 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE4MDU5MDQzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MDZOMjFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTczMyJ9'" -e "main()" -q"
[2025-08-21 07:36:08][356414818059043][994 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:36:08][356414818059043][994 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE4MDU5MDQzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MDZOMjFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTczMyJ9'" -e "main()" -q"
[2025-08-21 07:36:10][356414818059043][3634 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE0ODE4MDU5MDQzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MDZOMjFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTczMyJ9"\r\n
[2025-08-21 07:36:13][356414818059043][5993 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ecab83e4-ea38-4903-978a-0a7bd7d73754","id":"QR_ecab83e4-ea38-4903-978a-0a7bd7d73754","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:36:13][356414818059043][5993 ms][DEBUG] proc_open done in 4999 ms; code=0; res.len=3152
[2025-08-21 07:36:13][356414818059043][5993 ms][DEBUG] END   runCmdUntilRes#1 in 4999 ms
[2025-08-21 07:36:13][356414818059043][5993 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:37:08][356356732837196][0 ms][INFO] === Request start ===
[2025-08-21 07:37:08][356356732837196][1 ms][DEBUG] START check_frida
[2025-08-21 07:37:08][356356732837196][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:37:08][356356732837196][313 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2263084   4352 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:37:08][356356732837196][313 ms][DEBUG] check_frida: running
[2025-08-21 07:37:08][356356732837196][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 07:37:08][356356732837196][313 ms][DEBUG] START check_scloud
[2025-08-21 07:37:08][356356732837196][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:37:08][356356732837196][610 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23632416 71376 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:37:08][356356732837196][610 ms][DEBUG] targetPkg: running
[2025-08-21 07:37:08][356356732837196][610 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 07:37:08][356356732837196][610 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:37:08][356356732837196][610 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzU2NzMyODM3MTk2IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q2MDRaODZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE4OSJ9'" -e "main()" -q"
[2025-08-21 07:37:08][356356732837196][610 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:37:08][356356732837196][610 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzU2NzMyODM3MTk2IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q2MDRaODZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE4OSJ9'" -e "main()" -q"
[2025-08-21 07:37:11][356356732837196][3281 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MzU2NzMyODM3MTk2IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q2MDRaODZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE4OSJ9"\r\n
[2025-08-21 07:37:13][356356732837196][5468 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea4c2824-604d-4a26-8302-6511dd274ff7","id":"QR_ea4c2824-604d-4a26-8302-6511dd274ff7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:37:13][356356732837196][5469 ms][DEBUG] proc_open done in 4859 ms; code=0; res.len=3152
[2025-08-21 07:37:13][356356732837196][5469 ms][DEBUG] END   runCmdUntilRes#1 in 4859 ms
[2025-08-21 07:37:13][356356732837196][5469 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:40:11][354916445743551][1 ms][INFO] === Request start ===
[2025-08-21 07:40:11][354916445743551][2 ms][DEBUG] START check_frida
[2025-08-21 07:40:11][354916445743551][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:40:11][354916445743551][304 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:40:11][354916445743551][304 ms][DEBUG] check_frida: running
[2025-08-21 07:40:11][354916445743551][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 07:40:11][354916445743551][304 ms][DEBUG] START check_internet
[2025-08-21 07:40:11][354916445743551][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:40:12][354916445743551][788 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.260/202.260/202.260/0.000 ms\n
[2025-08-21 07:40:12][354916445743551][788 ms][DEBUG] check_internet: online
[2025-08-21 07:40:12][354916445743551][788 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 07:40:12][354916445743551][789 ms][DEBUG] START check_scloud
[2025-08-21 07:40:12][354916445743551][789 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:40:12][354916445743551][1069 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632448 71304 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:40:12][354916445743551][1069 ms][DEBUG] targetPkg: running
[2025-08-21 07:40:12][354916445743551][1069 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:40:12][354916445743551][1070 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:40:12][354916445743551][1070 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQ1NzQzNTUxIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MEUxTllMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgzMyJ9'" -e "main()" -q"
[2025-08-21 07:40:12][354916445743551][1070 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:40:12][354916445743551][1070 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQ1NzQzNTUxIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MEUxTllMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgzMyJ9'" -e "main()" -q"
[2025-08-21 07:40:15][354916445743551][3709 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTE2NDQ1NzQzNTUxIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MEUxTllMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgzMyJ9"\r\n
[2025-08-21 07:40:17][354916445743551][5974 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a44d875c-0114-4267-8b2b-668f3cc3d1eb","id":"QR_a44d875c-0114-4267-8b2b-668f3cc3d1eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:40:17][354916445743551][5975 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 07:40:17][354916445743551][5975 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 07:40:17][354916445743551][5975 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:46:07][350320368807614][1 ms][INFO] === Request start ===
[2025-08-21 07:46:07][350320368807614][2 ms][DEBUG] START check_frida
[2025-08-21 07:46:07][350320368807614][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:46:07][350320368807614][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2264096   4360 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:46:07][350320368807614][303 ms][DEBUG] check_frida: running
[2025-08-21 07:46:07][350320368807614][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 07:46:07][350320368807614][304 ms][DEBUG] START check_internet
[2025-08-21 07:46:07][350320368807614][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:46:08][350320368807614][788 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.291/202.291/202.291/0.000 ms\n
[2025-08-21 07:46:08][350320368807614][788 ms][DEBUG] check_internet: online
[2025-08-21 07:46:08][350320368807614][788 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 07:46:08][350320368807614][788 ms][DEBUG] START check_scloud
[2025-08-21 07:46:08][350320368807614][788 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:46:08][350320368807614][1053 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23632480 71860 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:46:08][350320368807614][1053 ms][DEBUG] targetPkg: running
[2025-08-21 07:46:08][350320368807614][1054 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 07:46:08][350320368807614][1054 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:46:08][350320368807614][1054 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzIwMzY4ODA3NjE0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MU4xSExCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU5MiJ9'" -e "main()" -q"
[2025-08-21 07:46:08][350320368807614][1054 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:46:08][350320368807614][1054 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzIwMzY4ODA3NjE0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MU4xSExCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU5MiJ9'" -e "main()" -q"
[2025-08-21 07:46:11][350320368807614][3677 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzIwMzY4ODA3NjE0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MU4xSExCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU5MiJ9"\r\n
[2025-08-21 07:46:13][350320368807614][5880 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1be5661-c4e0-4829-89a1-a2171b53f436","id":"QR_e1be5661-c4e0-4829-89a1-a2171b53f436","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:46:13][350320368807614][5881 ms][DEBUG] proc_open done in 4827 ms; code=0; res.len=3152
[2025-08-21 07:46:13][350320368807614][5881 ms][DEBUG] END   runCmdUntilRes#1 in 4827 ms
[2025-08-21 07:46:13][350320368807614][5881 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:47:07][354097155644824][0 ms][INFO] === Request start ===
[2025-08-21 07:47:07][354097155644824][1 ms][DEBUG] START check_frida
[2025-08-21 07:47:07][354097155644824][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:47:07][354097155644824][247 ms][DEBUG] SU: done in 246 ms; outroot         20950     1 2263084   4340 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:47:07][354097155644824][247 ms][DEBUG] check_frida: running
[2025-08-21 07:47:07][354097155644824][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 07:47:07][354097155644824][247 ms][DEBUG] START check_scloud
[2025-08-21 07:47:07][354097155644824][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:47:07][354097155644824][497 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23632512 70892 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:47:07][354097155644824][497 ms][DEBUG] targetPkg: running
[2025-08-21 07:47:07][354097155644824][497 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 07:47:07][354097155644824][497 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:47:07][354097155644824][498 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDk3MTU1NjQ0ODI0IiwibW9kZWwiOiJTTS1BMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5NFk2MEJRNFJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgxMSJ9'" -e "main()" -q"
[2025-08-21 07:47:07][354097155644824][498 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:47:07][354097155644824][498 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDk3MTU1NjQ0ODI0IiwibW9kZWwiOiJTTS1BMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5NFk2MEJRNFJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgxMSJ9'" -e "main()" -q"
[2025-08-21 07:47:10][354097155644824][3137 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDk3MTU1NjQ0ODI0IiwibW9kZWwiOiJTTS1BMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5NFk2MEJRNFJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgxMSJ9"\r\n
[2025-08-21 07:47:11][354097155644824][4668 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f21055df-6aa8-477b-a815-a8f19884c4d8","id":"QR_f21055df-6aa8-477b-a815-a8f19884c4d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:47:11][354097155644824][4668 ms][DEBUG] proc_open done in 4170 ms; code=0; res.len=3152
[2025-08-21 07:47:11][354097155644824][4668 ms][DEBUG] END   runCmdUntilRes#1 in 4170 ms
[2025-08-21 07:47:11][354097155644824][4668 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:47:20][352631691742510][0 ms][INFO] === Request start ===
[2025-08-21 07:47:20][352631691742510][1 ms][DEBUG] START check_frida
[2025-08-21 07:47:20][352631691742510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:47:20][352631691742510][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2279504   4356 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:47:20][352631691742510][309 ms][DEBUG] check_frida: running
[2025-08-21 07:47:20][352631691742510][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 07:47:20][352631691742510][309 ms][DEBUG] START check_scloud
[2025-08-21 07:47:20][352631691742510][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:47:21][352631691742510][590 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632544 71708 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:47:21][352631691742510][590 ms][DEBUG] targetPkg: running
[2025-08-21 07:47:21][352631691742510][590 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:47:21][352631691742510][590 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:47:21][352631691742510][590 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjMxNjkxNzQyNTEwIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MUI0UEFOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk5MiJ9'" -e "main()" -q"
[2025-08-21 07:47:21][352631691742510][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:47:21][352631691742510][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjMxNjkxNzQyNTEwIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MUI0UEFOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk5MiJ9'" -e "main()" -q"
[2025-08-21 07:47:23][352631691742510][3245 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjMxNjkxNzQyNTEwIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MUI0UEFOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk5MiJ9"\r\n
[2025-08-21 07:47:25][352631691742510][5511 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_631511f9-49bc-4219-a8aa-cc480bb1ceef","id":"QR_631511f9-49bc-4219-a8aa-cc480bb1ceef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:47:25][352631691742510][5511 ms][DEBUG] proc_open done in 4920 ms; code=0; res.len=3152
[2025-08-21 07:47:25][352631691742510][5511 ms][DEBUG] END   runCmdUntilRes#1 in 4920 ms
[2025-08-21 07:47:25][352631691742510][5511 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:47:29][353310804192603][0 ms][INFO] === Request start ===
[2025-08-21 07:47:29][353310804192603][1 ms][DEBUG] START check_frida
[2025-08-21 07:47:29][353310804192603][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:47:29][353310804192603][310 ms][DEBUG] SU: done in 309 ms; outroot         20950     1 2279504   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:47:29][353310804192603][310 ms][DEBUG] check_frida: running
[2025-08-21 07:47:29][353310804192603][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 07:47:29][353310804192603][310 ms][DEBUG] START check_scloud
[2025-08-21 07:47:29][353310804192603][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:47:29][353310804192603][607 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23632576 71288 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:47:29][353310804192603][607 ms][DEBUG] targetPkg: running
[2025-08-21 07:47:29][353310804192603][607 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 07:47:29][353310804192603][607 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:47:29][353310804192603][607 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEwODA0MTkyNjAzIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMFBaOFJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjczNyJ9'" -e "main()" -q"
[2025-08-21 07:47:29][353310804192603][607 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:47:29][353310804192603][607 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEwODA0MTkyNjAzIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMFBaOFJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjczNyJ9'" -e "main()" -q"
[2025-08-21 07:47:32][353310804192603][3262 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEwODA0MTkyNjAzIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMFBaOFJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjczNyJ9"\r\n
[2025-08-21 07:47:34][353310804192603][5012 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9de5303d-e8df-4c14-b9a1-ce9b19b92e6d","id":"QR_9de5303d-e8df-4c14-b9a1-ce9b19b92e6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:47:34][353310804192603][5012 ms][DEBUG] proc_open done in 4405 ms; code=0; res.len=3152
[2025-08-21 07:47:34][353310804192603][5012 ms][DEBUG] END   runCmdUntilRes#1 in 4405 ms
[2025-08-21 07:47:34][353310804192603][5012 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:49:07][355291290423017][1 ms][INFO] === Request start ===
[2025-08-21 07:49:07][355291290423017][2 ms][DEBUG] START check_frida
[2025-08-21 07:49:07][355291290423017][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:49:07][355291290423017][305 ms][DEBUG] SU: done in 303 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:49:07][355291290423017][305 ms][DEBUG] check_frida: running
[2025-08-21 07:49:07][355291290423017][305 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 07:49:07][355291290423017][305 ms][DEBUG] START check_scloud
[2025-08-21 07:49:07][355291290423017][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:49:08][355291290423017][617 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23632608 71660 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:49:08][355291290423017][617 ms][DEBUG] targetPkg: running
[2025-08-21 07:49:08][355291290423017][617 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 07:49:08][355291290423017][617 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:49:08][355291290423017][617 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MjkxMjkwNDIzMDE3IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFc3ME0yTlpLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ3NSJ9'" -e "main()" -q"
[2025-08-21 07:49:08][355291290423017][618 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:49:08][355291290423017][618 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MjkxMjkwNDIzMDE3IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFc3ME0yTlpLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ3NSJ9'" -e "main()" -q"
[2025-08-21 07:49:10][355291290423017][3257 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MjkxMjkwNDIzMDE3IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFc3ME0yTlpLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ3NSJ9"\r\n
[2025-08-21 07:49:12][355291290423017][5350 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c21a6a74-a7b1-4c6f-af3e-3d452e47c7a2","id":"QR_c21a6a74-a7b1-4c6f-af3e-3d452e47c7a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:49:12][355291290423017][5350 ms][DEBUG] proc_open done in 4732 ms; code=0; res.len=3152
[2025-08-21 07:49:12][355291290423017][5350 ms][DEBUG] END   runCmdUntilRes#1 in 4733 ms
[2025-08-21 07:49:12][355291290423017][5350 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:50:10][354529381796069][1 ms][INFO] === Request start ===
[2025-08-21 07:50:10][354529381796069][1 ms][DEBUG] START check_frida
[2025-08-21 07:50:10][354529381796069][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:50:11][354529381796069][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:50:11][354529381796069][309 ms][DEBUG] check_frida: running
[2025-08-21 07:50:11][354529381796069][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 07:50:11][354529381796069][309 ms][DEBUG] START check_internet
[2025-08-21 07:50:11][354529381796069][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:50:11][354529381796069][731 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.963/200.963/200.963/0.000 ms\n
[2025-08-21 07:50:11][354529381796069][731 ms][DEBUG] check_internet: online
[2025-08-21 07:50:11][354529381796069][731 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 07:50:11][354529381796069][731 ms][DEBUG] START check_scloud
[2025-08-21 07:50:11][354529381796069][731 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:50:11][354529381796069][1012 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632640 70932 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:50:11][354529381796069][1012 ms][DEBUG] targetPkg: running
[2025-08-21 07:50:11][354529381796069][1012 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:50:11][354529381796069][1012 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:50:11][354529381796069][1012 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTI5MzgxNzk2MDY5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDlFOVhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU2NSJ9'" -e "main()" -q"
[2025-08-21 07:50:11][354529381796069][1012 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:50:11][354529381796069][1012 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTI5MzgxNzk2MDY5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDlFOVhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU2NSJ9'" -e "main()" -q"
[2025-08-21 07:50:14][354529381796069][3699 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTI5MzgxNzk2MDY5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ5MDlFOVhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU2NSJ9"\r\n
[2025-08-21 07:50:16][354529381796069][5995 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3636dcb7-e444-4b78-9966-01fa69119ec4","id":"QR_3636dcb7-e444-4b78-9966-01fa69119ec4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:50:16][354529381796069][5995 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 07:50:16][354529381796069][5996 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 07:50:16][354529381796069][5996 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:50:21][354747952970018][0 ms][INFO] === Request start ===
[2025-08-21 07:50:21][354747952970018][1 ms][DEBUG] START check_frida
[2025-08-21 07:50:21][354747952970018][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:50:21][354747952970018][301 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2279504   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:50:21][354747952970018][301 ms][DEBUG] check_frida: running
[2025-08-21 07:50:21][354747952970018][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 07:50:21][354747952970018][301 ms][DEBUG] START check_internet
[2025-08-21 07:50:21][354747952970018][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:50:22][354747952970018][631 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.630/239.630/239.630/0.000 ms\n
[2025-08-21 07:50:22][354747952970018][631 ms][DEBUG] check_internet: online
[2025-08-21 07:50:22][354747952970018][631 ms][DEBUG] END   check_internet in 329 ms
[2025-08-21 07:50:22][354747952970018][631 ms][DEBUG] START check_scloud
[2025-08-21 07:50:22][354747952970018][631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:50:22][354747952970018][910 ms][DEBUG] SU: done in 279 ms; outu0_a118      20979 10674 23632672 71500 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:50:22][354747952970018][910 ms][DEBUG] targetPkg: running
[2025-08-21 07:50:22][354747952970018][910 ms][DEBUG] END   check_scloud in 279 ms
[2025-08-21 07:50:22][354747952970018][910 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:50:22][354747952970018][910 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUyOTcwMDE4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDJHWVpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NCJ9'" -e "main()" -q"
[2025-08-21 07:50:22][354747952970018][910 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:50:22][354747952970018][910 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUyOTcwMDE4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDJHWVpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NCJ9'" -e "main()" -q"
[2025-08-21 07:50:25][354747952970018][3566 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTUyOTcwMDE4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDJHWVpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NCJ9"\r\n
[2025-08-21 07:50:26][354747952970018][5425 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8fc4bcf-ad45-4212-966b-3db5d2550d06","id":"QR_f8fc4bcf-ad45-4212-966b-3db5d2550d06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:50:26][354747952970018][5425 ms][DEBUG] proc_open done in 4515 ms; code=0; res.len=3152
[2025-08-21 07:50:26][354747952970018][5425 ms][DEBUG] END   runCmdUntilRes#1 in 4515 ms
[2025-08-21 07:50:26][354747952970018][5425 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:52:09][358550730767045][0 ms][INFO] === Request start ===
[2025-08-21 07:52:09][358550730767045][1 ms][DEBUG] START check_frida
[2025-08-21 07:52:09][358550730767045][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:52:09][358550730767045][314 ms][DEBUG] SU: done in 313 ms; outroot         20950     1 2263084   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:52:09][358550730767045][314 ms][DEBUG] check_frida: running
[2025-08-21 07:52:09][358550730767045][314 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 07:52:09][358550730767045][314 ms][DEBUG] START check_internet
[2025-08-21 07:52:09][358550730767045][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:52:09][358550730767045][580 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.312/175.312/175.312/0.000 ms\n
[2025-08-21 07:52:09][358550730767045][580 ms][DEBUG] check_internet: online
[2025-08-21 07:52:09][358550730767045][580 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 07:52:09][358550730767045][580 ms][DEBUG] START check_scloud
[2025-08-21 07:52:09][358550730767045][580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:52:10][358550730767045][877 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23632704 71204 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:52:10][358550730767045][877 ms][DEBUG] targetPkg: running
[2025-08-21 07:52:10][358550730767045][877 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 07:52:10][358550730767045][877 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:52:10][358550730767045][877 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTUwNzMwNzY3MDQ1IiwibW9kZWwiOiJTTS1NMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFJDMU1YM1NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwMiJ9'" -e "main()" -q"
[2025-08-21 07:52:10][358550730767045][877 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:52:10][358550730767045][877 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTUwNzMwNzY3MDQ1IiwibW9kZWwiOiJTTS1NMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFJDMU1YM1NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwMiJ9'" -e "main()" -q"
[2025-08-21 07:52:12][358550730767045][3532 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NTUwNzMwNzY3MDQ1IiwibW9kZWwiOiJTTS1NMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFJDMU1YM1NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwMiJ9"\r\n
[2025-08-21 07:52:14][358550730767045][5781 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25679092-35b7-4769-9595-492ede4aa64c","id":"QR_25679092-35b7-4769-9595-492ede4aa64c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:52:14][358550730767045][5782 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 07:52:14][358550730767045][5782 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 07:52:14][358550730767045][5782 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:52:21][352923540764120][1 ms][INFO] === Request start ===
[2025-08-21 07:52:21][352923540764120][1 ms][DEBUG] START check_frida
[2025-08-21 07:52:21][352923540764120][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:52:21][352923540764120][295 ms][DEBUG] SU: done in 294 ms; outroot         20950     1 2279504   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:52:21][352923540764120][296 ms][DEBUG] check_frida: running
[2025-08-21 07:52:21][352923540764120][296 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 07:52:21][352923540764120][296 ms][DEBUG] START check_internet
[2025-08-21 07:52:21][352923540764120][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:52:21][352923540764120][639 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.410/239.410/239.410/0.000 ms\n
[2025-08-21 07:52:21][352923540764120][639 ms][DEBUG] check_internet: online
[2025-08-21 07:52:21][352923540764120][639 ms][DEBUG] END   check_internet in 343 ms
[2025-08-21 07:52:21][352923540764120][639 ms][DEBUG] START check_scloud
[2025-08-21 07:52:21][352923540764120][639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:52:22][352923540764120][920 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632736 70760 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:52:22][352923540764120][920 ms][DEBUG] targetPkg: running
[2025-08-21 07:52:22][352923540764120][920 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:52:22][352923540764120][920 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:52:22][352923540764120][920 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTIzNTQwNzY0MTIwIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gyMFpKU01YIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU4MSJ9'" -e "main()" -q"
[2025-08-21 07:52:22][352923540764120][920 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:52:22][352923540764120][920 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTIzNTQwNzY0MTIwIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gyMFpKU01YIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU4MSJ9'" -e "main()" -q"
[2025-08-21 07:52:22][359147527890483][1 ms][INFO] === Request start ===
[2025-08-21 07:52:24][352923540764120][3576 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTIzNTQwNzY0MTIwIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gyMFpKU01YIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU4MSJ9"\r\n
[2025-08-21 07:52:26][352923540764120][5294 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ed7d061-5971-4634-bfd7-1ccaf6334c71","id":"QR_7ed7d061-5971-4634-bfd7-1ccaf6334c71","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:52:26][352923540764120][5295 ms][DEBUG] proc_open done in 4374 ms; code=0; res.len=3152
[2025-08-21 07:52:26][352923540764120][5295 ms][DEBUG] END   runCmdUntilRes#1 in 4375 ms
[2025-08-21 07:52:26][352923540764120][5295 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:52:27][359147527890483][4052 ms][DEBUG] START check_frida
[2025-08-21 07:52:27][359147527890483][4052 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:52:27][359147527890483][4351 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2279504   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:52:27][359147527890483][4351 ms][DEBUG] check_frida: running
[2025-08-21 07:52:27][359147527890483][4351 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 07:52:27][359147527890483][4351 ms][DEBUG] START check_internet
[2025-08-21 07:52:27][359147527890483][4351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 07:52:27][359147527890483][4599 ms][DEBUG] SU: done in 248 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.680/144.680/144.680/0.000 ms\n
[2025-08-21 07:52:27][359147527890483][4599 ms][DEBUG] check_internet: online
[2025-08-21 07:52:27][359147527890483][4599 ms][DEBUG] END   check_internet in 248 ms
[2025-08-21 07:52:27][359147527890483][4599 ms][DEBUG] START check_scloud
[2025-08-21 07:52:27][359147527890483][4599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:52:27][359147527890483][4880 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632768 71336 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:52:27][359147527890483][4880 ms][DEBUG] targetPkg: running
[2025-08-21 07:52:27][359147527890483][4880 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:52:27][359147527890483][4880 ms][DEBUG] rawBody.length=1160
[2025-08-21 07:52:27][359147527890483][4880 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTQ3NTI3ODkwNDgzIiwibW9kZWwiOiJTTS1BMjM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMkpENkRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkJTVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDg3In0='" -e "main()" -q"
[2025-08-21 07:52:27][359147527890483][4880 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:52:27][359147527890483][4880 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTQ3NTI3ODkwNDgzIiwibW9kZWwiOiJTTS1BMjM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMkpENkRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkJTVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDg3In0='" -e "main()" -q"
[2025-08-21 07:52:30][359147527890483][7520 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTQ3NTI3ODkwNDgzIiwibW9kZWwiOiJTTS1BMjM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMkpENkRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkJTVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDg3In0="\r\n
[2025-08-21 07:52:34][359147527890483][11160 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f9504fc-8e7c-4d4f-8152-8c3165071044","id":"QR_8f9504fc-8e7c-4d4f-8152-8c3165071044","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:52:34][359147527890483][11160 ms][DEBUG] proc_open done in 6280 ms; code=0; res.len=3152
[2025-08-21 07:52:34][359147527890483][11160 ms][DEBUG] END   runCmdUntilRes#1 in 6280 ms
[2025-08-21 07:52:34][359147527890483][11160 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:55:06][350013885489632][1 ms][INFO] === Request start ===
[2025-08-21 07:55:06][350013885489632][2 ms][DEBUG] START check_frida
[2025-08-21 07:55:06][350013885489632][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:55:07][350013885489632][310 ms][DEBUG] SU: done in 309 ms; outroot         20950     1 2263084   4392 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:55:07][350013885489632][311 ms][DEBUG] check_frida: running
[2025-08-21 07:55:07][350013885489632][311 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 07:55:07][350013885489632][311 ms][DEBUG] START check_scloud
[2025-08-21 07:55:07][350013885489632][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:55:07][350013885489632][592 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632800 70916 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:55:07][350013885489632][592 ms][DEBUG] targetPkg: running
[2025-08-21 07:55:07][350013885489632][592 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:55:07][350013885489632][592 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:55:07][350013885489632][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1NDg5NjMyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMEVUNjBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMxNyJ9'" -e "main()" -q"
[2025-08-21 07:55:07][350013885489632][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:55:07][350013885489632][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1NDg5NjMyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMEVUNjBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMxNyJ9'" -e "main()" -q"
[2025-08-21 07:55:10][350013885489632][3263 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODg1NDg5NjMyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMEVUNjBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMxNyJ9"\r\n
[2025-08-21 07:55:12][350013885489632][5403 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5314885b-ee0f-4a60-9229-a3d365fe854a","id":"QR_5314885b-ee0f-4a60-9229-a3d365fe854a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:55:12][350013885489632][5403 ms][DEBUG] proc_open done in 4811 ms; code=0; res.len=3152
[2025-08-21 07:55:12][350013885489632][5403 ms][DEBUG] END   runCmdUntilRes#1 in 4811 ms
[2025-08-21 07:55:12][350013885489632][5403 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:57:11][352192663226586][1 ms][INFO] === Request start ===
[2025-08-21 07:57:11][352192663226586][2 ms][DEBUG] START check_frida
[2025-08-21 07:57:11][352192663226586][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:57:11][352192663226586][298 ms][DEBUG] SU: done in 296 ms; outroot         20950     1 2263084   4404 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:57:11][352192663226586][298 ms][DEBUG] check_frida: running
[2025-08-21 07:57:11][352192663226586][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 07:57:11][352192663226586][298 ms][DEBUG] START check_scloud
[2025-08-21 07:57:11][352192663226586][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:57:12][352192663226586][579 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632832 71880 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:57:12][352192663226586][579 ms][DEBUG] targetPkg: running
[2025-08-21 07:57:12][352192663226586][579 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:57:12][352192663226586][579 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:57:12][352192663226586][579 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTkyNjYzMjI2NTg2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MDJBNFFSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI4OSJ9'" -e "main()" -q"
[2025-08-21 07:57:12][352192663226586][579 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:57:12][352192663226586][579 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTkyNjYzMjI2NTg2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MDJBNFFSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI4OSJ9'" -e "main()" -q"
[2025-08-21 07:57:14][352192663226586][3219 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMTkyNjYzMjI2NTg2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MDJBNFFSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI4OSJ9"\r\n
[2025-08-21 07:57:16][352192663226586][5500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3044bb94-1612-40a3-9d34-0a0166aafcf6","id":"QR_3044bb94-1612-40a3-9d34-0a0166aafcf6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:57:16][352192663226586][5501 ms][DEBUG] proc_open done in 4921 ms; code=0; res.len=3152
[2025-08-21 07:57:16][352192663226586][5501 ms][DEBUG] END   runCmdUntilRes#1 in 4922 ms
[2025-08-21 07:57:16][352192663226586][5501 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 07:59:10][355084250790545][1 ms][INFO] === Request start ===
[2025-08-21 07:59:10][355084250790545][2 ms][DEBUG] START check_frida
[2025-08-21 07:59:10][355084250790545][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 07:59:10][355084250790545][339 ms][DEBUG] SU: done in 337 ms; outroot         20950     1 2263084   4404 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 07:59:10][355084250790545][339 ms][DEBUG] check_frida: running
[2025-08-21 07:59:10][355084250790545][339 ms][DEBUG] END   check_frida in 338 ms
[2025-08-21 07:59:10][355084250790545][339 ms][DEBUG] START check_scloud
[2025-08-21 07:59:10][355084250790545][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 07:59:11][355084250790545][620 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632864 71208 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 07:59:11][355084250790545][620 ms][DEBUG] targetPkg: running
[2025-08-21 07:59:11][355084250790545][620 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 07:59:11][355084250790545][620 ms][DEBUG] rawBody.length=1161
[2025-08-21 07:59:11][355084250790545][620 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDg0MjUwNzkwNTQ1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFk0MDBUOVhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQwNyJ9'" -e "main()" -q"
[2025-08-21 07:59:11][355084250790545][620 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 07:59:11][355084250790545][620 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDg0MjUwNzkwNTQ1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFk0MDBUOVhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQwNyJ9'" -e "main()" -q"
[2025-08-21 07:59:14][355084250790545][3401 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDg0MjUwNzkwNTQ1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFk0MDBUOVhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQwNyJ9"\r\n
[2025-08-21 07:59:16][355084250790545][5853 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50de54ad-b5f0-4f00-bdce-0a8cf1ee02d6","id":"QR_50de54ad-b5f0-4f00-bdce-0a8cf1ee02d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 07:59:16][355084250790545][5854 ms][DEBUG] proc_open done in 5234 ms; code=0; res.len=3152
[2025-08-21 07:59:16][355084250790545][5854 ms][DEBUG] END   runCmdUntilRes#1 in 5234 ms
[2025-08-21 07:59:16][355084250790545][5854 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:02:07][353452301064974][0 ms][INFO] === Request start ===
[2025-08-21 08:02:07][353452301064974][0 ms][DEBUG] START check_frida
[2025-08-21 08:02:07][353452301064974][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:02:07][353452301064974][269 ms][DEBUG] SU: done in 268 ms; outroot         20950     1 2263084   4416 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:02:07][353452301064974][269 ms][DEBUG] check_frida: running
[2025-08-21 08:02:07][353452301064974][269 ms][DEBUG] END   check_frida in 268 ms
[2025-08-21 08:02:07][353452301064974][269 ms][DEBUG] START check_internet
[2025-08-21 08:02:07][353452301064974][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:02:07][358697433310159][1 ms][INFO] === Request start ===
[2025-08-21 08:02:08][353452301064974][737 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.043/203.043/203.043/0.000 ms\n
[2025-08-21 08:02:08][353452301064974][737 ms][DEBUG] check_internet: online
[2025-08-21 08:02:08][353452301064974][737 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 08:02:08][353452301064974][737 ms][DEBUG] START check_scloud
[2025-08-21 08:02:08][353452301064974][738 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:02:08][353452301064974][1018 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632896 72540 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:02:08][353452301064974][1019 ms][DEBUG] targetPkg: running
[2025-08-21 08:02:08][353452301064974][1019 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:02:08][353452301064974][1019 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:02:08][353452301064974][1019 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDUyMzAxMDY0OTc0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MVgxSzJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDEzMiJ9'" -e "main()" -q"
[2025-08-21 08:02:08][353452301064974][1019 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:02:08][353452301064974][1019 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDUyMzAxMDY0OTc0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MVgxSzJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDEzMiJ9'" -e "main()" -q"
[2025-08-21 08:02:11][353452301064974][3705 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDUyMzAxMDY0OTc0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MVgxSzJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDEzMiJ9"\r\n
[2025-08-21 08:02:13][353452301064974][5861 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_634f99b2-f75a-4260-aec4-8e3691a82570","id":"QR_634f99b2-f75a-4260-aec4-8e3691a82570","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:02:13][353452301064974][5861 ms][DEBUG] proc_open done in 4842 ms; code=0; res.len=3152
[2025-08-21 08:02:13][353452301064974][5861 ms][DEBUG] END   runCmdUntilRes#1 in 4842 ms
[2025-08-21 08:02:13][353452301064974][5861 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:02:13][358697433310159][6080 ms][DEBUG] START check_frida
[2025-08-21 08:02:13][358697433310159][6080 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:02:14][358697433310159][6377 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2279504   4420 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:02:14][358697433310159][6377 ms][DEBUG] check_frida: running
[2025-08-21 08:02:14][358697433310159][6377 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 08:02:14][358697433310159][6377 ms][DEBUG] START check_internet
[2025-08-21 08:02:14][358697433310159][6377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:02:14][358697433310159][6614 ms][DEBUG] SU: done in 236 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.132/142.132/142.132/0.000 ms\n
[2025-08-21 08:02:14][358697433310159][6614 ms][DEBUG] check_internet: online
[2025-08-21 08:02:14][358697433310159][6614 ms][DEBUG] END   check_internet in 236 ms
[2025-08-21 08:02:14][358697433310159][6614 ms][DEBUG] START check_scloud
[2025-08-21 08:02:14][358697433310159][6614 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:02:14][358697433310159][6908 ms][DEBUG] SU: done in 294 ms; outu0_a118      20979 10674 23632928 71468 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:02:14][358697433310159][6908 ms][DEBUG] targetPkg: running
[2025-08-21 08:02:14][358697433310159][6908 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 08:02:14][358697433310159][6908 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:02:14][358697433310159][6909 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4Njk3NDMzMzEwMTU5IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ5MDRDUjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTRUsiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc1MiJ9'" -e "main()" -q"
[2025-08-21 08:02:14][358697433310159][6909 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:02:14][358697433310159][6909 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4Njk3NDMzMzEwMTU5IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ5MDRDUjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTRUsiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc1MiJ9'" -e "main()" -q"
[2025-08-21 08:02:17][358697433310159][9548 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4Njk3NDMzMzEwMTU5IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ5MDRDUjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTRUsiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc1MiJ9"\r\n
[2025-08-21 08:02:19][358697433310159][11313 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2279c661-7bd2-4d1b-bfcd-c161194ea817","id":"QR_2279c661-7bd2-4d1b-bfcd-c161194ea817","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:02:19][358697433310159][11313 ms][DEBUG] proc_open done in 4405 ms; code=0; res.len=3152
[2025-08-21 08:02:19][358697433310159][11313 ms][DEBUG] END   runCmdUntilRes#1 in 4405 ms
[2025-08-21 08:02:19][358697433310159][11314 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:02:30][353530674327506][0 ms][INFO] === Request start ===
[2025-08-21 08:02:30][353530674327506][1 ms][DEBUG] START check_frida
[2025-08-21 08:02:30][353530674327506][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:02:30][353530674327506][311 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2279504   4420 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:02:30][353530674327506][311 ms][DEBUG] check_frida: running
[2025-08-21 08:02:30][353530674327506][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 08:02:30][353530674327506][311 ms][DEBUG] START check_internet
[2025-08-21 08:02:30][353530674327506][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:02:31][353530674327506][576 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.183/182.183/182.183/0.000 ms\n
[2025-08-21 08:02:31][353530674327506][576 ms][DEBUG] check_internet: online
[2025-08-21 08:02:31][353530674327506][576 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 08:02:31][353530674327506][576 ms][DEBUG] START check_scloud
[2025-08-21 08:02:31][353530674327506][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:02:31][353530674327506][842 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23632960 72008 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:02:31][353530674327506][842 ms][DEBUG] targetPkg: running
[2025-08-21 08:02:31][353530674327506][842 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 08:02:31][353530674327506][842 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:02:31][353530674327506][842 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTMwNjc0MzI3NTA2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MFgzWFJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxNSJ9'" -e "main()" -q"
[2025-08-21 08:02:31][353530674327506][842 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:02:31][353530674327506][842 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTMwNjc0MzI3NTA2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MFgzWFJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxNSJ9'" -e "main()" -q"
[2025-08-21 08:02:34][353530674327506][3498 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNTMwNjc0MzI3NTA2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MFgzWFJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxNSJ9"\r\n
[2025-08-21 08:02:35][353530674327506][5185 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0808487-ef80-439f-82a6-0efdbf8e4723","id":"QR_d0808487-ef80-439f-82a6-0efdbf8e4723","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:02:35][353530674327506][5185 ms][DEBUG] proc_open done in 4343 ms; code=0; res.len=3152
[2025-08-21 08:02:35][353530674327506][5185 ms][DEBUG] END   runCmdUntilRes#1 in 4343 ms
[2025-08-21 08:02:35][353530674327506][5185 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:03:17][352469859447113][0 ms][INFO] === Request start ===
[2025-08-21 08:03:17][352469859447113][1 ms][DEBUG] START check_frida
[2025-08-21 08:03:17][352469859447113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:03:18][352469859447113][302 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2263084   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:03:18][352469859447113][302 ms][DEBUG] check_frida: running
[2025-08-21 08:03:18][352469859447113][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 08:03:18][352469859447113][302 ms][DEBUG] START check_scloud
[2025-08-21 08:03:18][352469859447113][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:03:18][352469859447113][584 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23632992 71164 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:03:18][352469859447113][584 ms][DEBUG] targetPkg: running
[2025-08-21 08:03:18][352469859447113][584 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 08:03:18][352469859447113][584 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:03:18][352469859447113][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU5NDQ3MTEzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MThNVjBXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEyMyJ9'" -e "main()" -q"
[2025-08-21 08:03:18][352469859447113][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:03:18][352469859447113][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU5NDQ3MTEzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MThNVjBXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEyMyJ9'" -e "main()" -q"
[2025-08-21 08:03:21][352469859447113][3239 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDY5ODU5NDQ3MTEzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MThNVjBXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEyMyJ9"\r\n
[2025-08-21 08:03:23][352469859447113][5379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_016c7952-6622-440f-9ecf-7babfdc1b06f","id":"QR_016c7952-6622-440f-9ecf-7babfdc1b06f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:03:23][352469859447113][5380 ms][DEBUG] proc_open done in 4795 ms; code=0; res.len=3152
[2025-08-21 08:03:23][352469859447113][5380 ms][DEBUG] END   runCmdUntilRes#1 in 4796 ms
[2025-08-21 08:03:23][352469859447113][5380 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:04:14][352978601438816][1 ms][INFO] === Request start ===
[2025-08-21 08:04:14][352978601438816][2 ms][DEBUG] START check_frida
[2025-08-21 08:04:14][352978601438816][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:04:15][352978601438816][303 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2263084   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:04:15][352978601438816][303 ms][DEBUG] check_frida: running
[2025-08-21 08:04:15][352978601438816][303 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 08:04:15][352978601438816][303 ms][DEBUG] START check_internet
[2025-08-21 08:04:15][352978601438816][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:04:15][352978601438816][599 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.385/207.385/207.385/0.000 ms\n
[2025-08-21 08:04:15][352978601438816][600 ms][DEBUG] check_internet: online
[2025-08-21 08:04:15][352978601438816][600 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 08:04:15][352978601438816][600 ms][DEBUG] START check_scloud
[2025-08-21 08:04:15][352978601438816][600 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:04:15][352978601438816][896 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23633024 71984 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:04:15][352978601438816][896 ms][DEBUG] targetPkg: running
[2025-08-21 08:04:15][352978601438816][896 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:04:15][352978601438816][896 ms][DEBUG] rawBody.length=1160
[2025-08-21 08:04:15][352978601438816][896 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTc4NjAxNDM4ODE2IiwibW9kZWwiOiJTTS1NMzI2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1I4MDJSQTNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODQ3In0='" -e "main()" -q"
[2025-08-21 08:04:15][352978601438816][897 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:04:15][352978601438816][897 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTc4NjAxNDM4ODE2IiwibW9kZWwiOiJTTS1NMzI2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1I4MDJSQTNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODQ3In0='" -e "main()" -q"
[2025-08-21 08:04:18][352978601438816][3536 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTc4NjAxNDM4ODE2IiwibW9kZWwiOiJTTS1NMzI2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1I4MDJSQTNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODQ3In0="\r\n
[2025-08-21 08:04:22][352978601438816][8269 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_547cbf59-2204-4530-948e-e03bc2f71f74","id":"QR_547cbf59-2204-4530-948e-e03bc2f71f74","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:04:22][352978601438816][8270 ms][DEBUG] proc_open done in 7373 ms; code=0; res.len=3152
[2025-08-21 08:04:22][352978601438816][8270 ms][DEBUG] END   runCmdUntilRes#1 in 7373 ms
[2025-08-21 08:04:22][352978601438816][8270 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:07:07][350854800013902][1 ms][INFO] === Request start ===
[2025-08-21 08:07:07][350854800013902][2 ms][DEBUG] START check_frida
[2025-08-21 08:07:07][350854800013902][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:07:08][350854800013902][310 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2262072   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:07:08][350854800013902][310 ms][DEBUG] check_frida: running
[2025-08-21 08:07:08][350854800013902][310 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 08:07:08][350854800013902][310 ms][DEBUG] START check_scloud
[2025-08-21 08:07:08][350854800013902][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:07:08][350854800013902][591 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633056 71644 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:07:08][350854800013902][591 ms][DEBUG] targetPkg: running
[2025-08-21 08:07:08][350854800013902][591 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:07:08][350854800013902][591 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:07:08][350854800013902][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODU0ODAwMDEzOTAyIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MDBMUTNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc1NSJ9'" -e "main()" -q"
[2025-08-21 08:07:08][350854800013902][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:07:08][350854800013902][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODU0ODAwMDEzOTAyIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MDBMUTNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc1NSJ9'" -e "main()" -q"
[2025-08-21 08:07:10][355819217542996][1 ms][INFO] === Request start ===
[2025-08-21 08:07:11][350854800013902][3262 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODU0ODAwMDEzOTAyIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MDBMUTNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc1NSJ9"\r\n
[2025-08-21 08:07:13][350854800013902][5527 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8af51734-43af-4c95-ab58-3166affb0e3e","id":"QR_8af51734-43af-4c95-ab58-3166affb0e3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:07:13][350854800013902][5527 ms][DEBUG] proc_open done in 4936 ms; code=0; res.len=3152
[2025-08-21 08:07:13][350854800013902][5527 ms][DEBUG] END   runCmdUntilRes#1 in 4936 ms
[2025-08-21 08:07:13][350854800013902][5527 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:07:13][355819217542996][3046 ms][DEBUG] START check_frida
[2025-08-21 08:07:13][355819217542996][3046 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:07:13][355819217542996][3345 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2279504   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:07:13][355819217542996][3345 ms][DEBUG] check_frida: running
[2025-08-21 08:07:13][355819217542996][3345 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 08:07:13][355819217542996][3345 ms][DEBUG] START check_scloud
[2025-08-21 08:07:13][355819217542996][3346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:07:14][355819217542996][3640 ms][DEBUG] SU: done in 294 ms; outu0_a118      20979 10674 23633088 72352 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:07:14][355819217542996][3640 ms][DEBUG] targetPkg: running
[2025-08-21 08:07:14][355819217542996][3640 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 08:07:14][355819217542996][3640 ms][DEBUG] rawBody.length=1160
[2025-08-21 08:07:14][355819217542996][3640 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODE5MjE3NTQyOTk2IiwibW9kZWwiOiJTTS1YNzAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzMwNTJQWEEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjI0In0='" -e "main()" -q"
[2025-08-21 08:07:14][355819217542996][3640 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:07:14][355819217542996][3640 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODE5MjE3NTQyOTk2IiwibW9kZWwiOiJTTS1YNzAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzMwNTJQWEEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjI0In0='" -e "main()" -q"
[2025-08-21 08:07:16][355819217542996][6311 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODE5MjE3NTQyOTk2IiwibW9kZWwiOiJTTS1YNzAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzMwNTJQWEEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjI0In0="\r\n
[2025-08-21 08:07:18][355819217542996][8170 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb9a5022-015a-47a1-a0e9-8d292d9ab196","id":"QR_bb9a5022-015a-47a1-a0e9-8d292d9ab196","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:07:18][355819217542996][8170 ms][DEBUG] proc_open done in 4530 ms; code=0; res.len=3152
[2025-08-21 08:07:18][355819217542996][8170 ms][DEBUG] END   runCmdUntilRes#1 in 4530 ms
[2025-08-21 08:07:18][355819217542996][8170 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:08:10][352397453396818][0 ms][INFO] === Request start ===
[2025-08-21 08:08:10][352397453396818][1 ms][DEBUG] START check_frida
[2025-08-21 08:08:10][352397453396818][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:08:10][352397453396818][308 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:08:10][352397453396818][308 ms][DEBUG] check_frida: running
[2025-08-21 08:08:10][352397453396818][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 08:08:10][352397453396818][308 ms][DEBUG] START check_internet
[2025-08-21 08:08:10][352397453396818][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:08:10][352397453396818][729 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.403/201.403/201.403/0.000 ms\n
[2025-08-21 08:08:10][352397453396818][729 ms][DEBUG] check_internet: online
[2025-08-21 08:08:10][352397453396818][729 ms][DEBUG] END   check_internet in 421 ms
[2025-08-21 08:08:10][352397453396818][729 ms][DEBUG] START check_scloud
[2025-08-21 08:08:10][352397453396818][729 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:08:11][352397453396818][1011 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633120 71572 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:08:11][352397453396818][1011 ms][DEBUG] targetPkg: running
[2025-08-21 08:08:11][352397453396818][1011 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:08:11][352397453396818][1011 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:08:11][352397453396818][1011 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUzMzk2ODE4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFlNOUxKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ5MCJ9'" -e "main()" -q"
[2025-08-21 08:08:11][352397453396818][1011 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:08:11][352397453396818][1011 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUzMzk2ODE4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFlNOUxKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ5MCJ9'" -e "main()" -q"
[2025-08-21 08:08:13][352397453396818][3697 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzk3NDUzMzk2ODE4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFlNOUxKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ5MCJ9"\r\n
[2025-08-21 08:08:16][352397453396818][5900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f63a1e79-e62f-4f7c-a2ee-558e24f0316d","id":"QR_f63a1e79-e62f-4f7c-a2ee-558e24f0316d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:08:16][352397453396818][5900 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 08:08:16][352397453396818][5900 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 08:08:16][352397453396818][5900 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:08:22][350814494286859][0 ms][INFO] === Request start ===
[2025-08-21 08:08:22][350814494286859][1 ms][DEBUG] START check_frida
[2025-08-21 08:08:22][350814494286859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:08:22][350814494286859][291 ms][DEBUG] SU: done in 290 ms; outroot         20950     1 2279504   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:08:22][350814494286859][291 ms][DEBUG] check_frida: running
[2025-08-21 08:08:22][350814494286859][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 08:08:22][350814494286859][291 ms][DEBUG] START check_internet
[2025-08-21 08:08:22][350814494286859][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:08:22][350814494286859][588 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.271/204.271/204.271/0.000 ms\n
[2025-08-21 08:08:22][350814494286859][588 ms][DEBUG] check_internet: online
[2025-08-21 08:08:22][350814494286859][588 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 08:08:22][350814494286859][588 ms][DEBUG] START check_scloud
[2025-08-21 08:08:22][350814494286859][588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:08:22][350814494286859][869 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633152 71912 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:08:22][350814494286859][869 ms][DEBUG] targetPkg: running
[2025-08-21 08:08:22][350814494286859][869 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 08:08:22][350814494286859][869 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:08:22][350814494286859][870 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk0Mjg2ODU5IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MjhTTEtIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI2OCJ9'" -e "main()" -q"
[2025-08-21 08:08:22][350814494286859][870 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:08:22][350814494286859][870 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk0Mjg2ODU5IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MjhTTEtIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI2OCJ9'" -e "main()" -q"
[2025-08-21 08:08:25][350814494286859][3525 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODE0NDk0Mjg2ODU5IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MjhTTEtIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI2OCJ9"\r\n
[2025-08-21 08:08:27][350814494286859][5274 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61891d0b-de05-401f-b095-00ef82160a87","id":"QR_61891d0b-de05-401f-b095-00ef82160a87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:08:27][350814494286859][5274 ms][DEBUG] proc_open done in 4404 ms; code=0; res.len=3152
[2025-08-21 08:08:27][350814494286859][5274 ms][DEBUG] END   runCmdUntilRes#1 in 4405 ms
[2025-08-21 08:08:27][350814494286859][5274 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:12:08][356616530890196][1 ms][INFO] === Request start ===
[2025-08-21 08:12:08][356616530890196][1 ms][DEBUG] START check_frida
[2025-08-21 08:12:08][356616530890196][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:12:09][356616530890196][308 ms][DEBUG] SU: done in 306 ms; outroot         20950     1 2263084   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:12:09][356616530890196][308 ms][DEBUG] check_frida: running
[2025-08-21 08:12:09][356616530890196][308 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 08:12:09][356616530890196][308 ms][DEBUG] START check_internet
[2025-08-21 08:12:09][356616530890196][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:12:09][356616530890196][886 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.632/202.632/202.632/0.000 ms\n
[2025-08-21 08:12:09][356616530890196][886 ms][DEBUG] check_internet: online
[2025-08-21 08:12:09][356616530890196][886 ms][DEBUG] END   check_internet in 578 ms
[2025-08-21 08:12:09][356616530890196][886 ms][DEBUG] START check_scloud
[2025-08-21 08:12:09][356616530890196][886 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:12:10][356616530890196][1151 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23633184 71640 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:12:10][356616530890196][1152 ms][DEBUG] targetPkg: running
[2025-08-21 08:12:10][356616530890196][1152 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 08:12:10][356616530890196][1152 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:12:10][356616530890196][1152 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjE2NTMwODkwMTk2IiwibW9kZWwiOiJTTS1FMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Wlk0MDRXRzVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgzNSJ9'" -e "main()" -q"
[2025-08-21 08:12:10][356616530890196][1152 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:12:10][356616530890196][1152 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjE2NTMwODkwMTk2IiwibW9kZWwiOiJTTS1FMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Wlk0MDRXRzVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgzNSJ9'" -e "main()" -q"
[2025-08-21 08:12:12][356616530890196][3838 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NjE2NTMwODkwMTk2IiwibW9kZWwiOiJTTS1FMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Wlk0MDRXRzVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgzNSJ9"\r\n
[2025-08-21 08:12:15][356616530890196][6900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_008f4c24-7aaf-4c66-b9b4-20b9a3cca5d1","id":"QR_008f4c24-7aaf-4c66-b9b4-20b9a3cca5d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:12:15][356616530890196][6900 ms][DEBUG] proc_open done in 5748 ms; code=0; res.len=3152
[2025-08-21 08:12:15][356616530890196][6900 ms][DEBUG] END   runCmdUntilRes#1 in 5748 ms
[2025-08-21 08:12:15][356616530890196][6900 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:16:10][355094841440575][1 ms][INFO] === Request start ===
[2025-08-21 08:16:10][355094841440575][2 ms][DEBUG] START check_frida
[2025-08-21 08:16:10][355094841440575][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:16:10][355094841440575][301 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2262072   4368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:16:10][355094841440575][301 ms][DEBUG] check_frida: running
[2025-08-21 08:16:10][355094841440575][302 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 08:16:10][355094841440575][302 ms][DEBUG] START check_internet
[2025-08-21 08:16:10][355094841440575][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:16:11][355094841440575][770 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.583/201.583/201.583/0.000 ms\n
[2025-08-21 08:16:11][355094841440575][770 ms][DEBUG] check_internet: online
[2025-08-21 08:16:11][355094841440575][770 ms][DEBUG] END   check_internet in 468 ms
[2025-08-21 08:16:11][355094841440575][770 ms][DEBUG] START check_scloud
[2025-08-21 08:16:11][355094841440575][770 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:16:11][355094841440575][1020 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23633216 72200 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:16:11][355094841440575][1020 ms][DEBUG] targetPkg: running
[2025-08-21 08:16:11][355094841440575][1020 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 08:16:11][355094841440575][1020 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:16:11][355094841440575][1020 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDk0ODQxNDQwNTc1IiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k1MVhRWVNYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQ2NSJ9'" -e "main()" -q"
[2025-08-21 08:16:11][355094841440575][1020 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:16:11][355094841440575][1020 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDk0ODQxNDQwNTc1IiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k1MVhRWVNYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQ2NSJ9'" -e "main()" -q"
[2025-08-21 08:16:14][355094841440575][3644 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDk0ODQxNDQwNTc1IiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k1MVhRWVNYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQ2NSJ9"\r\n
[2025-08-21 08:16:21][355094841440575][10877 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31d5a50d-45dd-4ea7-a45d-7017cb1d4025","id":"QR_31d5a50d-45dd-4ea7-a45d-7017cb1d4025","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:16:21][355094841440575][10877 ms][DEBUG] proc_open done in 9856 ms; code=0; res.len=3152
[2025-08-21 08:16:21][355094841440575][10877 ms][DEBUG] END   runCmdUntilRes#1 in 9857 ms
[2025-08-21 08:16:21][355094841440575][10877 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:16:26][357262976099833][0 ms][INFO] === Request start ===
[2025-08-21 08:16:26][357262976099833][1 ms][DEBUG] START check_frida
[2025-08-21 08:16:26][357262976099833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:16:27][357262976099833][311 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2279504   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:16:27][357262976099833][312 ms][DEBUG] check_frida: running
[2025-08-21 08:16:27][357262976099833][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 08:16:27][357262976099833][312 ms][DEBUG] START check_internet
[2025-08-21 08:16:27][357262976099833][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:16:27][357262976099833][577 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=173 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 173.715/173.715/173.715/0.000 ms\n
[2025-08-21 08:16:27][357262976099833][577 ms][DEBUG] check_internet: online
[2025-08-21 08:16:27][357262976099833][577 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 08:16:27][357262976099833][577 ms][DEBUG] START check_scloud
[2025-08-21 08:16:27][357262976099833][577 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:16:27][357262976099833][858 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633248 71328 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:16:27][357262976099833][858 ms][DEBUG] targetPkg: running
[2025-08-21 08:16:27][357262976099833][858 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:16:27][357262976099833][858 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:16:27][357262976099833][858 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MjYyOTc2MDk5ODMzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g3MUg0SDJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQ4MiJ9'" -e "main()" -q"
[2025-08-21 08:16:27][357262976099833][858 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:16:27][357262976099833][859 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MjYyOTc2MDk5ODMzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g3MUg0SDJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQ4MiJ9'" -e "main()" -q"
[2025-08-21 08:16:30][357262976099833][3482 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MjYyOTc2MDk5ODMzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g3MUg0SDJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQ4MiJ9"\r\n
[2025-08-21 08:16:31][357262976099833][5310 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8e04c92-c164-46f2-877b-67175d6ef006","id":"QR_b8e04c92-c164-46f2-877b-67175d6ef006","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:16:31][357262976099833][5310 ms][DEBUG] proc_open done in 4452 ms; code=0; res.len=3152
[2025-08-21 08:16:31][357262976099833][5310 ms][DEBUG] END   runCmdUntilRes#1 in 4452 ms
[2025-08-21 08:16:31][357262976099833][5310 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:17:09][357962509430864][1 ms][INFO] === Request start ===
[2025-08-21 08:17:09][357962509430864][2 ms][DEBUG] START check_frida
[2025-08-21 08:17:09][357962509430864][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:17:09][357962509430864][299 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:17:09][357962509430864][299 ms][DEBUG] check_frida: running
[2025-08-21 08:17:09][357962509430864][299 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 08:17:09][357962509430864][299 ms][DEBUG] START check_scloud
[2025-08-21 08:17:09][357962509430864][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:17:09][357962509430864][594 ms][DEBUG] SU: done in 295 ms; outu0_a118      20979 10674 23633280 71860 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:17:09][357962509430864][594 ms][DEBUG] targetPkg: running
[2025-08-21 08:17:09][357962509430864][594 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 08:17:09][357962509430864][594 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:17:09][357962509430864][594 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA5NDMwODY0IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFJCQVJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkyMSJ9'" -e "main()" -q"
[2025-08-21 08:17:09][357962509430864][594 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:17:09][357962509430864][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA5NDMwODY0IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFJCQVJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkyMSJ9'" -e "main()" -q"
[2025-08-21 08:17:11][354519746311274][1 ms][INFO] === Request start ===
[2025-08-21 08:17:12][357962509430864][3218 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTYyNTA5NDMwODY0IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFJCQVJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkyMSJ9"\r\n
[2025-08-21 08:17:14][357962509430864][5171 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39fc573e-18ed-4c40-b9ef-e26f02a265c6","id":"QR_39fc573e-18ed-4c40-b9ef-e26f02a265c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:17:14][357962509430864][5171 ms][DEBUG] proc_open done in 4577 ms; code=0; res.len=3152
[2025-08-21 08:17:14][357962509430864][5171 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 08:17:14][357962509430864][5171 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:17:15][354519746311274][3034 ms][DEBUG] START check_frida
[2025-08-21 08:17:15][354519746311274][3035 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:17:15][354519746311274][3333 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2279504   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:17:15][354519746311274][3333 ms][DEBUG] check_frida: running
[2025-08-21 08:17:15][354519746311274][3333 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 08:17:15][354519746311274][3333 ms][DEBUG] START check_scloud
[2025-08-21 08:17:15][354519746311274][3333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:17:15][354519746311274][3628 ms][DEBUG] SU: done in 294 ms; outu0_a118      20979 10674 23633312 71488 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:17:15][354519746311274][3628 ms][DEBUG] targetPkg: running
[2025-08-21 08:17:15][354519746311274][3628 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 08:17:15][354519746311274][3628 ms][DEBUG] rawBody.length=1160
[2025-08-21 08:17:15][354519746311274][3628 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTE5NzQ2MzExMjc0IiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUWDEwNDAyM1YiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTg0In0='" -e "main()" -q"
[2025-08-21 08:17:15][354519746311274][3628 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:17:15][354519746311274][3628 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTE5NzQ2MzExMjc0IiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUWDEwNDAyM1YiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTg0In0='" -e "main()" -q"
[2025-08-21 08:17:18][354519746311274][6283 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTE5NzQ2MzExMjc0IiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUWDEwNDAyM1YiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTg0In0="\r\n
[2025-08-21 08:17:20][354519746311274][8424 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07ff0bac-6cf3-4e51-8fa0-6c176a52289c","id":"QR_07ff0bac-6cf3-4e51-8fa0-6c176a52289c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:17:20][354519746311274][8424 ms][DEBUG] proc_open done in 4796 ms; code=0; res.len=3152
[2025-08-21 08:17:20][354519746311274][8424 ms][DEBUG] END   runCmdUntilRes#1 in 4796 ms
[2025-08-21 08:17:20][354519746311274][8424 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:17:22][357301904949725][0 ms][INFO] === Request start ===
[2025-08-21 08:17:22][357301904949725][1 ms][DEBUG] START check_frida
[2025-08-21 08:17:22][357301904949725][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:17:22][357301904949725][301 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2279504   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:17:22][357301904949725][302 ms][DEBUG] check_frida: running
[2025-08-21 08:17:22][357301904949725][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 08:17:22][357301904949725][302 ms][DEBUG] START check_scloud
[2025-08-21 08:17:22][357301904949725][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:17:23][357301904949725][598 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23633344 72028 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:17:23][357301904949725][598 ms][DEBUG] targetPkg: running
[2025-08-21 08:17:23][357301904949725][598 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 08:17:23][357301904949725][598 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:17:23][357301904949725][598 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzAxOTA0OTQ5NzI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMDZQVEpCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA0OCJ9'" -e "main()" -q"
[2025-08-21 08:17:23][357301904949725][598 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:17:23][357301904949725][598 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzAxOTA0OTQ5NzI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMDZQVEpCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA0OCJ9'" -e "main()" -q"
[2025-08-21 08:17:25][357301904949725][3238 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MzAxOTA0OTQ5NzI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMDZQVEpCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA0OCJ9"\r\n
[2025-08-21 08:17:27][351272337906028][0 ms][INFO] === Request start ===
[2025-08-21 08:17:27][357301904949725][5519 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b9ce79e-f622-467a-8178-edd258171842","id":"QR_9b9ce79e-f622-467a-8178-edd258171842","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:17:27][357301904949725][5519 ms][DEBUG] proc_open done in 4921 ms; code=0; res.len=3152
[2025-08-21 08:17:27][357301904949725][5519 ms][DEBUG] END   runCmdUntilRes#1 in 4921 ms
[2025-08-21 08:17:27][357301904949725][5519 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:17:28][351272337906028][1014 ms][DEBUG] START check_frida
[2025-08-21 08:17:28][351272337906028][1014 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:17:29][351272337906028][1311 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2279504   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:17:29][351272337906028][1311 ms][DEBUG] check_frida: running
[2025-08-21 08:17:29][351272337906028][1311 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 08:17:29][351272337906028][1311 ms][DEBUG] START check_scloud
[2025-08-21 08:17:29][351272337906028][1311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:17:29][351272337906028][1608 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23633376 71060 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:17:29][351272337906028][1608 ms][DEBUG] targetPkg: running
[2025-08-21 08:17:29][351272337906028][1608 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:17:29][351272337906028][1608 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:17:29][351272337906028][1608 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM3OTA2MDI4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MDhZRUhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTA4MCJ9'" -e "main()" -q"
[2025-08-21 08:17:29][351272337906028][1608 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:17:29][351272337906028][1608 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM3OTA2MDI4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MDhZRUhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTA4MCJ9'" -e "main()" -q"
[2025-08-21 08:17:31][351272337906028][4263 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcyMzM3OTA2MDI4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MDhZRUhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTA4MCJ9"\r\n
[2025-08-21 08:17:33][351272337906028][6154 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23d9f589-3d64-4ad9-af2d-3080eb0e701e","id":"QR_23d9f589-3d64-4ad9-af2d-3080eb0e701e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:17:33][351272337906028][6154 ms][DEBUG] proc_open done in 4546 ms; code=0; res.len=3152
[2025-08-21 08:17:33][351272337906028][6154 ms][DEBUG] END   runCmdUntilRes#1 in 4546 ms
[2025-08-21 08:17:33][351272337906028][6154 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:17:39][355859832382113][0 ms][INFO] === Request start ===
[2025-08-21 08:17:39][355859832382113][1 ms][DEBUG] START check_frida
[2025-08-21 08:17:39][355859832382113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:17:39][355859832382113][307 ms][DEBUG] SU: done in 306 ms; outroot         20950     1 2279504   4372 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:17:39][355859832382113][307 ms][DEBUG] check_frida: running
[2025-08-21 08:17:39][355859832382113][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 08:17:39][355859832382113][307 ms][DEBUG] START check_scloud
[2025-08-21 08:17:39][355859832382113][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:17:39][355859832382113][588 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633408 71624 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:17:39][355859832382113][588 ms][DEBUG] targetPkg: running
[2025-08-21 08:17:39][355859832382113][588 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:17:39][355859832382113][588 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:17:39][355859832382113][588 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU5ODMyMzgyMTEzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMDgyNFhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU1MCJ9'" -e "main()" -q"
[2025-08-21 08:17:39][355859832382113][588 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:17:39][355859832382113][588 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU5ODMyMzgyMTEzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMDgyNFhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU1MCJ9'" -e "main()" -q"
[2025-08-21 08:17:42][355859832382113][3212 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODU5ODMyMzgyMTEzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMDgyNFhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU1MCJ9"\r\n
[2025-08-21 08:17:44][355859832382113][5056 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2c4bcb1-9ca6-4b44-bd31-bee8a2b979e8","id":"QR_b2c4bcb1-9ca6-4b44-bd31-bee8a2b979e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:17:44][355859832382113][5056 ms][DEBUG] proc_open done in 4468 ms; code=0; res.len=3152
[2025-08-21 08:17:44][355859832382113][5056 ms][DEBUG] END   runCmdUntilRes#1 in 4468 ms
[2025-08-21 08:17:44][355859832382113][5056 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:17:50][357967976456128][0 ms][INFO] === Request start ===
[2025-08-21 08:17:50][357967976456128][1 ms][DEBUG] START check_frida
[2025-08-21 08:17:50][357967976456128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:17:50][357967976456128][305 ms][DEBUG] SU: done in 304 ms; outroot         20950     1 2279504   4380 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:17:50][357967976456128][305 ms][DEBUG] check_frida: running
[2025-08-21 08:17:50][357967976456128][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 08:17:50][357967976456128][305 ms][DEBUG] START check_scloud
[2025-08-21 08:17:50][357967976456128][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:17:51][357967976456128][601 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23633440 72200 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:17:51][357967976456128][602 ms][DEBUG] targetPkg: running
[2025-08-21 08:17:51][357967976456128][602 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:17:51][357967976456128][602 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:17:51][357967976456128][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc2NDU2MTI4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMFEwQlJMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzcxOCJ9'" -e "main()" -q"
[2025-08-21 08:17:51][357967976456128][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:17:51][357967976456128][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc2NDU2MTI4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMFEwQlJMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzcxOCJ9'" -e "main()" -q"
[2025-08-21 08:17:53][357967976456128][3241 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTY3OTc2NDU2MTI4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMFEwQlJMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzcxOCJ9"\r\n
[2025-08-21 08:17:55][357967976456128][4975 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_957b6991-348c-4f25-818a-1ce43563eb1c","id":"QR_957b6991-348c-4f25-818a-1ce43563eb1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:17:55][357967976456128][4975 ms][DEBUG] proc_open done in 4373 ms; code=0; res.len=3152
[2025-08-21 08:17:55][357967976456128][4975 ms][DEBUG] END   runCmdUntilRes#1 in 4373 ms
[2025-08-21 08:17:55][357967976456128][4975 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:18:08][350637545057544][0 ms][INFO] === Request start ===
[2025-08-21 08:18:08][350637545057544][1 ms][DEBUG] START check_frida
[2025-08-21 08:18:08][350637545057544][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:18:09][350637545057544][295 ms][DEBUG] SU: done in 294 ms; outroot         20950     1 2263084   4392 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:18:09][350637545057544][295 ms][DEBUG] check_frida: running
[2025-08-21 08:18:09][350637545057544][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 08:18:09][350637545057544][295 ms][DEBUG] START check_internet
[2025-08-21 08:18:09][350637545057544][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:18:09][350637545057544][591 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.521/164.521/164.521/0.000 ms\n
[2025-08-21 08:18:09][350637545057544][591 ms][DEBUG] check_internet: online
[2025-08-21 08:18:09][350637545057544][591 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 08:18:09][350637545057544][591 ms][DEBUG] START check_scloud
[2025-08-21 08:18:09][350637545057544][591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:18:09][350637545057544][873 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633472 71920 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:18:09][350637545057544][873 ms][DEBUG] targetPkg: running
[2025-08-21 08:18:09][350637545057544][873 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:18:09][350637545057544][873 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:18:09][350637545057544][873 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQ1MDU3NTQ0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcxMDBHNUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY0MiJ9'" -e "main()" -q"
[2025-08-21 08:18:09][350637545057544][873 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:18:09][350637545057544][873 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQ1MDU3NTQ0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcxMDBHNUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY0MiJ9'" -e "main()" -q"
[2025-08-21 08:18:12][350637545057544][3528 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjM3NTQ1MDU3NTQ0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcxMDBHNUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY0MiJ9"\r\n
[2025-08-21 08:18:14][350637545057544][5278 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99efb5cd-ca6e-44e8-ad58-1c15c221dfe5","id":"QR_99efb5cd-ca6e-44e8-ad58-1c15c221dfe5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:18:14][350637545057544][5278 ms][DEBUG] proc_open done in 4404 ms; code=0; res.len=3152
[2025-08-21 08:18:14][350637545057544][5278 ms][DEBUG] END   runCmdUntilRes#1 in 4405 ms
[2025-08-21 08:18:14][350637545057544][5278 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:18:21][352469857228093][0 ms][INFO] === Request start ===
[2025-08-21 08:18:21][352469857228093][1 ms][DEBUG] START check_frida
[2025-08-21 08:18:21][352469857228093][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:18:22][352469857228093][300 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2279504   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:18:22][352469857228093][300 ms][DEBUG] check_frida: running
[2025-08-21 08:18:22][352469857228093][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 08:18:22][352469857228093][300 ms][DEBUG] START check_internet
[2025-08-21 08:18:22][352469857228093][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:18:22][352469857228093][566 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.055/175.055/175.055/0.000 ms\n
[2025-08-21 08:18:22][352469857228093][566 ms][DEBUG] check_internet: online
[2025-08-21 08:18:22][352469857228093][566 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 08:18:22][352469857228093][566 ms][DEBUG] START check_scloud
[2025-08-21 08:18:22][352469857228093][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:18:22][352469857228093][832 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23633504 71364 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:18:22][352469857228093][832 ms][DEBUG] targetPkg: running
[2025-08-21 08:18:22][352469857228093][832 ms][DEBUG] END   check_scloud in 267 ms
[2025-08-21 08:18:22][352469857228093][832 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:18:22][352469857228093][832 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU3MjI4MDkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MDhROEpFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE0NCJ9'" -e "main()" -q"
[2025-08-21 08:18:22][352469857228093][832 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:18:22][352469857228093][832 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU3MjI4MDkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MDhROEpFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE0NCJ9'" -e "main()" -q"
[2025-08-21 08:18:25][352469857228093][3471 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDY5ODU3MjI4MDkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MDhROEpFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE0NCJ9"\r\n
[2025-08-21 08:18:27][352469857228093][5658 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bfb9d27b-40fb-4c09-befa-4ad055fe538c","id":"QR_bfb9d27b-40fb-4c09-befa-4ad055fe538c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:18:27][352469857228093][5658 ms][DEBUG] proc_open done in 4825 ms; code=0; res.len=3152
[2025-08-21 08:18:27][352469857228093][5658 ms][DEBUG] END   runCmdUntilRes#1 in 4826 ms
[2025-08-21 08:18:27][352469857228093][5658 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:18:32][352677532104956][0 ms][INFO] === Request start ===
[2025-08-21 08:18:32][352677532104956][1 ms][DEBUG] START check_frida
[2025-08-21 08:18:32][352677532104956][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:18:32][352677532104956][302 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2279504   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:18:32][352677532104956][302 ms][DEBUG] check_frida: running
[2025-08-21 08:18:32][352677532104956][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 08:18:32][352677532104956][302 ms][DEBUG] START check_internet
[2025-08-21 08:18:32][352677532104956][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:18:33][352677532104956][646 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.204/243.204/243.204/0.000 ms\n
[2025-08-21 08:18:33][352677532104956][646 ms][DEBUG] check_internet: online
[2025-08-21 08:18:33][352677532104956][646 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 08:18:33][352677532104956][646 ms][DEBUG] START check_scloud
[2025-08-21 08:18:33][352677532104956][646 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:18:33][352677532104956][943 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23633536 71940 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:18:33][352677532104956][943 ms][DEBUG] targetPkg: running
[2025-08-21 08:18:33][352677532104956][943 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:18:33][352677532104956][943 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:18:33][352677532104956][943 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMyMTA0OTU2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDQ3WktNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYxNiJ9'" -e "main()" -q"
[2025-08-21 08:18:33][352677532104956][943 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:18:33][352677532104956][943 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMyMTA0OTU2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDQ3WktNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYxNiJ9'" -e "main()" -q"
[2025-08-21 08:18:36][352677532104956][3583 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjc3NTMyMTA0OTU2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDQ3WktNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYxNiJ9"\r\n
[2025-08-21 08:18:37][352677532104956][5379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c48471f-f492-4f6b-92fd-2000933fa1eb","id":"QR_8c48471f-f492-4f6b-92fd-2000933fa1eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:18:37][352677532104956][5379 ms][DEBUG] proc_open done in 4436 ms; code=0; res.len=3152
[2025-08-21 08:18:37][352677532104956][5379 ms][DEBUG] END   runCmdUntilRes#1 in 4436 ms
[2025-08-21 08:18:37][352677532104956][5379 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:23:09][351267960673218][1 ms][INFO] === Request start ===
[2025-08-21 08:23:09][351267960673218][1 ms][DEBUG] START check_frida
[2025-08-21 08:23:09][351267960673218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:23:10][351267960673218][298 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:23:10][351267960673218][298 ms][DEBUG] check_frida: running
[2025-08-21 08:23:10][351267960673218][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 08:23:10][351267960673218][298 ms][DEBUG] START check_scloud
[2025-08-21 08:23:10][351267960673218][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:23:10][351267960673218][595 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23633568 71892 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:23:10][351267960673218][595 ms][DEBUG] targetPkg: running
[2025-08-21 08:23:10][351267960673218][595 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:23:10][351267960673218][595 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:23:10][351267960673218][595 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjY3OTYwNjczMjE4IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI3MlNaNjhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE3NyJ9'" -e "main()" -q"
[2025-08-21 08:23:10][351267960673218][595 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:23:10][351267960673218][595 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjY3OTYwNjczMjE4IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI3MlNaNjhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE3NyJ9'" -e "main()" -q"
[2025-08-21 08:23:13][351267960673218][3235 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjY3OTYwNjczMjE4IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI3MlNaNjhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE3NyJ9"\r\n
[2025-08-21 08:23:15][351267960673218][5469 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11827278-f5ea-42ec-b5f7-118ec438b79f","id":"QR_11827278-f5ea-42ec-b5f7-118ec438b79f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:23:15][351267960673218][5469 ms][DEBUG] proc_open done in 4874 ms; code=0; res.len=3152
[2025-08-21 08:23:15][351267960673218][5469 ms][DEBUG] END   runCmdUntilRes#1 in 4874 ms
[2025-08-21 08:23:15][351267960673218][5469 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:24:06][356213820495264][1 ms][INFO] === Request start ===
[2025-08-21 08:24:06][356213820495264][2 ms][DEBUG] START check_frida
[2025-08-21 08:24:06][356213820495264][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:24:06][356213820495264][298 ms][DEBUG] SU: done in 296 ms; outroot         20950     1 2263084   4372 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:24:06][356213820495264][298 ms][DEBUG] check_frida: running
[2025-08-21 08:24:06][356213820495264][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 08:24:06][356213820495264][298 ms][DEBUG] START check_internet
[2025-08-21 08:24:06][356213820495264][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:24:07][356213820495264][735 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.442/153.442/153.442/0.000 ms\n
[2025-08-21 08:24:07][356213820495264][736 ms][DEBUG] check_internet: online
[2025-08-21 08:24:07][356213820495264][736 ms][DEBUG] END   check_internet in 438 ms
[2025-08-21 08:24:07][356213820495264][736 ms][DEBUG] START check_scloud
[2025-08-21 08:24:07][356213820495264][736 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:24:07][356213820495264][1016 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633600 72256 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:24:07][356213820495264][1016 ms][DEBUG] targetPkg: running
[2025-08-21 08:24:07][356213820495264][1016 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:24:07][356213820495264][1016 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:24:07][356213820495264][1017 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MjEzODIwNDk1MjY0IiwibW9kZWwiOiJTTS1BMTY2MCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMkc1QUdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCUkkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIzMSJ9'" -e "main()" -q"
[2025-08-21 08:24:07][356213820495264][1017 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:24:07][356213820495264][1017 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MjEzODIwNDk1MjY0IiwibW9kZWwiOiJTTS1BMTY2MCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMkc1QUdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCUkkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIzMSJ9'" -e "main()" -q"
[2025-08-21 08:24:10][356213820495264][3688 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MjEzODIwNDk1MjY0IiwibW9kZWwiOiJTTS1BMTY2MCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMkc1QUdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCUkkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIzMSJ9"\r\n
[2025-08-21 08:24:12][356213820495264][5500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21233864-6eef-4980-8fd9-6a8e9aa9d572","id":"QR_21233864-6eef-4980-8fd9-6a8e9aa9d572","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:24:12][356213820495264][5500 ms][DEBUG] proc_open done in 4484 ms; code=0; res.len=3152
[2025-08-21 08:24:12][356213820495264][5500 ms][DEBUG] END   runCmdUntilRes#1 in 4484 ms
[2025-08-21 08:24:12][356213820495264][5500 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:28:10][353773290141063][1 ms][INFO] === Request start ===
[2025-08-21 08:28:10][353773290141063][2 ms][DEBUG] START check_frida
[2025-08-21 08:28:10][353773290141063][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:28:10][353773290141063][248 ms][DEBUG] SU: done in 247 ms; outroot         20950     1 2263084   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:28:10][353773290141063][248 ms][DEBUG] check_frida: running
[2025-08-21 08:28:10][353773290141063][248 ms][DEBUG] END   check_frida in 247 ms
[2025-08-21 08:28:10][353773290141063][248 ms][DEBUG] START check_internet
[2025-08-21 08:28:10][353773290141063][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:28:11][353773290141063][529 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.169/178.169/178.169/0.000 ms\n
[2025-08-21 08:28:11][353773290141063][530 ms][DEBUG] check_internet: online
[2025-08-21 08:28:11][353773290141063][530 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 08:28:11][353773290141063][530 ms][DEBUG] START check_scloud
[2025-08-21 08:28:11][353773290141063][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:28:11][353773290141063][810 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633632 71748 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:28:11][353773290141063][810 ms][DEBUG] targetPkg: running
[2025-08-21 08:28:11][353773290141063][811 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:28:11][353773290141063][811 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:28:11][353773290141063][811 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzczMjkwMTQxMDYzIiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFIyMEVWN0hZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI3NCJ9'" -e "main()" -q"
[2025-08-21 08:28:11][353773290141063][811 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:28:11][353773290141063][811 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzczMjkwMTQxMDYzIiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFIyMEVWN0hZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI3NCJ9'" -e "main()" -q"
[2025-08-21 08:28:14][353773290141063][3466 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNzczMjkwMTQxMDYzIiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFIyMEVWN0hZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI3NCJ9"\r\n
[2025-08-21 08:28:16][353773290141063][5466 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4bec3b7-adc7-46c8-8c49-d71135966d6c","id":"QR_c4bec3b7-adc7-46c8-8c49-d71135966d6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:28:16][353773290141063][5466 ms][DEBUG] proc_open done in 4656 ms; code=0; res.len=3152
[2025-08-21 08:28:16][353773290141063][5466 ms][DEBUG] END   runCmdUntilRes#1 in 4656 ms
[2025-08-21 08:28:16][353773290141063][5466 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:29:07][355466592166320][1 ms][INFO] === Request start ===
[2025-08-21 08:29:07][355466592166320][2 ms][DEBUG] START check_frida
[2025-08-21 08:29:07][355466592166320][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:29:07][355466592166320][303 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2263084   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:29:07][355466592166320][303 ms][DEBUG] check_frida: running
[2025-08-21 08:29:07][355466592166320][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 08:29:07][355466592166320][303 ms][DEBUG] START check_scloud
[2025-08-21 08:29:07][355466592166320][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:29:08][355466592166320][584 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633664 72172 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:29:08][355466592166320][584 ms][DEBUG] targetPkg: running
[2025-08-21 08:29:08][355466592166320][584 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:29:08][355466592166320][584 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:29:08][355466592166320][585 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDY2NTkyMTY2MzIwIiwibW9kZWwiOiJTTS1BMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5WlkyMDlCRTFNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJOUEIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjgwMiJ9'" -e "main()" -q"
[2025-08-21 08:29:08][355466592166320][585 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:29:08][355466592166320][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDY2NTkyMTY2MzIwIiwibW9kZWwiOiJTTS1BMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5WlkyMDlCRTFNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJOUEIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjgwMiJ9'" -e "main()" -q"
[2025-08-21 08:29:10][355466592166320][3208 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NDY2NTkyMTY2MzIwIiwibW9kZWwiOiJTTS1BMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5WlkyMDlCRTFNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJOUEIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjgwMiJ9"\r\n
[2025-08-21 08:29:12][355466592166320][5098 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6530533-557d-42b3-869f-1de6c3b1c3e1","id":"QR_f6530533-557d-42b3-869f-1de6c3b1c3e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:29:12][355466592166320][5099 ms][DEBUG] proc_open done in 4514 ms; code=0; res.len=3152
[2025-08-21 08:29:12][355466592166320][5099 ms][DEBUG] END   runCmdUntilRes#1 in 4514 ms
[2025-08-21 08:29:12][355466592166320][5099 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:29:20][355221175180432][0 ms][INFO] === Request start ===
[2025-08-21 08:29:20][355221175180432][1 ms][DEBUG] START check_frida
[2025-08-21 08:29:20][355221175180432][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:29:20][355221175180432][284 ms][DEBUG] SU: done in 283 ms; outroot         20950     1 2279504   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:29:20][355221175180432][284 ms][DEBUG] check_frida: running
[2025-08-21 08:29:20][355221175180432][284 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 08:29:20][355221175180432][284 ms][DEBUG] START check_scloud
[2025-08-21 08:29:20][355221175180432][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:29:21][355221175180432][581 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23633696 71492 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:29:21][355221175180432][581 ms][DEBUG] targetPkg: running
[2025-08-21 08:29:21][355221175180432][581 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:29:21][355221175180432][581 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:29:21][355221175180432][581 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MjIxMTc1MTgwNDMyIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJDMFRIMjNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1NSJ9'" -e "main()" -q"
[2025-08-21 08:29:21][355221175180432][581 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:29:21][355221175180432][581 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MjIxMTc1MTgwNDMyIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJDMFRIMjNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1NSJ9'" -e "main()" -q"
[2025-08-21 08:29:23][355221175180432][3220 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MjIxMTc1MTgwNDMyIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJDMFRIMjNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1NSJ9"\r\n
[2025-08-21 08:29:26][355221175180432][5564 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5faea57f-1323-43b4-aa08-b833ca61ed7d","id":"QR_5faea57f-1323-43b4-aa08-b833ca61ed7d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:29:26][355221175180432][5564 ms][DEBUG] proc_open done in 4984 ms; code=0; res.len=3152
[2025-08-21 08:29:26][355221175180432][5564 ms][DEBUG] END   runCmdUntilRes#1 in 4984 ms
[2025-08-21 08:29:26][355221175180432][5565 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:30:09][351240641941106][0 ms][INFO] === Request start ===
[2025-08-21 08:30:09][351240641941106][1 ms][DEBUG] START check_frida
[2025-08-21 08:30:09][351240641941106][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:30:09][351240641941106][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:30:09][351240641941106][309 ms][DEBUG] check_frida: running
[2025-08-21 08:30:09][351240641941106][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 08:30:09][351240641941106][310 ms][DEBUG] START check_internet
[2025-08-21 08:30:09][351240641941106][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:30:09][351240641941106][747 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.376/197.376/197.376/0.000 ms\n
[2025-08-21 08:30:09][351240641941106][747 ms][DEBUG] check_internet: online
[2025-08-21 08:30:09][351240641941106][747 ms][DEBUG] END   check_internet in 437 ms
[2025-08-21 08:30:09][351240641941106][747 ms][DEBUG] START check_scloud
[2025-08-21 08:30:09][351240641941106][747 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:30:10][351240641941106][1028 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633728 71984 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:30:10][351240641941106][1028 ms][DEBUG] targetPkg: running
[2025-08-21 08:30:10][351240641941106][1028 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 08:30:10][351240641941106][1028 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:30:10][351240641941106][1028 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQxOTQxMTA2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MENBWTBFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDI1NSJ9'" -e "main()" -q"
[2025-08-21 08:30:10][351240641941106][1029 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:30:10][351240641941106][1029 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQxOTQxMTA2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MENBWTBFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDI1NSJ9'" -e "main()" -q"
[2025-08-21 08:30:12][351240641941106][3683 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQxOTQxMTA2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MENBWTBFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDI1NSJ9"\r\n
[2025-08-21 08:30:15][351240641941106][6261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_691cd9eb-c556-4897-bc06-6fe8a6f0ff6a","id":"QR_691cd9eb-c556-4897-bc06-6fe8a6f0ff6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:30:15][351240641941106][6262 ms][DEBUG] proc_open done in 5233 ms; code=0; res.len=3152
[2025-08-21 08:30:15][351240641941106][6262 ms][DEBUG] END   runCmdUntilRes#1 in 5233 ms
[2025-08-21 08:30:15][351240641941106][6262 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:30:24][350824192052396][0 ms][INFO] === Request start ===
[2025-08-21 08:30:24][350824192052396][1 ms][DEBUG] START check_frida
[2025-08-21 08:30:24][350824192052396][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:30:24][350824192052396][247 ms][DEBUG] SU: done in 246 ms; outroot         20950     1 2279504   4392 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:30:24][350824192052396][247 ms][DEBUG] check_frida: running
[2025-08-21 08:30:24][350824192052396][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 08:30:24][350824192052396][247 ms][DEBUG] START check_internet
[2025-08-21 08:30:24][350824192052396][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:30:24][350824192052396][575 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.805/225.805/225.805/0.000 ms\n
[2025-08-21 08:30:24][350824192052396][575 ms][DEBUG] check_internet: online
[2025-08-21 08:30:24][350824192052396][575 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 08:30:24][350824192052396][575 ms][DEBUG] START check_scloud
[2025-08-21 08:30:24][350824192052396][575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:30:24][350824192052396][856 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23633760 71084 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:30:24][350824192052396][857 ms][DEBUG] targetPkg: running
[2025-08-21 08:30:24][350824192052396][857 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:30:24][350824192052396][857 ms][DEBUG] rawBody.length=1160
[2025-08-21 08:30:24][350824192052396][857 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTkyMDUyMzk2IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MEtIWkVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzEyIn0='" -e "main()" -q"
[2025-08-21 08:30:24][350824192052396][857 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:30:24][350824192052396][857 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTkyMDUyMzk2IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MEtIWkVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzEyIn0='" -e "main()" -q"
[2025-08-21 08:30:27][350824192052396][3512 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODI0MTkyMDUyMzk2IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MEtIWkVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzEyIn0="\r\n
[2025-08-21 08:30:31][350824192052396][7105 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12db0fbe-cd2c-4f33-8916-a6ba90e43187","id":"QR_12db0fbe-cd2c-4f33-8916-a6ba90e43187","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:30:31][350824192052396][7105 ms][DEBUG] proc_open done in 6248 ms; code=0; res.len=3152
[2025-08-21 08:30:31][350824192052396][7105 ms][DEBUG] END   runCmdUntilRes#1 in 6248 ms
[2025-08-21 08:30:31][350824192052396][7105 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:32:07][353718680820347][1 ms][INFO] === Request start ===
[2025-08-21 08:32:07][353718680820347][2 ms][DEBUG] START check_frida
[2025-08-21 08:32:07][353718680820347][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:32:07][353718680820347][298 ms][DEBUG] SU: done in 296 ms; outroot         20950     1 2278492   4352 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:32:07][353718680820347][298 ms][DEBUG] check_frida: running
[2025-08-21 08:32:07][353718680820347][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 08:32:07][353718680820347][298 ms][DEBUG] START check_internet
[2025-08-21 08:32:07][353718680820347][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:32:07][353718680820347][563 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.321/157.321/157.321/0.000 ms\n
[2025-08-21 08:32:07][353718680820347][564 ms][DEBUG] check_internet: online
[2025-08-21 08:32:07][353718680820347][564 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 08:32:07][353718680820347][564 ms][DEBUG] START check_scloud
[2025-08-21 08:32:07][353718680820347][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:32:08][353718680820347][860 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23633792 71972 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:32:08][353718680820347][860 ms][DEBUG] targetPkg: running
[2025-08-21 08:32:08][353718680820347][860 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 08:32:08][353718680820347][860 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:32:08][353718680820347][860 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzE4NjgwODIwMzQ3IiwibW9kZWwiOiJTTS1HOTkwQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1JDMUc2V1pUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExMCJ9'" -e "main()" -q"
[2025-08-21 08:32:08][353718680820347][860 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:32:08][353718680820347][860 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzE4NjgwODIwMzQ3IiwibW9kZWwiOiJTTS1HOTkwQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1JDMUc2V1pUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExMCJ9'" -e "main()" -q"
[2025-08-21 08:32:10][353718680820347][3547 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNzE4NjgwODIwMzQ3IiwibW9kZWwiOiJTTS1HOTkwQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1JDMUc2V1pUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExMCJ9"\r\n
[2025-08-21 08:32:12][353718680820347][5687 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_800f7751-767e-4e6e-8683-d33b400e6f79","id":"QR_800f7751-767e-4e6e-8683-d33b400e6f79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:32:12][353718680820347][5687 ms][DEBUG] proc_open done in 4827 ms; code=0; res.len=3152
[2025-08-21 08:32:12][353718680820347][5687 ms][DEBUG] END   runCmdUntilRes#1 in 4827 ms
[2025-08-21 08:32:12][353718680820347][5687 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:32:18][355594520193825][0 ms][INFO] === Request start ===
[2025-08-21 08:32:18][355594520193825][1 ms][DEBUG] START check_frida
[2025-08-21 08:32:18][355594520193825][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:32:19][355594520193825][304 ms][DEBUG] SU: done in 303 ms; outroot         20950     1 2279504   4380 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:32:19][355594520193825][304 ms][DEBUG] check_frida: running
[2025-08-21 08:32:19][355594520193825][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 08:32:19][355594520193825][304 ms][DEBUG] START check_internet
[2025-08-21 08:32:19][355594520193825][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:32:19][355594520193825][585 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.893/191.893/191.893/0.000 ms\n
[2025-08-21 08:32:19][355594520193825][585 ms][DEBUG] check_internet: online
[2025-08-21 08:32:19][355594520193825][585 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 08:32:19][355594520193825][585 ms][DEBUG] START check_scloud
[2025-08-21 08:32:19][355594520193825][585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:32:19][355594520193825][882 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23633824 71600 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:32:19][355594520193825][882 ms][DEBUG] targetPkg: running
[2025-08-21 08:32:19][355594520193825][882 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:32:19][355594520193825][882 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:32:19][355594520193825][883 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NTk0NTIwMTkzODI1IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MFlIUkhUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI3OCJ9'" -e "main()" -q"
[2025-08-21 08:32:19][355594520193825][883 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:32:19][355594520193825][883 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NTk0NTIwMTkzODI1IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MFlIUkhUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI3OCJ9'" -e "main()" -q"
[2025-08-21 08:32:22][355594520193825][3538 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NTk0NTIwMTkzODI1IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MFlIUkhUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI3OCJ9"\r\n
[2025-08-21 08:32:24][355594520193825][5381 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72133f32-b2e7-48ce-90a6-99c6d6e448cf","id":"QR_72133f32-b2e7-48ce-90a6-99c6d6e448cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:32:24][355594520193825][5382 ms][DEBUG] proc_open done in 4499 ms; code=0; res.len=3152
[2025-08-21 08:32:24][355594520193825][5382 ms][DEBUG] END   runCmdUntilRes#1 in 4499 ms
[2025-08-21 08:32:24][355594520193825][5382 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:33:14][351813970863586][1 ms][INFO] === Request start ===
[2025-08-21 08:33:14][351813970863586][1 ms][DEBUG] START check_frida
[2025-08-21 08:33:14][351813970863586][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:33:14][351813970863586][284 ms][DEBUG] SU: done in 283 ms; outroot         20950     1 2280516   4132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:33:14][351813970863586][284 ms][DEBUG] check_frida: running
[2025-08-21 08:33:14][351813970863586][284 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 08:33:14][351813970863586][284 ms][DEBUG] START check_scloud
[2025-08-21 08:33:14][351813970863586][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:33:15][351813970863586][550 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23633856 72392 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:33:15][351813970863586][550 ms][DEBUG] targetPkg: running
[2025-08-21 08:33:15][351813970863586][550 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 08:33:15][351813970863586][550 ms][DEBUG] rawBody.length=1160
[2025-08-21 08:33:15][351813970863586][550 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODEzOTcwODYzNTg2IiwibW9kZWwiOiJTTS1BMjY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzNEQ2WlZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzE4In0='" -e "main()" -q"
[2025-08-21 08:33:15][351813970863586][550 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:33:15][351813970863586][550 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODEzOTcwODYzNTg2IiwibW9kZWwiOiJTTS1BMjY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzNEQ2WlZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzE4In0='" -e "main()" -q"
[2025-08-21 08:33:17][351813970863586][3190 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODEzOTcwODYzNTg2IiwibW9kZWwiOiJTTS1BMjY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzNEQ2WlZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzE4In0="\r\n
[2025-08-21 08:33:22][351813970863586][7611 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df3dfa13-7a3c-4a9e-bedb-446dd98af1f0","id":"QR_df3dfa13-7a3c-4a9e-bedb-446dd98af1f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:33:22][351813970863586][7611 ms][DEBUG] proc_open done in 7061 ms; code=0; res.len=3152
[2025-08-21 08:33:22][351813970863586][7611 ms][DEBUG] END   runCmdUntilRes#1 in 7061 ms
[2025-08-21 08:33:22][351813970863586][7611 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:35:07][353744504311925][1 ms][INFO] === Request start ===
[2025-08-21 08:35:07][353744504311925][2 ms][DEBUG] START check_frida
[2025-08-21 08:35:07][353744504311925][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:35:07][353744504311925][309 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2263084   4260 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:35:07][353744504311925][309 ms][DEBUG] check_frida: running
[2025-08-21 08:35:07][353744504311925][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 08:35:07][353744504311925][309 ms][DEBUG] START check_scloud
[2025-08-21 08:35:07][353744504311925][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:35:08][353744504311925][543 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23633888 71776 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:35:08][353744504311925][543 ms][DEBUG] targetPkg: running
[2025-08-21 08:35:08][353744504311925][543 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 08:35:08][353744504311925][543 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:35:08][353744504311925][543 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzQ0NTA0MzExOTI1IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDVQUVZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODMyMCJ9'" -e "main()" -q"
[2025-08-21 08:35:08][353744504311925][544 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:35:08][353744504311925][544 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzQ0NTA0MzExOTI1IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDVQUVZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODMyMCJ9'" -e "main()" -q"
[2025-08-21 08:35:10][353744504311925][3214 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNzQ0NTA0MzExOTI1IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDVQUVZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODMyMCJ9"\r\n
[2025-08-21 08:35:13][353744504311925][5495 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f7d7ed7-fa2a-48b4-bcdc-6eb0bba0b0d9","id":"QR_0f7d7ed7-fa2a-48b4-bcdc-6eb0bba0b0d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:35:13][353744504311925][5495 ms][DEBUG] proc_open done in 4951 ms; code=0; res.len=3152
[2025-08-21 08:35:13][353744504311925][5495 ms][DEBUG] END   runCmdUntilRes#1 in 4952 ms
[2025-08-21 08:35:13][353744504311925][5495 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:37:12][351104343280090][1 ms][INFO] === Request start ===
[2025-08-21 08:37:12][351104343280090][1 ms][DEBUG] START check_frida
[2025-08-21 08:37:12][351104343280090][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:37:12][351104343280090][302 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2263084   4304 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:37:12][351104343280090][302 ms][DEBUG] check_frida: running
[2025-08-21 08:37:12][351104343280090][302 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 08:37:12][351104343280090][302 ms][DEBUG] START check_scloud
[2025-08-21 08:37:12][351104343280090][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:37:13][351104343280090][598 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23633920 72500 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:37:13][351104343280090][598 ms][DEBUG] targetPkg: running
[2025-08-21 08:37:13][351104343280090][598 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:37:13][351104343280090][598 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:37:13][351104343280090][598 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTA0MzQzMjgwMDkwIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MDg3S0FXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3MSJ9'" -e "main()" -q"
[2025-08-21 08:37:13][351104343280090][598 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:37:13][351104343280090][598 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTA0MzQzMjgwMDkwIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MDg3S0FXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3MSJ9'" -e "main()" -q"
[2025-08-21 08:37:15][351104343280090][3238 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTA0MzQzMjgwMDkwIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MDg3S0FXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3MSJ9"\r\n
[2025-08-21 08:37:18][351104343280090][5753 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2af900b8-b959-44ba-9733-b96da61d7ce8","id":"QR_2af900b8-b959-44ba-9733-b96da61d7ce8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:37:18][351104343280090][5753 ms][DEBUG] proc_open done in 5155 ms; code=0; res.len=3152
[2025-08-21 08:37:18][351104343280090][5753 ms][DEBUG] END   runCmdUntilRes#1 in 5155 ms
[2025-08-21 08:37:18][351104343280090][5753 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:38:09][357967977493427][1 ms][INFO] === Request start ===
[2025-08-21 08:38:09][357967977493427][1 ms][DEBUG] START check_frida
[2025-08-21 08:38:09][357967977493427][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:38:09][357967977493427][311 ms][DEBUG] SU: done in 309 ms; outroot         20950     1 2263084   4312 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:38:09][357967977493427][311 ms][DEBUG] check_frida: running
[2025-08-21 08:38:09][357967977493427][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 08:38:09][357967977493427][311 ms][DEBUG] START check_internet
[2025-08-21 08:38:09][357967977493427][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:38:10][357967977493427][812 ms][DEBUG] SU: done in 501 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.052/202.052/202.052/0.000 ms\n
[2025-08-21 08:38:10][357967977493427][813 ms][DEBUG] check_internet: online
[2025-08-21 08:38:10][357967977493427][813 ms][DEBUG] END   check_internet in 502 ms
[2025-08-21 08:38:10][357967977493427][813 ms][DEBUG] START check_scloud
[2025-08-21 08:38:10][357967977493427][813 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:38:10][357967977493427][1076 ms][DEBUG] SU: done in 263 ms; outu0_a118      20979 10674 23633952 72028 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:38:10][357967977493427][1076 ms][DEBUG] targetPkg: running
[2025-08-21 08:38:10][357967977493427][1076 ms][DEBUG] END   check_scloud in 263 ms
[2025-08-21 08:38:10][357967977493427][1076 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:38:10][357967977493427][1076 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc3NDkzNDI3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMDlNNkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk2NiJ9'" -e "main()" -q"
[2025-08-21 08:38:10][357967977493427][1076 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:38:10][357967977493427][1076 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc3NDkzNDI3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMDlNNkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk2NiJ9'" -e "main()" -q"
[2025-08-21 08:38:13][357967977493427][3748 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTY3OTc3NDkzNDI3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMDlNNkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk2NiJ9"\r\n
[2025-08-21 08:38:15][357967977493427][5919 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_076fea1d-df4b-47a6-9a56-ebf4e6bb60d3","id":"QR_076fea1d-df4b-47a6-9a56-ebf4e6bb60d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:38:15][357967977493427][5919 ms][DEBUG] proc_open done in 4843 ms; code=0; res.len=3152
[2025-08-21 08:38:15][357967977493427][5919 ms][DEBUG] END   runCmdUntilRes#1 in 4843 ms
[2025-08-21 08:38:15][357967977493427][5919 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:39:05][352397452045788][0 ms][INFO] === Request start ===
[2025-08-21 08:39:05][352397452045788][1 ms][DEBUG] START check_frida
[2025-08-21 08:39:05][352397452045788][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:39:06][352397452045788][324 ms][DEBUG] SU: done in 322 ms; outroot         20950     1 2263084   4316 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:39:06][352397452045788][324 ms][DEBUG] check_frida: running
[2025-08-21 08:39:06][352397452045788][324 ms][DEBUG] END   check_frida in 323 ms
[2025-08-21 08:39:06][352397452045788][324 ms][DEBUG] START check_scloud
[2025-08-21 08:39:06][352397452045788][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:39:06][352397452045788][620 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23633984 72548 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:39:06][352397452045788][620 ms][DEBUG] targetPkg: running
[2025-08-21 08:39:06][352397452045788][621 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:39:06][352397452045788][621 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:39:06][352397452045788][621 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUyMDQ1Nzg4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MURRMUdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExMCJ9'" -e "main()" -q"
[2025-08-21 08:39:06][352397452045788][621 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:39:06][352397452045788][621 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUyMDQ1Nzg4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MURRMUdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExMCJ9'" -e "main()" -q"
[2025-08-21 08:39:09][352397452045788][3260 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzk3NDUyMDQ1Nzg4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MURRMUdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExMCJ9"\r\n
[2025-08-21 08:39:11][352397452045788][5510 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05ee0780-9b21-4e66-8052-4cff18b79a12","id":"QR_05ee0780-9b21-4e66-8052-4cff18b79a12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:39:11][352397452045788][5510 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 08:39:11][352397452045788][5510 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 08:39:11][352397452045788][5510 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:40:09][352397452938156][1 ms][INFO] === Request start ===
[2025-08-21 08:40:09][352397452938156][2 ms][DEBUG] START check_frida
[2025-08-21 08:40:09][352397452938156][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:40:09][352397452938156][296 ms][DEBUG] SU: done in 294 ms; outroot         20950     1 2263084   4348 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:40:09][352397452938156][296 ms][DEBUG] check_frida: running
[2025-08-21 08:40:09][352397452938156][296 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 08:40:09][352397452938156][296 ms][DEBUG] START check_internet
[2025-08-21 08:40:09][352397452938156][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:40:09][352397452938156][702 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.066/201.066/201.066/0.000 ms\n
[2025-08-21 08:40:09][352397452938156][702 ms][DEBUG] check_internet: online
[2025-08-21 08:40:09][352397452938156][702 ms][DEBUG] END   check_internet in 407 ms
[2025-08-21 08:40:09][352397452938156][702 ms][DEBUG] START check_scloud
[2025-08-21 08:40:09][352397452938156][703 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:40:10][352397452938156][984 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23634016 71756 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:40:10][352397452938156][984 ms][DEBUG] targetPkg: running
[2025-08-21 08:40:10][352397452938156][984 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 08:40:10][352397452938156][984 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:40:10][352397452938156][984 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUyOTM4MTU2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRCMEZMTEpXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc5NyJ9'" -e "main()" -q"
[2025-08-21 08:40:10][352397452938156][984 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:40:10][352397452938156][984 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUyOTM4MTU2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRCMEZMTEpXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc5NyJ9'" -e "main()" -q"
[2025-08-21 08:40:12][352397452938156][3638 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzk3NDUyOTM4MTU2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRCMEZMTEpXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc5NyJ9"\r\n
[2025-08-21 08:40:15][352397452938156][6107 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_503c7767-ddb1-4df6-adc3-b5d5d919966b","id":"QR_503c7767-ddb1-4df6-adc3-b5d5d919966b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:40:15][352397452938156][6107 ms][DEBUG] proc_open done in 5122 ms; code=0; res.len=3152
[2025-08-21 08:40:15][352397452938156][6107 ms][DEBUG] END   runCmdUntilRes#1 in 5122 ms
[2025-08-21 08:40:15][352397452938156][6107 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:44:08][351351022980629][1 ms][INFO] === Request start ===
[2025-08-21 08:44:08][351351022980629][1 ms][DEBUG] START check_frida
[2025-08-21 08:44:08][351351022980629][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:44:08][351351022980629][284 ms][DEBUG] SU: done in 283 ms; outroot         20950     1 2263084   4360 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:44:08][351351022980629][284 ms][DEBUG] check_frida: running
[2025-08-21 08:44:08][351351022980629][284 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 08:44:08][351351022980629][284 ms][DEBUG] START check_internet
[2025-08-21 08:44:08][351351022980629][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:44:09][351351022980629][815 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.798/202.798/202.798/0.000 ms\n
[2025-08-21 08:44:09][351351022980629][816 ms][DEBUG] check_internet: online
[2025-08-21 08:44:09][351351022980629][816 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 08:44:09][351351022980629][816 ms][DEBUG] START check_scloud
[2025-08-21 08:44:09][351351022980629][816 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:44:09][351351022980629][1081 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23634048 72552 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:44:09][351351022980629][1081 ms][DEBUG] targetPkg: running
[2025-08-21 08:44:09][351351022980629][1081 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 08:44:09][351351022980629][1081 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:44:09][351351022980629][1081 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzUxMDIyOTgwNjI5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g2MENRVjlCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDc4NyJ9'" -e "main()" -q"
[2025-08-21 08:44:09][351351022980629][1081 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:44:09][351351022980629][1081 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzUxMDIyOTgwNjI5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g2MENRVjlCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDc4NyJ9'" -e "main()" -q"
[2025-08-21 08:44:12][351351022980629][3736 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzUxMDIyOTgwNjI5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g2MENRVjlCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDc4NyJ9"\r\n
[2025-08-21 08:44:14][351351022980629][6205 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f57a1db1-dcf7-4c54-9b85-c2312c381151","id":"QR_f57a1db1-dcf7-4c54-9b85-c2312c381151","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:44:14][351351022980629][6205 ms][DEBUG] proc_open done in 5124 ms; code=0; res.len=3152
[2025-08-21 08:44:14][351351022980629][6205 ms][DEBUG] END   runCmdUntilRes#1 in 5124 ms
[2025-08-21 08:44:14][351351022980629][6205 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:44:21][350929875370161][0 ms][INFO] === Request start ===
[2025-08-21 08:44:21][350929875370161][1 ms][DEBUG] START check_frida
[2025-08-21 08:44:21][350929875370161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:44:22][350929875370161][320 ms][DEBUG] SU: done in 319 ms; outroot         20950     1 2279504   4372 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:44:22][350929875370161][321 ms][DEBUG] check_frida: running
[2025-08-21 08:44:22][350929875370161][321 ms][DEBUG] END   check_frida in 320 ms
[2025-08-21 08:44:22][350929875370161][321 ms][DEBUG] START check_internet
[2025-08-21 08:44:22][350929875370161][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:44:22][350929875370161][586 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.403/167.403/167.403/0.000 ms\n
[2025-08-21 08:44:22][350929875370161][586 ms][DEBUG] check_internet: online
[2025-08-21 08:44:22][350929875370161][586 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 08:44:22][350929875370161][586 ms][DEBUG] START check_scloud
[2025-08-21 08:44:22][350929875370161][586 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:44:22][350929875370161][820 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23634080 72060 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:44:22][350929875370161][820 ms][DEBUG] targetPkg: running
[2025-08-21 08:44:22][350929875370161][820 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 08:44:22][350929875370161][820 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:44:22][350929875370161][821 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTI5ODc1MzcwMTYxIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTkxOCJ9'" -e "main()" -q"
[2025-08-21 08:44:22][350929875370161][821 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:44:22][350929875370161][821 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTI5ODc1MzcwMTYxIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTkxOCJ9'" -e "main()" -q"
[2025-08-21 08:44:25][350929875370161][3476 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTI5ODc1MzcwMTYxIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTkxOCJ9"\r\n
[2025-08-21 08:44:26][350929875370161][5038 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 08:44:26][350929875370161][5038 ms][DEBUG] proc_open done in 4218 ms; code=0; res.len=93
[2025-08-21 08:44:26][350929875370161][5038 ms][DEBUG] END   runCmdUntilRes#1 in 4218 ms
[2025-08-21 08:44:26][350929875370161][5038 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 08:44:27][][0 ms][INFO] === Request start ===
[2025-08-21 08:44:27][][1 ms][DEBUG] START check_frida
[2025-08-21 08:44:27][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:44:27][][314 ms][DEBUG] SU: done in 313 ms; outroot         20950     1 2279504   4356 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:44:27][][314 ms][DEBUG] check_frida: running
[2025-08-21 08:44:27][][314 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 08:44:27][][314 ms][DEBUG] START check_internet
[2025-08-21 08:44:27][][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:44:27][][564 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.401/143.401/143.401/0.000 ms\n
[2025-08-21 08:44:27][][564 ms][DEBUG] check_internet: online
[2025-08-21 08:44:27][][564 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 08:44:27][][564 ms][DEBUG] START check_scloud
[2025-08-21 08:44:27][][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:44:28][][799 ms][DEBUG] SU: done in 235 ms; outu0_a118      20979 10674 23634112 72596 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:44:28][][799 ms][DEBUG] targetPkg: running
[2025-08-21 08:44:28][][799 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 08:44:28][][799 ms][DEBUG] rawBody.length=1131
[2025-08-21 08:44:28][][799 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkzNiJ9'" -e "main()" -q"
[2025-08-21 08:44:28][][799 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:44:28][][799 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkzNiJ9'" -e "main()" -q"
[2025-08-21 08:44:30][][3454 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkzNiJ9"\r\n
[2025-08-21 08:44:32][][4906 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 08:44:32][][4906 ms][DEBUG] proc_open done in 4107 ms; code=0; res.len=107
[2025-08-21 08:44:32][][4906 ms][DEBUG] END   runCmdUntilRes#1 in 4107 ms
[2025-08-21 08:44:32][][4906 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 08:44:32][][0 ms][INFO] === Request start ===
[2025-08-21 08:44:32][][1 ms][DEBUG] START check_frida
[2025-08-21 08:44:32][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:44:32][][283 ms][DEBUG] SU: done in 282 ms; outroot         20950     1 2279504   4364 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:44:32][][283 ms][DEBUG] check_frida: running
[2025-08-21 08:44:32][][283 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 08:44:32][][283 ms][DEBUG] START check_internet
[2025-08-21 08:44:32][][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:44:33][][517 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.290/144.290/144.290/0.000 ms\n
[2025-08-21 08:44:33][][517 ms][DEBUG] check_internet: online
[2025-08-21 08:44:33][][517 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 08:44:33][][517 ms][DEBUG] START check_scloud
[2025-08-21 08:44:33][][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:44:33][][783 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23634144 71716 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:44:33][][783 ms][DEBUG] targetPkg: running
[2025-08-21 08:44:33][][783 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 08:44:33][][783 ms][DEBUG] rawBody.length=1131
[2025-08-21 08:44:33][][783 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzIwOSJ9'" -e "main()" -q"
[2025-08-21 08:44:33][][783 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:44:33][][783 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzIwOSJ9'" -e "main()" -q"
[2025-08-21 08:44:35][][3407 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzIwOSJ9"\r\n
[2025-08-21 08:44:37][][4907 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 08:44:37][][4907 ms][DEBUG] proc_open done in 4124 ms; code=0; res.len=107
[2025-08-21 08:44:37][][4907 ms][DEBUG] END   runCmdUntilRes#1 in 4124 ms
[2025-08-21 08:44:37][][4907 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 08:44:39][350929875370161][0 ms][INFO] === Request start ===
[2025-08-21 08:44:39][350929875370161][1 ms][DEBUG] START check_frida
[2025-08-21 08:44:39][350929875370161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:44:39][350929875370161][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2279504   4368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:44:39][350929875370161][309 ms][DEBUG] check_frida: running
[2025-08-21 08:44:39][350929875370161][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 08:44:39][350929875370161][309 ms][DEBUG] START check_internet
[2025-08-21 08:44:39][350929875370161][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:44:40][350929875370161][621 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.571/218.571/218.571/0.000 ms\n
[2025-08-21 08:44:40][350929875370161][621 ms][DEBUG] check_internet: online
[2025-08-21 08:44:40][350929875370161][621 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 08:44:40][350929875370161][621 ms][DEBUG] START check_scloud
[2025-08-21 08:44:40][350929875370161][621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:44:40][350929875370161][903 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23634176 72252 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:44:40][350929875370161][903 ms][DEBUG] targetPkg: running
[2025-08-21 08:44:40][350929875370161][903 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:44:40][350929875370161][903 ms][DEBUG] rawBody.length=1160
[2025-08-21 08:44:40][350929875370161][903 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTI5ODc1MzcwMTYxIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDE4In0='" -e "main()" -q"
[2025-08-21 08:44:40][350929875370161][903 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:44:40][350929875370161][903 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTI5ODc1MzcwMTYxIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDE4In0='" -e "main()" -q"
[2025-08-21 08:44:43][350929875370161][3574 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTI5ODc1MzcwMTYxIiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dBMEtGRDRKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDE4In0="\r\n
[2025-08-21 08:44:47][350929875370161][7666 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5898ba6a-1fda-4154-a848-96a48e732186","id":"QR_5898ba6a-1fda-4154-a848-96a48e732186","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:44:47][350929875370161][7667 ms][DEBUG] proc_open done in 6764 ms; code=0; res.len=3152
[2025-08-21 08:44:47][350929875370161][7667 ms][DEBUG] END   runCmdUntilRes#1 in 6764 ms
[2025-08-21 08:44:47][350929875370161][7667 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:46:08][355859832522130][0 ms][INFO] === Request start ===
[2025-08-21 08:46:08][355859832522130][1 ms][DEBUG] START check_frida
[2025-08-21 08:46:08][355859832522130][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:46:08][355859832522130][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084   4352 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:46:08][355859832522130][309 ms][DEBUG] check_frida: running
[2025-08-21 08:46:08][355859832522130][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 08:46:08][355859832522130][309 ms][DEBUG] START check_internet
[2025-08-21 08:46:08][355859832522130][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:46:08][355859832522130][590 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.363/174.363/174.363/0.000 ms\n
[2025-08-21 08:46:08][355859832522130][590 ms][DEBUG] check_internet: online
[2025-08-21 08:46:08][355859832522130][590 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 08:46:08][355859832522130][590 ms][DEBUG] START check_scloud
[2025-08-21 08:46:08][355859832522130][590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:46:09][355859832522130][872 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23634208 72912 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:46:09][355859832522130][872 ms][DEBUG] targetPkg: running
[2025-08-21 08:46:09][355859832522130][872 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 08:46:09][355859832522130][872 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:46:09][355859832522130][872 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU5ODMyNTIyMTMwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMEM1M0hKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQyNCJ9'" -e "main()" -q"
[2025-08-21 08:46:09][355859832522130][872 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:46:09][355859832522130][872 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU5ODMyNTIyMTMwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMEM1M0hKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQyNCJ9'" -e "main()" -q"
[2025-08-21 08:46:11][355859832522130][3526 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODU5ODMyNTIyMTMwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMEM1M0hKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQyNCJ9"\r\n
[2025-08-21 08:46:14][355859832522130][6088 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b3efc08-cd7f-41bc-a924-0514a93e04f4","id":"QR_0b3efc08-cd7f-41bc-a924-0514a93e04f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:46:14][355859832522130][6088 ms][DEBUG] proc_open done in 5216 ms; code=0; res.len=3152
[2025-08-21 08:46:14][355859832522130][6088 ms][DEBUG] END   runCmdUntilRes#1 in 5216 ms
[2025-08-21 08:46:14][355859832522130][6088 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:49:05][350938285822968][1 ms][INFO] === Request start ===
[2025-08-21 08:49:05][350938285822968][2 ms][DEBUG] START check_frida
[2025-08-21 08:49:05][350938285822968][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:49:06][350938285822968][304 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4364 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:49:06][350938285822968][304 ms][DEBUG] check_frida: running
[2025-08-21 08:49:06][350938285822968][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 08:49:06][350938285822968][304 ms][DEBUG] START check_scloud
[2025-08-21 08:49:06][350938285822968][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:49:06][350938285822968][601 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23634240 72268 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:49:06][350938285822968][601 ms][DEBUG] targetPkg: running
[2025-08-21 08:49:06][350938285822968][601 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:49:06][350938285822968][601 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:49:06][350938285822968][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg1ODIyOTY4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFFDUjdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMiJ9'" -e "main()" -q"
[2025-08-21 08:49:06][350938285822968][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:49:06][350938285822968][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg1ODIyOTY4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFFDUjdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMiJ9'" -e "main()" -q"
[2025-08-21 08:49:09][350938285822968][3288 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg1ODIyOTY4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFFDUjdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMiJ9"\r\n
[2025-08-21 08:49:11][350938285822968][5521 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5194316-f1b5-4332-a243-d9f4df548752","id":"QR_a5194316-f1b5-4332-a243-d9f4df548752","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:49:11][350938285822968][5522 ms][DEBUG] proc_open done in 4920 ms; code=0; res.len=3152
[2025-08-21 08:49:11][350938285822968][5522 ms][DEBUG] END   runCmdUntilRes#1 in 4920 ms
[2025-08-21 08:49:11][350938285822968][5522 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:52:08][354588700239334][1 ms][INFO] === Request start ===
[2025-08-21 08:52:08][354588700239334][2 ms][DEBUG] START check_frida
[2025-08-21 08:52:08][354588700239334][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:52:08][354588700239334][305 ms][DEBUG] SU: done in 303 ms; outroot         20950     1 2263084   4368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:52:08][354588700239334][305 ms][DEBUG] check_frida: running
[2025-08-21 08:52:08][354588700239334][305 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 08:52:08][354588700239334][305 ms][DEBUG] START check_internet
[2025-08-21 08:52:08][354588700239334][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:52:08][354588700239334][727 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.562/202.562/202.562/0.000 ms\n
[2025-08-21 08:52:08][354588700239334][727 ms][DEBUG] check_internet: online
[2025-08-21 08:52:08][354588700239334][727 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 08:52:08][354588700239334][727 ms][DEBUG] START check_scloud
[2025-08-21 08:52:08][354588700239334][727 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:52:09][354588700239334][992 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23634272 71816 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:52:09][354588700239334][992 ms][DEBUG] targetPkg: running
[2025-08-21 08:52:09][354588700239334][992 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 08:52:09][354588700239334][993 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:52:09][354588700239334][993 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTg4NzAwMjM5MzM0IiwibW9kZWwiOiJTTS1TOTI2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dDMDdQMllEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ4MSJ9'" -e "main()" -q"
[2025-08-21 08:52:09][354588700239334][993 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:52:09][354588700239334][993 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTg4NzAwMjM5MzM0IiwibW9kZWwiOiJTTS1TOTI2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dDMDdQMllEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ4MSJ9'" -e "main()" -q"
[2025-08-21 08:52:11][354588700239334][3663 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTg4NzAwMjM5MzM0IiwibW9kZWwiOiJTTS1TOTI2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dDMDdQMllEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ4MSJ9"\r\n
[2025-08-21 08:52:14][354588700239334][6022 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a51f938-a17e-4c35-aa3d-5901e553b573","id":"QR_1a51f938-a17e-4c35-aa3d-5901e553b573","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:52:14][354588700239334][6022 ms][DEBUG] proc_open done in 5029 ms; code=0; res.len=3152
[2025-08-21 08:52:14][354588700239334][6022 ms][DEBUG] END   runCmdUntilRes#1 in 5030 ms
[2025-08-21 08:52:14][354588700239334][6022 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:53:07][356769545294159][1 ms][INFO] === Request start ===
[2025-08-21 08:53:07][356769545294159][2 ms][DEBUG] START check_frida
[2025-08-21 08:53:07][356769545294159][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:53:07][356769545294159][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2262072   4344 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:53:07][356769545294159][303 ms][DEBUG] check_frida: running
[2025-08-21 08:53:07][356769545294159][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 08:53:07][356769545294159][304 ms][DEBUG] START check_scloud
[2025-08-21 08:53:07][356769545294159][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:53:08][356769545294159][600 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23634304 72364 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:53:08][356769545294159][600 ms][DEBUG] targetPkg: running
[2025-08-21 08:53:08][356769545294159][600 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 08:53:08][356769545294159][600 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:53:08][356769545294159][600 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzY5NTQ1Mjk0MTU5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFc0MDZDRkxBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYwOCJ9'" -e "main()" -q"
[2025-08-21 08:53:08][356769545294159][600 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:53:08][356769545294159][600 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzY5NTQ1Mjk0MTU5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFc0MDZDRkxBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYwOCJ9'" -e "main()" -q"
[2025-08-21 08:53:10][356769545294159][3240 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NzY5NTQ1Mjk0MTU5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFc0MDZDRkxBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYwOCJ9"\r\n
[2025-08-21 08:53:17][356769545294159][10238 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7b185c1-7a59-4a35-957e-3eb1fc76fcde","id":"QR_e7b185c1-7a59-4a35-957e-3eb1fc76fcde","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:53:17][356769545294159][10238 ms][DEBUG] proc_open done in 9638 ms; code=0; res.len=3152
[2025-08-21 08:53:17][356769545294159][10238 ms][DEBUG] END   runCmdUntilRes#1 in 9638 ms
[2025-08-21 08:53:17][356769545294159][10238 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:56:10][358230104082095][1 ms][INFO] === Request start ===
[2025-08-21 08:56:10][358230104082095][2 ms][DEBUG] START check_frida
[2025-08-21 08:56:10][358230104082095][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:56:10][358230104082095][314 ms][DEBUG] SU: done in 313 ms; outroot         20950     1 2263084   4332 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:56:10][358230104082095][314 ms][DEBUG] check_frida: running
[2025-08-21 08:56:10][358230104082095][314 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 08:56:10][358230104082095][314 ms][DEBUG] START check_internet
[2025-08-21 08:56:10][358230104082095][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:56:10][358230104082095][798 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.870/201.870/201.870/0.000 ms\n
[2025-08-21 08:56:10][358230104082095][798 ms][DEBUG] check_internet: online
[2025-08-21 08:56:10][358230104082095][798 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 08:56:10][358230104082095][798 ms][DEBUG] START check_scloud
[2025-08-21 08:56:10][358230104082095][798 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:56:11][358230104082095][1064 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23634336 71160 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:56:11][358230104082095][1064 ms][DEBUG] targetPkg: running
[2025-08-21 08:56:11][358230104082095][1064 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 08:56:11][358230104082095][1064 ms][DEBUG] rawBody.length=1160
[2025-08-21 08:56:11][358230104082095][1064 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MjMwMTA0MDgyMDk1IiwibW9kZWwiOiJTTS1OOTcwVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE1DMVJDTFBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MjY5In0='" -e "main()" -q"
[2025-08-21 08:56:11][358230104082095][1064 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:56:11][358230104082095][1064 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MjMwMTA0MDgyMDk1IiwibW9kZWwiOiJTTS1OOTcwVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE1DMVJDTFBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MjY5In0='" -e "main()" -q"
[2025-08-21 08:56:13][358230104082095][3735 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MjMwMTA0MDgyMDk1IiwibW9kZWwiOiJTTS1OOTcwVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE1DMVJDTFBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MjY5In0="\r\n
[2025-08-21 08:56:17][358230104082095][7328 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55e9b850-a5f0-4726-a2a6-7cf614abbd2e","id":"QR_55e9b850-a5f0-4726-a2a6-7cf614abbd2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:56:17][358230104082095][7328 ms][DEBUG] proc_open done in 6264 ms; code=0; res.len=3152
[2025-08-21 08:56:17][358230104082095][7328 ms][DEBUG] END   runCmdUntilRes#1 in 6264 ms
[2025-08-21 08:56:17][358230104082095][7328 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:57:09][354255810414328][0 ms][INFO] === Request start ===
[2025-08-21 08:57:09][354255810414328][1 ms][DEBUG] START check_frida
[2025-08-21 08:57:09][354255810414328][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:57:09][354255810414328][256 ms][DEBUG] SU: done in 255 ms; outroot         20950     1 2263084   4360 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:57:09][354255810414328][256 ms][DEBUG] check_frida: running
[2025-08-21 08:57:09][354255810414328][257 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 08:57:09][354255810414328][257 ms][DEBUG] START check_scloud
[2025-08-21 08:57:09][354255810414328][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:57:09][353628420148216][1 ms][INFO] === Request start ===
[2025-08-21 08:57:09][354255810414328][552 ms][DEBUG] SU: done in 295 ms; outu0_a118      20979 10674 23634368 71720 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:57:09][354255810414328][552 ms][DEBUG] targetPkg: running
[2025-08-21 08:57:09][354255810414328][552 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 08:57:09][354255810414328][552 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:57:09][354255810414328][552 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEwNDE0MzI4IiwibW9kZWwiOiJTTS1OOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q043ME1DMUFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLU0EiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDEwNyJ9'" -e "main()" -q"
[2025-08-21 08:57:09][354255810414328][552 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:57:09][354255810414328][552 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEwNDE0MzI4IiwibW9kZWwiOiJTTS1OOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q043ME1DMUFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLU0EiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDEwNyJ9'" -e "main()" -q"
[2025-08-21 08:57:12][354255810414328][3175 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjU1ODEwNDE0MzI4IiwibW9kZWwiOiJTTS1OOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q043ME1DMUFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLU0EiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDEwNyJ9"\r\n
[2025-08-21 08:57:14][354255810414328][5316 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe9a63cb-75cf-4fde-985f-0a20577a8062","id":"QR_fe9a63cb-75cf-4fde-985f-0a20577a8062","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:57:14][354255810414328][5316 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 08:57:14][354255810414328][5316 ms][DEBUG] END   runCmdUntilRes#1 in 4764 ms
[2025-08-21 08:57:14][354255810414328][5316 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:57:14][353628420148216][5066 ms][DEBUG] START check_frida
[2025-08-21 08:57:14][353628420148216][5066 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:57:15][353628420148216][5316 ms][DEBUG] SU: done in 250 ms; outroot         20950     1 2279504   4368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:57:15][353628420148216][5316 ms][DEBUG] check_frida: running
[2025-08-21 08:57:15][353628420148216][5316 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 08:57:15][353628420148216][5316 ms][DEBUG] START check_scloud
[2025-08-21 08:57:15][353628420148216][5316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:57:15][353628420148216][5550 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23634400 70920 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:57:15][353628420148216][5550 ms][DEBUG] targetPkg: running
[2025-08-21 08:57:15][353628420148216][5550 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 08:57:15][353628420148216][5550 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:57:15][353628420148216][5550 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjI4NDIwMTQ4MjE2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDBHNVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQyMyJ9'" -e "main()" -q"
[2025-08-21 08:57:15][353628420148216][5550 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:57:15][353628420148216][5550 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjI4NDIwMTQ4MjE2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDBHNVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQyMyJ9'" -e "main()" -q"
[2025-08-21 08:57:17][353628420148216][8174 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjI4NDIwMTQ4MjE2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDBHNVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQyMyJ9"\r\n
[2025-08-21 08:57:19][353628420148216][9986 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3cbd89a2-534a-43cf-a7e8-b8a521a2737f","id":"QR_3cbd89a2-534a-43cf-a7e8-b8a521a2737f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:57:19][353628420148216][9987 ms][DEBUG] proc_open done in 4437 ms; code=0; res.len=3152
[2025-08-21 08:57:19][353628420148216][9987 ms][DEBUG] END   runCmdUntilRes#1 in 4437 ms
[2025-08-21 08:57:19][353628420148216][9987 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:57:20][350731692030246][0 ms][INFO] === Request start ===
[2025-08-21 08:57:20][350731692030246][0 ms][DEBUG] START check_frida
[2025-08-21 08:57:20][350731692030246][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:57:21][350731692030246][288 ms][DEBUG] SU: done in 287 ms; outroot         20950     1 2279504   4360 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:57:21][350731692030246][288 ms][DEBUG] check_frida: running
[2025-08-21 08:57:21][350731692030246][288 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 08:57:21][350731692030246][288 ms][DEBUG] START check_scloud
[2025-08-21 08:57:21][350731692030246][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:57:21][350731692030246][569 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23634432 71484 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:57:21][350731692030246][569 ms][DEBUG] targetPkg: running
[2025-08-21 08:57:21][350731692030246][569 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:57:21][350731692030246][569 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:57:21][350731692030246][569 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzMxNjkyMDMwMjQ2IiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MUM5VlpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgxNCJ9'" -e "main()" -q"
[2025-08-21 08:57:21][350731692030246][570 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:57:21][350731692030246][570 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzMxNjkyMDMwMjQ2IiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MUM5VlpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgxNCJ9'" -e "main()" -q"
[2025-08-21 08:57:24][350731692030246][3256 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzMxNjkyMDMwMjQ2IiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MUM5VlpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgxNCJ9"\r\n
[2025-08-21 08:57:25][350731692030246][5146 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99eafb5c-1f51-4b15-91e6-2b7d2ed4fbdf","id":"QR_99eafb5c-1f51-4b15-91e6-2b7d2ed4fbdf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:57:25][350731692030246][5146 ms][DEBUG] proc_open done in 4577 ms; code=0; res.len=3152
[2025-08-21 08:57:25][350731692030246][5147 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 08:57:25][350731692030246][5147 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:58:13][351642488535059][0 ms][INFO] === Request start ===
[2025-08-21 08:58:13][351642488535059][1 ms][DEBUG] START check_frida
[2025-08-21 08:58:13][351642488535059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:58:13][351642488535059][284 ms][DEBUG] SU: done in 283 ms; outroot         20950     1 2263084   4368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:58:13][351642488535059][284 ms][DEBUG] check_frida: running
[2025-08-21 08:58:13][351642488535059][284 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 08:58:13][351642488535059][284 ms][DEBUG] START check_internet
[2025-08-21 08:58:13][351642488535059][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:58:14][351642488535059][581 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.594/170.594/170.594/0.000 ms\n
[2025-08-21 08:58:14][351642488535059][581 ms][DEBUG] check_internet: online
[2025-08-21 08:58:14][351642488535059][581 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 08:58:14][351642488535059][581 ms][DEBUG] START check_scloud
[2025-08-21 08:58:14][351642488535059][581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:58:14][351642488535059][846 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23634464 72036 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:58:14][351642488535059][846 ms][DEBUG] targetPkg: running
[2025-08-21 08:58:14][351642488535059][846 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 08:58:14][351642488535059][846 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:58:14][351642488535059][846 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDg4NTM1MDU5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MDlEN1BEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgwNyJ9'" -e "main()" -q"
[2025-08-21 08:58:14][351642488535059][846 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:58:14][351642488535059][846 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDg4NTM1MDU5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MDlEN1BEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgwNyJ9'" -e "main()" -q"
[2025-08-21 08:58:17][351642488535059][3517 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjQyNDg4NTM1MDU5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MDlEN1BEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgwNyJ9"\r\n
[2025-08-21 08:58:19][351642488535059][6095 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aebc4dcb-0f9d-463e-ab23-074aaa154631","id":"QR_aebc4dcb-0f9d-463e-ab23-074aaa154631","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:58:19][351642488535059][6095 ms][DEBUG] proc_open done in 5249 ms; code=0; res.len=3152
[2025-08-21 08:58:19][351642488535059][6096 ms][DEBUG] END   runCmdUntilRes#1 in 5249 ms
[2025-08-21 08:58:19][351642488535059][6096 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:58:26][352665186541003][0 ms][INFO] === Request start ===
[2025-08-21 08:58:26][352665186541003][1 ms][DEBUG] START check_frida
[2025-08-21 08:58:26][352665186541003][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:58:27][352665186541003][312 ms][DEBUG] SU: done in 311 ms; outroot         20950     1 2279504   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:58:27][352665186541003][312 ms][DEBUG] check_frida: running
[2025-08-21 08:58:27][352665186541003][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 08:58:27][352665186541003][312 ms][DEBUG] START check_internet
[2025-08-21 08:58:27][352665186541003][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 08:58:27][352665186541003][609 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.422/214.422/214.422/0.000 ms\n
[2025-08-21 08:58:27][352665186541003][609 ms][DEBUG] check_internet: online
[2025-08-21 08:58:27][352665186541003][609 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 08:58:27][352665186541003][609 ms][DEBUG] START check_scloud
[2025-08-21 08:58:27][352665186541003][609 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:58:27][352665186541003][906 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23634496 71656 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:58:27][352665186541003][906 ms][DEBUG] targetPkg: running
[2025-08-21 08:58:27][352665186541003][907 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 08:58:27][352665186541003][907 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:58:27][352665186541003][907 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjY1MTg2NTQxMDAzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MFdXS0tYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ0NiJ9'" -e "main()" -q"
[2025-08-21 08:58:27][352665186541003][907 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:58:27][352665186541003][907 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjY1MTg2NTQxMDAzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MFdXS0tYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ0NiJ9'" -e "main()" -q"
[2025-08-21 08:58:30][352665186541003][3561 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjY1MTg2NTQxMDAzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MFdXS0tYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ0NiJ9"\r\n
[2025-08-21 08:58:32][352665186541003][5388 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e6a1b40b-ea3b-44af-9142-4c63ec77a333","id":"QR_e6a1b40b-ea3b-44af-9142-4c63ec77a333","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:58:32][352665186541003][5389 ms][DEBUG] proc_open done in 4481 ms; code=0; res.len=3152
[2025-08-21 08:58:32][352665186541003][5389 ms][DEBUG] END   runCmdUntilRes#1 in 4482 ms
[2025-08-21 08:58:32][352665186541003][5389 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 08:59:08][351642488083290][0 ms][INFO] === Request start ===
[2025-08-21 08:59:08][351642488083290][1 ms][DEBUG] START check_frida
[2025-08-21 08:59:08][351642488083290][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 08:59:08][351642488083290][283 ms][DEBUG] SU: done in 282 ms; outroot         20950     1 2263084   4352 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 08:59:08][351642488083290][283 ms][DEBUG] check_frida: running
[2025-08-21 08:59:08][351642488083290][283 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 08:59:08][351642488083290][283 ms][DEBUG] START check_scloud
[2025-08-21 08:59:08][351642488083290][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 08:59:08][351642488083290][564 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23634528 71168 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 08:59:08][351642488083290][564 ms][DEBUG] targetPkg: running
[2025-08-21 08:59:08][351642488083290][564 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 08:59:08][351642488083290][564 ms][DEBUG] rawBody.length=1161
[2025-08-21 08:59:08][351642488083290][564 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDg4MDgzMjkwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MDRDNTlQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE2NyJ9'" -e "main()" -q"
[2025-08-21 08:59:08][351642488083290][564 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 08:59:08][351642488083290][564 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDg4MDgzMjkwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MDRDNTlQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE2NyJ9'" -e "main()" -q"
[2025-08-21 08:59:11][351642488083290][3251 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjQyNDg4MDgzMjkwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MDRDNTlQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE2NyJ9"\r\n
[2025-08-21 08:59:13][351642488083290][5063 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c2af319-cf6f-4154-ba90-5127226f6d12","id":"QR_6c2af319-cf6f-4154-ba90-5127226f6d12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 08:59:13][351642488083290][5063 ms][DEBUG] proc_open done in 4499 ms; code=0; res.len=3152
[2025-08-21 08:59:13][351642488083290][5063 ms][DEBUG] END   runCmdUntilRes#1 in 4499 ms
[2025-08-21 08:59:13][351642488083290][5063 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:00:08][351877472259791][1 ms][INFO] === Request start ===
[2025-08-21 09:00:08][351877472259791][2 ms][DEBUG] START check_frida
[2025-08-21 09:00:08][351877472259791][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:00:09][351877472259791][304 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4360 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:00:09][351877472259791][304 ms][DEBUG] check_frida: running
[2025-08-21 09:00:09][351877472259791][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 09:00:09][351877472259791][304 ms][DEBUG] START check_internet
[2025-08-21 09:00:09][351877472259791][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:00:09][351877472259791][759 ms][DEBUG] SU: done in 455 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.912/201.912/201.912/0.000 ms\n
[2025-08-21 09:00:09][351877472259791][759 ms][DEBUG] check_internet: online
[2025-08-21 09:00:09][351877472259791][759 ms][DEBUG] END   check_internet in 455 ms
[2025-08-21 09:00:09][351877472259791][759 ms][DEBUG] START check_scloud
[2025-08-21 09:00:09][351877472259791][759 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:00:09][351877472259791][991 ms][DEBUG] SU: done in 232 ms; outu0_a118      20979 10674 23634560 71672 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:00:09][351877472259791][991 ms][DEBUG] targetPkg: running
[2025-08-21 09:00:09][351877472259791][991 ms][DEBUG] END   check_scloud in 232 ms
[2025-08-21 09:00:09][351877472259791][991 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:00:09][351877472259791][991 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDcyMjU5NzkxIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcyMDNOWVlXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI2MiJ9'" -e "main()" -q"
[2025-08-21 09:00:09][351877472259791][991 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:00:09][351877472259791][991 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDcyMjU5NzkxIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcyMDNOWVlXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI2MiJ9'" -e "main()" -q"
[2025-08-21 09:00:12][351877472259791][3663 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDcyMjU5NzkxIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcyMDNOWVlXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI2MiJ9"\r\n
[2025-08-21 09:00:15][351877472259791][6271 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_302562c5-df06-48fd-8b14-326c87fac5c7","id":"QR_302562c5-df06-48fd-8b14-326c87fac5c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:00:15][351877472259791][6272 ms][DEBUG] proc_open done in 5280 ms; code=0; res.len=3152
[2025-08-21 09:00:15][351877472259791][6272 ms][DEBUG] END   runCmdUntilRes#1 in 5281 ms
[2025-08-21 09:00:15][351877472259791][6272 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:01:07][351890471360916][0 ms][INFO] === Request start ===
[2025-08-21 09:01:07][351890471360916][1 ms][DEBUG] START check_frida
[2025-08-21 09:01:07][351890471360916][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:01:08][351890471360916][305 ms][DEBUG] SU: done in 304 ms; outroot         20950     1 2263084   4372 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:01:08][351890471360916][305 ms][DEBUG] check_frida: running
[2025-08-21 09:01:08][351890471360916][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 09:01:08][351890471360916][305 ms][DEBUG] START check_scloud
[2025-08-21 09:01:08][351890471360916][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:01:08][351890471360916][603 ms][DEBUG] SU: done in 298 ms; outu0_a118      20979 10674 23634592 70864 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:01:08][351890471360916][604 ms][DEBUG] targetPkg: running
[2025-08-21 09:01:08][351890471360916][604 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 09:01:08][351890471360916][604 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:01:08][351890471360916][604 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODkwNDcxMzYwOTE2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI3NCJ9'" -e "main()" -q"
[2025-08-21 09:01:08][351890471360916][604 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:01:08][351890471360916][604 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODkwNDcxMzYwOTE2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI3NCJ9'" -e "main()" -q"
[2025-08-21 09:01:11][351890471360916][3258 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODkwNDcxMzYwOTE2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI3NCJ9"\r\n
[2025-08-21 09:01:12][351890471360916][4851 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 09:01:12][351890471360916][4851 ms][DEBUG] proc_open done in 4247 ms; code=0; res.len=93
[2025-08-21 09:01:12][351890471360916][4851 ms][DEBUG] END   runCmdUntilRes#1 in 4247 ms
[2025-08-21 09:01:12][351890471360916][4851 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 09:01:13][][0 ms][INFO] === Request start ===
[2025-08-21 09:01:13][][1 ms][DEBUG] START check_frida
[2025-08-21 09:01:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:01:13][][311 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2279504   4348 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:01:13][][311 ms][DEBUG] check_frida: running
[2025-08-21 09:01:13][][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 09:01:13][][311 ms][DEBUG] START check_scloud
[2025-08-21 09:01:13][][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:01:13][][592 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23634624 71412 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:01:13][][592 ms][DEBUG] targetPkg: running
[2025-08-21 09:01:13][][592 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 09:01:13][][593 ms][DEBUG] rawBody.length=1131
[2025-08-21 09:01:13][][593 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQxNyJ9'" -e "main()" -q"
[2025-08-21 09:01:13][][593 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:01:13][][593 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQxNyJ9'" -e "main()" -q"
[2025-08-21 09:01:16][][3263 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQxNyJ9"\r\n
[2025-08-21 09:01:18][][5138 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 09:01:18][][5138 ms][DEBUG] proc_open done in 4545 ms; code=0; res.len=107
[2025-08-21 09:01:18][][5138 ms][DEBUG] END   runCmdUntilRes#1 in 4545 ms
[2025-08-21 09:01:18][][5138 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 09:01:18][][0 ms][INFO] === Request start ===
[2025-08-21 09:01:18][][1 ms][DEBUG] START check_frida
[2025-08-21 09:01:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:01:18][][310 ms][DEBUG] SU: done in 309 ms; outroot         20950     1 2279504   4364 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:01:18][][310 ms][DEBUG] check_frida: running
[2025-08-21 09:01:18][][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 09:01:18][][310 ms][DEBUG] START check_scloud
[2025-08-21 09:01:18][][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:01:19][][607 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23634656 71960 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:01:19][][607 ms][DEBUG] targetPkg: running
[2025-08-21 09:01:19][][607 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:01:19][][607 ms][DEBUG] rawBody.length=1131
[2025-08-21 09:01:19][][607 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTIyMSJ9'" -e "main()" -q"
[2025-08-21 09:01:19][][607 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:01:19][][607 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTIyMSJ9'" -e "main()" -q"
[2025-08-21 09:01:21][][3262 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTIyMSJ9"\r\n
[2025-08-21 09:01:23][][4762 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 09:01:23][][4762 ms][DEBUG] proc_open done in 4155 ms; code=0; res.len=107
[2025-08-21 09:01:23][][4762 ms][DEBUG] END   runCmdUntilRes#1 in 4155 ms
[2025-08-21 09:01:23][][4762 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 09:01:25][351890471360916][0 ms][INFO] === Request start ===
[2025-08-21 09:01:25][351890471360916][1 ms][DEBUG] START check_frida
[2025-08-21 09:01:25][351890471360916][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:01:25][351890471360916][271 ms][DEBUG] SU: done in 270 ms; outroot         20950     1 2279504   4368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:01:25][351890471360916][271 ms][DEBUG] check_frida: running
[2025-08-21 09:01:25][351890471360916][271 ms][DEBUG] END   check_frida in 270 ms
[2025-08-21 09:01:25][351890471360916][271 ms][DEBUG] START check_scloud
[2025-08-21 09:01:25][351890471360916][271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:01:26][351890471360916][568 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23634688 71676 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:01:26][351890471360916][568 ms][DEBUG] targetPkg: running
[2025-08-21 09:01:26][351890471360916][568 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:01:26][351890471360916][568 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:01:26][351890471360916][568 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODkwNDcxMzYwOTE2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzU0In0='" -e "main()" -q"
[2025-08-21 09:01:26][351890471360916][568 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:01:26][351890471360916][568 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODkwNDcxMzYwOTE2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzU0In0='" -e "main()" -q"
[2025-08-21 09:01:28][351890471360916][3254 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODkwNDcxMzYwOTE2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c2MVpSTFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzU0In0="\r\n
[2025-08-21 09:01:33][351890471360916][8003 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec29fadd-356f-4683-a241-9fff927f76af","id":"QR_ec29fadd-356f-4683-a241-9fff927f76af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:01:33][351890471360916][8004 ms][DEBUG] proc_open done in 7436 ms; code=0; res.len=3152
[2025-08-21 09:01:33][351890471360916][8004 ms][DEBUG] END   runCmdUntilRes#1 in 7436 ms
[2025-08-21 09:01:33][351890471360916][8004 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:02:07][358780106402527][0 ms][INFO] === Request start ===
[2025-08-21 09:02:07][358780106402527][1 ms][DEBUG] START check_frida
[2025-08-21 09:02:07][358780106402527][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:02:08][358780106402527][321 ms][DEBUG] SU: done in 320 ms; outroot         20950     1 2263084   4356 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:02:08][358780106402527][321 ms][DEBUG] check_frida: running
[2025-08-21 09:02:08][358780106402527][321 ms][DEBUG] END   check_frida in 320 ms
[2025-08-21 09:02:08][358780106402527][321 ms][DEBUG] START check_internet
[2025-08-21 09:02:08][358780106402527][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:02:08][358780106402527][665 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.249/238.249/238.249/0.000 ms\n
[2025-08-21 09:02:08][358780106402527][665 ms][DEBUG] check_internet: online
[2025-08-21 09:02:08][358780106402527][665 ms][DEBUG] END   check_internet in 343 ms
[2025-08-21 09:02:08][358780106402527][665 ms][DEBUG] START check_scloud
[2025-08-21 09:02:08][358780106402527][665 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:02:08][358780106402527][899 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23634720 72488 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:02:08][358780106402527][899 ms][DEBUG] targetPkg: running
[2025-08-21 09:02:08][358780106402527][899 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 09:02:08][358780106402527][899 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:02:08][358780106402527][899 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NzgwMTA2NDAyNTI3IiwibW9kZWwiOiJTTS1OOTc1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE04MzIxSlFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJEQlQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEyMiJ9'" -e "main()" -q"
[2025-08-21 09:02:08][358780106402527][899 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:02:08][358780106402527][899 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NzgwMTA2NDAyNTI3IiwibW9kZWwiOiJTTS1OOTc1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE04MzIxSlFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJEQlQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEyMiJ9'" -e "main()" -q"
[2025-08-21 09:02:11][358780106402527][3554 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NzgwMTA2NDAyNTI3IiwibW9kZWwiOiJTTS1OOTc1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE04MzIxSlFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJEQlQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEyMiJ9"\r\n
[2025-08-21 09:02:13][358780106402527][5867 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d2df189-232c-4faf-8727-8c0e8efa4b7c","id":"QR_7d2df189-232c-4faf-8727-8c0e8efa4b7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:02:13][358780106402527][5867 ms][DEBUG] proc_open done in 4968 ms; code=0; res.len=3152
[2025-08-21 09:02:13][358780106402527][5867 ms][DEBUG] END   runCmdUntilRes#1 in 4968 ms
[2025-08-21 09:02:13][358780106402527][5867 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:06:12][357450478545839][1 ms][INFO] === Request start ===
[2025-08-21 09:06:12][357450478545839][2 ms][DEBUG] START check_frida
[2025-08-21 09:06:12][357450478545839][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:06:12][357450478545839][252 ms][DEBUG] SU: done in 250 ms; outroot         20950     1 2278492   4344 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:06:12][357450478545839][252 ms][DEBUG] check_frida: running
[2025-08-21 09:06:12][357450478545839][252 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 09:06:12][357450478545839][252 ms][DEBUG] START check_internet
[2025-08-21 09:06:12][357450478545839][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:06:12][357450478545839][752 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.323/202.323/202.323/0.000 ms\n
[2025-08-21 09:06:12][357450478545839][752 ms][DEBUG] check_internet: online
[2025-08-21 09:06:12][357450478545839][752 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 09:06:12][357450478545839][752 ms][DEBUG] START check_scloud
[2025-08-21 09:06:12][357450478545839][752 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:06:13][357450478545839][1049 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23634752 71544 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:06:13][357450478545839][1049 ms][DEBUG] targetPkg: running
[2025-08-21 09:06:13][357450478545839][1049 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:06:13][357450478545839][1049 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:06:13][357450478545839][1049 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDc4NTQ1ODM5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MEg0V1lWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQyOCJ9'" -e "main()" -q"
[2025-08-21 09:06:13][357450478545839][1049 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:06:13][357450478545839][1049 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDc4NTQ1ODM5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MEg0V1lWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQyOCJ9'" -e "main()" -q"
[2025-08-21 09:06:15][357450478545839][3673 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDUwNDc4NTQ1ODM5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MEg0V1lWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQyOCJ9"\r\n
[2025-08-21 09:06:17][357450478545839][5798 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d2aa205-5418-406f-8f4d-1edced7d74a0","id":"QR_0d2aa205-5418-406f-8f4d-1edced7d74a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:06:17][357450478545839][5798 ms][DEBUG] proc_open done in 4749 ms; code=0; res.len=3152
[2025-08-21 09:06:17][357450478545839][5798 ms][DEBUG] END   runCmdUntilRes#1 in 4749 ms
[2025-08-21 09:06:17][357450478545839][5798 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:07:07][352743951111219][0 ms][INFO] === Request start ===
[2025-08-21 09:07:07][352743951111219][1 ms][DEBUG] START check_frida
[2025-08-21 09:07:07][352743951111219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:07:07][352743951111219][294 ms][DEBUG] SU: done in 293 ms; outroot         20950     1 2263084   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:07:07][352743951111219][295 ms][DEBUG] check_frida: running
[2025-08-21 09:07:07][352743951111219][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 09:07:07][352743951111219][295 ms][DEBUG] START check_scloud
[2025-08-21 09:07:07][352743951111219][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:07:08][352743951111219][591 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23634784 72132 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:07:08][352743951111219][591 ms][DEBUG] targetPkg: running
[2025-08-21 09:07:08][352743951111219][591 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:07:08][352743951111219][592 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:07:08][352743951111219][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzQzOTUxMTExMjE5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0ME40OUFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTAzNCJ9'" -e "main()" -q"
[2025-08-21 09:07:08][352743951111219][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:07:08][352743951111219][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzQzOTUxMTExMjE5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0ME40OUFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTAzNCJ9'" -e "main()" -q"
[2025-08-21 09:07:09][350545462203860][1 ms][INFO] === Request start ===
[2025-08-21 09:07:10][352743951111219][3247 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzQzOTUxMTExMjE5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0ME40OUFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTAzNCJ9"\r\n
[2025-08-21 09:07:12][352743951111219][5043 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc199637-e067-4089-9c66-f30fc298a838","id":"QR_bc199637-e067-4089-9c66-f30fc298a838","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:07:12][352743951111219][5043 ms][DEBUG] proc_open done in 4451 ms; code=0; res.len=3152
[2025-08-21 09:07:12][352743951111219][5043 ms][DEBUG] END   runCmdUntilRes#1 in 4451 ms
[2025-08-21 09:07:12][352743951111219][5043 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:07:12][350545462203860][3032 ms][DEBUG] START check_frida
[2025-08-21 09:07:12][350545462203860][3032 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:07:13][350545462203860][3345 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2279504   4360 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:07:13][350545462203860][3345 ms][DEBUG] check_frida: running
[2025-08-21 09:07:13][350545462203860][3345 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 09:07:13][350545462203860][3345 ms][DEBUG] START check_scloud
[2025-08-21 09:07:13][350545462203860][3345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:07:13][350545462203860][3626 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23634816 71456 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:07:13][350545462203860][3626 ms][DEBUG] targetPkg: running
[2025-08-21 09:07:13][350545462203860][3626 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 09:07:13][350545462203860][3626 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:07:13][350545462203860][3626 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYyMjAzODYwIiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTjcwTFpGWkwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkJUVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTY3In0='" -e "main()" -q"
[2025-08-21 09:07:13][350545462203860][3626 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:07:13][350545462203860][3626 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYyMjAzODYwIiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTjcwTFpGWkwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkJUVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTY3In0='" -e "main()" -q"
[2025-08-21 09:07:16][350545462203860][6250 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTQ1NDYyMjAzODYwIiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTjcwTFpGWkwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkJUVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTY3In0="\r\n
[2025-08-21 09:07:18][350545462203860][8718 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61725825-52ad-495d-9249-48fd459a8373","id":"QR_61725825-52ad-495d-9249-48fd459a8373","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:07:18][350545462203860][8719 ms][DEBUG] proc_open done in 5092 ms; code=0; res.len=3152
[2025-08-21 09:07:18][350545462203860][8719 ms][DEBUG] END   runCmdUntilRes#1 in 5092 ms
[2025-08-21 09:07:18][350545462203860][8719 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:07:23][351424287007980][0 ms][INFO] === Request start ===
[2025-08-21 09:07:23][351424287007980][1 ms][DEBUG] START check_frida
[2025-08-21 09:07:23][351424287007980][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:07:23][351424287007980][261 ms][DEBUG] SU: done in 260 ms; outroot         20950     1 2279504   4368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:07:23][351424287007980][261 ms][DEBUG] check_frida: running
[2025-08-21 09:07:23][351424287007980][261 ms][DEBUG] END   check_frida in 260 ms
[2025-08-21 09:07:23][351424287007980][261 ms][DEBUG] START check_scloud
[2025-08-21 09:07:23][351424287007980][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:07:23][351424287007980][559 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23634848 72024 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:07:23][351424287007980][559 ms][DEBUG] targetPkg: running
[2025-08-21 09:07:23][351424287007980][559 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:07:23][351424287007980][559 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:07:23][351424287007980][559 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDI0Mjg3MDA3OTgwIiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlQVDIwQTBSQ0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTQxIn0='" -e "main()" -q"
[2025-08-21 09:07:23][351424287007980][559 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:07:23][351424287007980][559 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDI0Mjg3MDA3OTgwIiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlQVDIwQTBSQ0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTQxIn0='" -e "main()" -q"
[2025-08-21 09:07:26][351424287007980][3229 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDI0Mjg3MDA3OTgwIiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlQVDIwQTBSQ0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTQxIn0="\r\n
[2025-08-21 09:07:28][351424287007980][5432 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0799570e-9c4d-4e53-a366-71fd647a5762","id":"QR_0799570e-9c4d-4e53-a366-71fd647a5762","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:07:28][351424287007980][5432 ms][DEBUG] proc_open done in 4873 ms; code=0; res.len=3152
[2025-08-21 09:07:28][351424287007980][5432 ms][DEBUG] END   runCmdUntilRes#1 in 4873 ms
[2025-08-21 09:07:28][351424287007980][5432 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:08:05][352938779332225][0 ms][INFO] === Request start ===
[2025-08-21 09:08:05][352938779332225][1 ms][DEBUG] START check_frida
[2025-08-21 09:08:05][352938779332225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:08:05][352938779332225][298 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:08:05][352938779332225][298 ms][DEBUG] check_frida: running
[2025-08-21 09:08:05][352938779332225][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 09:08:05][352938779332225][298 ms][DEBUG] START check_internet
[2025-08-21 09:08:05][352938779332225][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:08:06][352938779332225][595 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.294/204.294/204.294/0.000 ms\n
[2025-08-21 09:08:06][352938779332225][595 ms][DEBUG] check_internet: online
[2025-08-21 09:08:06][352938779332225][595 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 09:08:06][352938779332225][595 ms][DEBUG] START check_scloud
[2025-08-21 09:08:06][352938779332225][595 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:08:06][352938779332225][876 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23634880 71600 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:08:06][352938779332225][876 ms][DEBUG] targetPkg: running
[2025-08-21 09:08:06][352938779332225][876 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 09:08:06][352938779332225][876 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:08:06][352938779332225][876 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTM4Nzc5MzMyMjI1IiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJDMVcwTTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcxMyJ9'" -e "main()" -q"
[2025-08-21 09:08:06][352938779332225][876 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:08:06][352938779332225][876 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTM4Nzc5MzMyMjI1IiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJDMVcwTTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcxMyJ9'" -e "main()" -q"
[2025-08-21 09:08:09][352938779332225][3500 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTM4Nzc5MzMyMjI1IiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJDMVcwTTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcxMyJ9"\r\n
[2025-08-21 09:08:10][352938779332225][5422 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3319150-3672-4d01-9660-48ef8c1fac74","id":"QR_f3319150-3672-4d01-9660-48ef8c1fac74","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:08:10][352938779332225][5422 ms][DEBUG] proc_open done in 4546 ms; code=0; res.len=3152
[2025-08-21 09:08:10][352938779332225][5422 ms][DEBUG] END   runCmdUntilRes#1 in 4546 ms
[2025-08-21 09:08:10][352938779332225][5422 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:08:17][350013886019180][0 ms][INFO] === Request start ===
[2025-08-21 09:08:17][350013886019180][1 ms][DEBUG] START check_frida
[2025-08-21 09:08:17][350013886019180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:08:17][350013886019180][255 ms][DEBUG] SU: done in 254 ms; outroot         20950     1 2279504   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:08:17][350013886019180][256 ms][DEBUG] check_frida: running
[2025-08-21 09:08:17][350013886019180][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 09:08:17][350013886019180][256 ms][DEBUG] START check_internet
[2025-08-21 09:08:17][350013886019180][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:08:17][350013886019180][535 ms][DEBUG] SU: done in 279 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.240/190.240/190.240/0.000 ms\n
[2025-08-21 09:08:17][350013886019180][535 ms][DEBUG] check_internet: online
[2025-08-21 09:08:17][350013886019180][535 ms][DEBUG] END   check_internet in 279 ms
[2025-08-21 09:08:17][350013886019180][535 ms][DEBUG] START check_scloud
[2025-08-21 09:08:17][350013886019180][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:08:18][350013886019180][769 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23634912 71008 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:08:18][350013886019180][769 ms][DEBUG] targetPkg: running
[2025-08-21 09:08:18][350013886019180][769 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 09:08:18][350013886019180][769 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:08:18][350013886019180][769 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg2MDE5MTgwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcyMDhSUlRQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzU0NiJ9'" -e "main()" -q"
[2025-08-21 09:08:18][350013886019180][769 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:08:18][350013886019180][769 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg2MDE5MTgwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcyMDhSUlRQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzU0NiJ9'" -e "main()" -q"
[2025-08-21 09:08:20][350013886019180][3393 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODg2MDE5MTgwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcyMDhSUlRQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzU0NiJ9"\r\n
[2025-08-21 09:08:22][350013886019180][5643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76512e4f-dd75-41b8-a450-bf5e53af3d50","id":"QR_76512e4f-dd75-41b8-a450-bf5e53af3d50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:08:22][350013886019180][5643 ms][DEBUG] proc_open done in 4874 ms; code=0; res.len=3152
[2025-08-21 09:08:22][350013886019180][5643 ms][DEBUG] END   runCmdUntilRes#1 in 4874 ms
[2025-08-21 09:08:22][350013886019180][5644 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:10:10][351270414559264][1 ms][INFO] === Request start ===
[2025-08-21 09:10:10][351270414559264][2 ms][DEBUG] START check_frida
[2025-08-21 09:10:10][351270414559264][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:10:11][351270414559264][290 ms][DEBUG] SU: done in 289 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:10:11][351270414559264][290 ms][DEBUG] check_frida: running
[2025-08-21 09:10:11][351270414559264][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 09:10:11][351270414559264][290 ms][DEBUG] START check_internet
[2025-08-21 09:10:11][351270414559264][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:10:11][351270414559264][790 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.235/203.235/203.235/0.000 ms\n
[2025-08-21 09:10:11][351270414559264][791 ms][DEBUG] check_internet: online
[2025-08-21 09:10:11][351270414559264][791 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 09:10:11][351270414559264][791 ms][DEBUG] START check_scloud
[2025-08-21 09:10:11][351270414559264][791 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:10:12][351270414559264][1071 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23634944 71844 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:10:12][351270414559264][1071 ms][DEBUG] targetPkg: running
[2025-08-21 09:10:12][351270414559264][1071 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 09:10:12][351270414559264][1071 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:10:12][351270414559264][1071 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDE0NTU5MjY0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MTkyMldEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9'" -e "main()" -q"
[2025-08-21 09:10:12][351270414559264][1071 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:10:12][351270414559264][1071 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDE0NTU5MjY0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MTkyMldEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9'" -e "main()" -q"
[2025-08-21 09:10:14][351270414559264][3742 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcwNDE0NTU5MjY0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MTkyMldEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9"\r\n
[2025-08-21 09:10:17][351270414559264][6601 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb4a15f3-4b41-4a75-a01d-9888f0af8f0e","id":"QR_cb4a15f3-4b41-4a75-a01d-9888f0af8f0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:10:17][351270414559264][6601 ms][DEBUG] proc_open done in 5530 ms; code=0; res.len=3152
[2025-08-21 09:10:17][351270414559264][6601 ms][DEBUG] END   runCmdUntilRes#1 in 5530 ms
[2025-08-21 09:10:17][351270414559264][6601 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:10:25][357674438067598][0 ms][INFO] === Request start ===
[2025-08-21 09:10:25][357674438067598][1 ms][DEBUG] START check_frida
[2025-08-21 09:10:25][357674438067598][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:10:25][357674438067598][292 ms][DEBUG] SU: done in 291 ms; outroot         20950     1 2279504   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:10:25][357674438067598][292 ms][DEBUG] check_frida: running
[2025-08-21 09:10:25][357674438067598][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 09:10:25][357674438067598][292 ms][DEBUG] START check_internet
[2025-08-21 09:10:25][357674438067598][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:10:25][357674438067598][653 ms][DEBUG] SU: done in 361 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.513/251.513/251.513/0.000 ms\n
[2025-08-21 09:10:25][357674438067598][653 ms][DEBUG] check_internet: online
[2025-08-21 09:10:25][357674438067598][653 ms][DEBUG] END   check_internet in 361 ms
[2025-08-21 09:10:25][357674438067598][654 ms][DEBUG] START check_scloud
[2025-08-21 09:10:25][357674438067598][654 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:10:26][357674438067598][948 ms][DEBUG] SU: done in 295 ms; outu0_a118      20979 10674 23634976 72484 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:10:26][357674438067598][949 ms][DEBUG] targetPkg: running
[2025-08-21 09:10:26][357674438067598][949 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 09:10:26][357674438067598][949 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:10:26][357674438067598][949 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Njc0NDM4MDY3NTk4IiwibW9kZWwiOiJTTS1NMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMEZSMzVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIzNCJ9'" -e "main()" -q"
[2025-08-21 09:10:26][357674438067598][949 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:10:26][357674438067598][949 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Njc0NDM4MDY3NTk4IiwibW9kZWwiOiJTTS1NMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMEZSMzVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIzNCJ9'" -e "main()" -q"
[2025-08-21 09:10:28][357674438067598][3651 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Njc0NDM4MDY3NTk4IiwibW9kZWwiOiJTTS1NMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMEZSMzVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIzNCJ9"\r\n
[2025-08-21 09:10:30][357674438067598][5650 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_157acaf1-3d72-418e-862a-0a62dfb43002","id":"QR_157acaf1-3d72-418e-862a-0a62dfb43002","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:10:30][357674438067598][5650 ms][DEBUG] proc_open done in 4702 ms; code=0; res.len=3152
[2025-08-21 09:10:30][357674438067598][5650 ms][DEBUG] END   runCmdUntilRes#1 in 4702 ms
[2025-08-21 09:10:30][357674438067598][5650 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:11:07][358438730000270][0 ms][INFO] === Request start ===
[2025-08-21 09:11:07][358438730000270][1 ms][DEBUG] START check_frida
[2025-08-21 09:11:07][358438730000270][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:11:07][358438730000270][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:11:07][358438730000270][303 ms][DEBUG] check_frida: running
[2025-08-21 09:11:07][358438730000270][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 09:11:07][358438730000270][303 ms][DEBUG] START check_scloud
[2025-08-21 09:11:07][358438730000270][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:11:07][358438730000270][599 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23635008 71972 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:11:07][358438730000270][600 ms][DEBUG] targetPkg: running
[2025-08-21 09:11:07][358438730000270][600 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:11:07][358438730000270][600 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:11:07][358438730000270][600 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NDM4NzMwMDAwMjcwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMEdITDZBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3NiJ9'" -e "main()" -q"
[2025-08-21 09:11:07][358438730000270][600 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:11:07][358438730000270][600 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NDM4NzMwMDAwMjcwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMEdITDZBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3NiJ9'" -e "main()" -q"
[2025-08-21 09:11:10][358438730000270][3239 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NDM4NzMwMDAwMjcwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMEdITDZBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg3NiJ9"\r\n
[2025-08-21 09:11:12][358438730000270][5051 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b97b578e-df06-4add-8558-07bfebe95c18","id":"QR_b97b578e-df06-4add-8558-07bfebe95c18","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:11:12][358438730000270][5052 ms][DEBUG] proc_open done in 4451 ms; code=0; res.len=3152
[2025-08-21 09:11:12][358438730000270][5052 ms][DEBUG] END   runCmdUntilRes#1 in 4452 ms
[2025-08-21 09:11:12][358438730000270][5052 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:12:20][355857119085656][0 ms][INFO] === Request start ===
[2025-08-21 09:12:20][355857119085656][0 ms][DEBUG] START check_frida
[2025-08-21 09:12:20][355857119085656][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:12:21][355857119085656][303 ms][DEBUG] SU: done in 303 ms; outroot         20950     1 2263084   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:12:21][355857119085656][303 ms][DEBUG] check_frida: running
[2025-08-21 09:12:21][355857119085656][303 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 09:12:21][355857119085656][303 ms][DEBUG] START check_internet
[2025-08-21 09:12:21][355857119085656][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:12:21][355857119085656][616 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.893/222.893/222.893/0.000 ms\n
[2025-08-21 09:12:21][355857119085656][616 ms][DEBUG] check_internet: online
[2025-08-21 09:12:21][355857119085656][616 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 09:12:21][355857119085656][616 ms][DEBUG] START check_scloud
[2025-08-21 09:12:21][355857119085656][616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:12:21][355857119085656][897 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23635040 72364 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:12:21][355857119085656][897 ms][DEBUG] targetPkg: running
[2025-08-21 09:12:21][355857119085656][897 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 09:12:21][355857119085656][897 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:12:21][355857119085656][897 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU3MTE5MDg1NjU2IiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1JDMEVSVktWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY5MiJ9'" -e "main()" -q"
[2025-08-21 09:12:21][355857119085656][897 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:12:21][355857119085656][897 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU3MTE5MDg1NjU2IiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1JDMEVSVktWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY5MiJ9'" -e "main()" -q"
[2025-08-21 09:12:24][355857119085656][3553 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODU3MTE5MDg1NjU2IiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1JDMEVSVktWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY5MiJ9"\r\n
[2025-08-21 09:12:26][355857119085656][5911 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa481ee6-97ce-4dba-823d-615934c1387c","id":"QR_aa481ee6-97ce-4dba-823d-615934c1387c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:12:26][355857119085656][5911 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 09:12:26][355857119085656][5912 ms][DEBUG] END   runCmdUntilRes#1 in 5014 ms
[2025-08-21 09:12:26][355857119085656][5912 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:15:08][350281372873002][1 ms][INFO] === Request start ===
[2025-08-21 09:15:08][350281372873002][1 ms][DEBUG] START check_frida
[2025-08-21 09:15:08][350281372873002][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:15:09][350281372873002][292 ms][DEBUG] SU: done in 291 ms; outroot         20950     1 2263084   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:15:09][350281372873002][292 ms][DEBUG] check_frida: running
[2025-08-21 09:15:09][350281372873002][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 09:15:09][350281372873002][292 ms][DEBUG] START check_scloud
[2025-08-21 09:15:09][350281372873002][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:15:09][350281372873002][587 ms][DEBUG] SU: done in 295 ms; outu0_a118      20979 10674 23635072 71780 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:15:09][350281372873002][587 ms][DEBUG] targetPkg: running
[2025-08-21 09:15:09][350281372873002][587 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 09:15:09][350281372873002][587 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:15:09][350281372873002][587 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjgxMzcyODczMDAyIiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFIzN1EyRFpWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI1NiJ9'" -e "main()" -q"
[2025-08-21 09:15:09][350281372873002][587 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:15:09][350281372873002][587 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjgxMzcyODczMDAyIiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFIzN1EyRFpWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI1NiJ9'" -e "main()" -q"
[2025-08-21 09:15:12][350281372873002][3227 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjgxMzcyODczMDAyIiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFIzN1EyRFpWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI1NiJ9"\r\n
[2025-08-21 09:15:14][350281372873002][5570 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb549d49-0226-4943-b0ab-a1780a8cef4f","id":"QR_cb549d49-0226-4943-b0ab-a1780a8cef4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:15:14][350281372873002][5571 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 09:15:14][350281372873002][5571 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 09:15:14][350281372873002][5571 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:17:08][350287314850891][0 ms][INFO] === Request start ===
[2025-08-21 09:17:08][350287314850891][1 ms][DEBUG] START check_frida
[2025-08-21 09:17:08][350287314850891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:17:08][350287314850891][296 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:17:08][350287314850891][296 ms][DEBUG] check_frida: running
[2025-08-21 09:17:08][350287314850891][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 09:17:08][350287314850891][296 ms][DEBUG] START check_scloud
[2025-08-21 09:17:08][350287314850891][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:17:09][350287314850891][593 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23635104 71232 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:17:09][350287314850891][593 ms][DEBUG] targetPkg: running
[2025-08-21 09:17:09][350287314850891][593 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 09:17:09][350287314850891][593 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:17:09][350287314850891][593 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE0ODUwODkxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME5HMDVKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQwNCJ9'" -e "main()" -q"
[2025-08-21 09:17:09][350287314850891][593 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:17:09][350287314850891][593 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE0ODUwODkxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME5HMDVKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQwNCJ9'" -e "main()" -q"
[2025-08-21 09:17:11][350287314850891][3264 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjg3MzE0ODUwODkxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME5HMDVKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQwNCJ9"\r\n
[2025-08-21 09:17:14][350287314850891][5685 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84d30603-02fe-4803-b582-af5f17492936","id":"QR_84d30603-02fe-4803-b582-af5f17492936","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:17:14][350287314850891][5686 ms][DEBUG] proc_open done in 5093 ms; code=0; res.len=3152
[2025-08-21 09:17:14][350287314850891][5686 ms][DEBUG] END   runCmdUntilRes#1 in 5093 ms
[2025-08-21 09:17:14][350287314850891][5686 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:19:09][355001763565107][1 ms][INFO] === Request start ===
[2025-08-21 09:19:09][355001763565107][2 ms][DEBUG] START check_frida
[2025-08-21 09:19:09][355001763565107][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:19:09][355001763565107][290 ms][DEBUG] SU: done in 288 ms; outroot         20950     1 2263084   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:19:09][355001763565107][290 ms][DEBUG] check_frida: running
[2025-08-21 09:19:09][355001763565107][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 09:19:09][355001763565107][290 ms][DEBUG] START check_scloud
[2025-08-21 09:19:09][355001763565107][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:19:09][355001763565107][587 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23635136 72052 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:19:09][355001763565107][587 ms][DEBUG] targetPkg: running
[2025-08-21 09:19:09][355001763565107][587 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:19:09][355001763565107][587 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:19:09][355001763565107][587 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDAxNzYzNTY1MTA3IiwibW9kZWwiOiJTTS1GNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1JBME1UUUdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ3NSJ9'" -e "main()" -q"
[2025-08-21 09:19:09][355001763565107][587 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:19:09][355001763565107][587 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDAxNzYzNTY1MTA3IiwibW9kZWwiOiJTTS1GNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1JBME1UUUdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ3NSJ9'" -e "main()" -q"
[2025-08-21 09:19:12][355001763565107][3321 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDAxNzYzNTY1MTA3IiwibW9kZWwiOiJTTS1GNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1JBME1UUUdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ3NSJ9"\r\n
[2025-08-21 09:19:14][355001763565107][5492 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61eadd7a-daff-410e-bfe0-b90d88c2945a","id":"QR_61eadd7a-daff-410e-bfe0-b90d88c2945a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:19:14][355001763565107][5492 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 09:19:14][355001763565107][5492 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 09:19:14][355001763565107][5492 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:20:15][357633720168373][0 ms][INFO] === Request start ===
[2025-08-21 09:20:15][357633720168373][1 ms][DEBUG] START check_frida
[2025-08-21 09:20:15][357633720168373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:20:15][357633720168373][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:20:15][357633720168373][303 ms][DEBUG] check_frida: running
[2025-08-21 09:20:15][357633720168373][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 09:20:15][357633720168373][303 ms][DEBUG] START check_internet
[2025-08-21 09:20:15][357633720168373][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:20:16][357633720168373][709 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.367/201.367/201.367/0.000 ms\n
[2025-08-21 09:20:16][357633720168373][709 ms][DEBUG] check_internet: online
[2025-08-21 09:20:16][357633720168373][710 ms][DEBUG] END   check_internet in 406 ms
[2025-08-21 09:20:16][357633720168373][710 ms][DEBUG] START check_scloud
[2025-08-21 09:20:16][357633720168373][710 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:20:16][357633720168373][944 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23635168 71220 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:20:16][357633720168373][944 ms][DEBUG] targetPkg: running
[2025-08-21 09:20:16][357633720168373][944 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 09:20:16][357633720168373][944 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:20:16][357633720168373][944 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjMzNzIwMTY4MzczIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyUjkwN1RTSkQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlhUQyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MDQ1In0='" -e "main()" -q"
[2025-08-21 09:20:16][357633720168373][944 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:20:16][357633720168373][944 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjMzNzIwMTY4MzczIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyUjkwN1RTSkQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlhUQyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MDQ1In0='" -e "main()" -q"
[2025-08-21 09:20:19][357633720168373][3646 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjMzNzIwMTY4MzczIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyUjkwN1RTSkQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlhUQyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MDQ1In0="\r\n
[2025-08-21 09:20:21][357633720168373][5864 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e6f4f13-c8a2-44c2-a2c9-1110acd74dbb","id":"QR_4e6f4f13-c8a2-44c2-a2c9-1110acd74dbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:20:21][357633720168373][5864 ms][DEBUG] proc_open done in 4920 ms; code=0; res.len=3152
[2025-08-21 09:20:21][357633720168373][5864 ms][DEBUG] END   runCmdUntilRes#1 in 4920 ms
[2025-08-21 09:20:21][357633720168373][5864 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:20:29][351199551188415][1 ms][INFO] === Request start ===
[2025-08-21 09:20:29][351199551188415][1 ms][DEBUG] START check_frida
[2025-08-21 09:20:29][351199551188415][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:20:29][351199551188415][290 ms][DEBUG] SU: done in 288 ms; outroot         20950     1 2279504   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:20:29][351199551188415][290 ms][DEBUG] check_frida: running
[2025-08-21 09:20:29][351199551188415][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 09:20:29][351199551188415][290 ms][DEBUG] START check_internet
[2025-08-21 09:20:29][351199551188415][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:20:29][351199551188415][649 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.506/254.506/254.506/0.000 ms\n
[2025-08-21 09:20:29][351199551188415][649 ms][DEBUG] check_internet: online
[2025-08-21 09:20:29][351199551188415][649 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 09:20:29][351199551188415][649 ms][DEBUG] START check_scloud
[2025-08-21 09:20:29][351199551188415][649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:20:30][351199551188415][930 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23635200 71788 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:20:30][351199551188415][930 ms][DEBUG] targetPkg: running
[2025-08-21 09:20:30][351199551188415][930 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 09:20:30][351199551188415][930 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:20:30][351199551188415][930 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTk5NTUxMTg4NDE1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MEFCUDVUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxMCJ9'" -e "main()" -q"
[2025-08-21 09:20:30][351199551188415][930 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:20:30][351199551188415][930 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTk5NTUxMTg4NDE1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MEFCUDVUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxMCJ9'" -e "main()" -q"
[2025-08-21 09:20:32][351199551188415][3554 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTk5NTUxMTg4NDE1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MEFCUDVUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxMCJ9"\r\n
[2025-08-21 09:20:34][351199551188415][5413 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b08db911-fd06-4221-bdea-d3c6dc8235c3","id":"QR_b08db911-fd06-4221-bdea-d3c6dc8235c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:20:34][351199551188415][5414 ms][DEBUG] proc_open done in 4484 ms; code=0; res.len=3152
[2025-08-21 09:20:34][351199551188415][5414 ms][DEBUG] END   runCmdUntilRes#1 in 4484 ms
[2025-08-21 09:20:34][351199551188415][5414 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:21:12][350987615393216][0 ms][INFO] === Request start ===
[2025-08-21 09:21:12][350987615393216][1 ms][DEBUG] START check_frida
[2025-08-21 09:21:12][350987615393216][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:21:12][350987615393216][296 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2263084   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:21:12][350987615393216][296 ms][DEBUG] check_frida: running
[2025-08-21 09:21:12][350987615393216][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 09:21:12][350987615393216][296 ms][DEBUG] START check_scloud
[2025-08-21 09:21:12][350987615393216][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:21:12][350987615393216][609 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23635232 71208 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:21:12][350987615393216][609 ms][DEBUG] targetPkg: running
[2025-08-21 09:21:12][350987615393216][609 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 09:21:12][350987615393216][609 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:21:12][350987615393216][609 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjE1MzkzMjE2IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MUZDU0pEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjkzOCJ9'" -e "main()" -q"
[2025-08-21 09:21:12][350987615393216][609 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:21:12][350987615393216][609 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjE1MzkzMjE2IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MUZDU0pEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjkzOCJ9'" -e "main()" -q"
[2025-08-21 09:21:15][350987615393216][3279 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTg3NjE1MzkzMjE2IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MUZDU0pEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjkzOCJ9"\r\n
[2025-08-21 09:21:17][350987615393216][5232 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48bd5d21-b36a-4009-8831-993e67378673","id":"QR_48bd5d21-b36a-4009-8831-993e67378673","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:21:17][350987615393216][5233 ms][DEBUG] proc_open done in 4624 ms; code=0; res.len=3152
[2025-08-21 09:21:17][350987615393216][5233 ms][DEBUG] END   runCmdUntilRes#1 in 4624 ms
[2025-08-21 09:21:17][350987615393216][5233 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:22:12][356608130116163][1 ms][INFO] === Request start ===
[2025-08-21 09:22:12][356608130116163][2 ms][DEBUG] START check_frida
[2025-08-21 09:22:12][356608130116163][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:22:12][356608130116163][296 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:22:12][356608130116163][296 ms][DEBUG] check_frida: running
[2025-08-21 09:22:12][356608130116163][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 09:22:12][356608130116163][296 ms][DEBUG] START check_internet
[2025-08-21 09:22:12][356608130116163][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:22:12][356608130116163][576 ms][DEBUG] SU: done in 279 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=183 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 183.439/183.439/183.439/0.000 ms\n
[2025-08-21 09:22:12][356608130116163][576 ms][DEBUG] check_internet: online
[2025-08-21 09:22:12][356608130116163][576 ms][DEBUG] END   check_internet in 279 ms
[2025-08-21 09:22:12][356608130116163][576 ms][DEBUG] START check_scloud
[2025-08-21 09:22:12][356608130116163][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:22:13][356608130116163][872 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23635264 71716 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:22:13][356608130116163][872 ms][DEBUG] targetPkg: running
[2025-08-21 09:22:13][356608130116163][872 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 09:22:13][356608130116163][872 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:22:13][356608130116163][872 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjA4MTMwMTE2MTYzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBME00Sk5BIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI2OCJ9'" -e "main()" -q"
[2025-08-21 09:22:13][356608130116163][872 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:22:13][356608130116163][872 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjA4MTMwMTE2MTYzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBME00Sk5BIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI2OCJ9'" -e "main()" -q"
[2025-08-21 09:22:15][356608130116163][3543 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NjA4MTMwMTE2MTYzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBME00Sk5BIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI2OCJ9"\r\n
[2025-08-21 09:22:18][356608130116163][5777 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab760235-0b07-495e-9a7e-8faff0ca78c2","id":"QR_ab760235-0b07-495e-9a7e-8faff0ca78c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:22:18][356608130116163][5778 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 09:22:18][356608130116163][5778 ms][DEBUG] END   runCmdUntilRes#1 in 4906 ms
[2025-08-21 09:22:18][356608130116163][5778 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:22:25][351240640422124][0 ms][INFO] === Request start ===
[2025-08-21 09:22:25][351240640422124][1 ms][DEBUG] START check_frida
[2025-08-21 09:22:25][351240640422124][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:22:25][351240640422124][292 ms][DEBUG] SU: done in 291 ms; outroot         20950     1 2279504   4380 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:22:25][351240640422124][292 ms][DEBUG] check_frida: running
[2025-08-21 09:22:25][351240640422124][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 09:22:25][351240640422124][292 ms][DEBUG] START check_internet
[2025-08-21 09:22:25][351240640422124][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:22:26][351240640422124][651 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.176/245.176/245.176/0.000 ms\n
[2025-08-21 09:22:26][351240640422124][652 ms][DEBUG] check_internet: online
[2025-08-21 09:22:26][351240640422124][652 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 09:22:26][351240640422124][652 ms][DEBUG] START check_scloud
[2025-08-21 09:22:26][351240640422124][652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:22:26][351240640422124][886 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23635296 72292 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:22:26][351240640422124][886 ms][DEBUG] targetPkg: running
[2025-08-21 09:22:26][351240640422124][886 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 09:22:26][351240640422124][886 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:22:26][351240640422124][886 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQwNDIyMTI0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MEYwN0hYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg1OSJ9'" -e "main()" -q"
[2025-08-21 09:22:26][351240640422124][886 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:22:26][351240640422124][886 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQwNDIyMTI0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MEYwN0hYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg1OSJ9'" -e "main()" -q"
[2025-08-21 09:22:29][351240640422124][3557 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQwNDIyMTI0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MEYwN0hYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg1OSJ9"\r\n
[2025-08-21 09:22:31][351240640422124][5728 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_838d6253-aeee-450a-8785-1be150a57e18","id":"QR_838d6253-aeee-450a-8785-1be150a57e18","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:22:31][351240640422124][5728 ms][DEBUG] proc_open done in 4843 ms; code=0; res.len=3152
[2025-08-21 09:22:31][351240640422124][5728 ms][DEBUG] END   runCmdUntilRes#1 in 4843 ms
[2025-08-21 09:22:31][351240640422124][5728 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:23:10][356414816499720][1 ms][INFO] === Request start ===
[2025-08-21 09:23:10][356414816499720][2 ms][DEBUG] START check_frida
[2025-08-21 09:23:10][356414816499720][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:23:10][356414816499720][299 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:23:10][356414816499720][299 ms][DEBUG] check_frida: running
[2025-08-21 09:23:10][356414816499720][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 09:23:10][356414816499720][299 ms][DEBUG] START check_scloud
[2025-08-21 09:23:10][356414816499720][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:23:10][356414816499720][611 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23635328 71868 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:23:10][356414816499720][611 ms][DEBUG] targetPkg: running
[2025-08-21 09:23:10][356414816499720][611 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 09:23:10][356414816499720][611 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:23:10][356414816499720][611 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE2NDk5NzIwIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMEZTVDNKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ4NSJ9'" -e "main()" -q"
[2025-08-21 09:23:10][356414816499720][611 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:23:10][356414816499720][611 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE2NDk5NzIwIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMEZTVDNKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ4NSJ9'" -e "main()" -q"
[2025-08-21 09:23:13][356414816499720][3236 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE0ODE2NDk5NzIwIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMEZTVDNKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ4NSJ9"\r\n
[2025-08-21 09:23:15][356414816499720][5251 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ec47a8a-54d9-411d-95f8-87466a0a5bcc","id":"QR_4ec47a8a-54d9-411d-95f8-87466a0a5bcc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:23:15][356414816499720][5251 ms][DEBUG] proc_open done in 4640 ms; code=0; res.len=3152
[2025-08-21 09:23:15][356414816499720][5251 ms][DEBUG] END   runCmdUntilRes#1 in 4640 ms
[2025-08-21 09:23:15][356414816499720][5251 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:25:13][357435847862643][1 ms][INFO] === Request start ===
[2025-08-21 09:25:13][357435847862643][1 ms][DEBUG] START check_frida
[2025-08-21 09:25:13][357435847862643][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:25:13][357435847862643][303 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2263084   4364 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:25:13][357435847862643][303 ms][DEBUG] check_frida: running
[2025-08-21 09:25:13][357435847862643][303 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 09:25:13][357435847862643][303 ms][DEBUG] START check_scloud
[2025-08-21 09:25:13][357435847862643][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:25:13][357435847862643][584 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23635360 71692 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:25:13][357435847862643][584 ms][DEBUG] targetPkg: running
[2025-08-21 09:25:13][357435847862643][584 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 09:25:13][357435847862643][584 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:25:13][357435847862643][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ3ODYyNjQzIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hDMkFQR0pIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE2MyJ9'" -e "main()" -q"
[2025-08-21 09:25:13][357435847862643][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:25:13][357435847862643][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ3ODYyNjQzIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hDMkFQR0pIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE2MyJ9'" -e "main()" -q"
[2025-08-21 09:25:16][357435847862643][3224 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDM1ODQ3ODYyNjQzIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hDMkFQR0pIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE2MyJ9"\r\n
[2025-08-21 09:25:18][357435847862643][5661 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77dd58fa-27f0-4455-875b-f9ff0332764f","id":"QR_77dd58fa-27f0-4455-875b-f9ff0332764f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:25:18][357435847862643][5661 ms][DEBUG] proc_open done in 5077 ms; code=0; res.len=3152
[2025-08-21 09:25:18][357435847862643][5661 ms][DEBUG] END   runCmdUntilRes#1 in 5077 ms
[2025-08-21 09:25:18][357435847862643][5661 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:25:27][352749384473977][0 ms][INFO] === Request start ===
[2025-08-21 09:25:27][352749384473977][1 ms][DEBUG] START check_frida
[2025-08-21 09:25:27][352749384473977][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:25:28][352749384473977][310 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2279504   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:25:28][352749384473977][310 ms][DEBUG] check_frida: running
[2025-08-21 09:25:28][352749384473977][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 09:25:28][352749384473977][310 ms][DEBUG] START check_scloud
[2025-08-21 09:25:28][352749384473977][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:25:28][352749384473977][606 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23635392 72276 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:25:28][352749384473977][606 ms][DEBUG] targetPkg: running
[2025-08-21 09:25:28][352749384473977][606 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 09:25:28][352749384473977][606 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:25:28][352749384473977][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzQ5Mzg0NDczOTc3IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MDVGRjJEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzgzIn0='" -e "main()" -q"
[2025-08-21 09:25:28][352749384473977][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:25:28][352749384473977][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzQ5Mzg0NDczOTc3IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MDVGRjJEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzgzIn0='" -e "main()" -q"
[2025-08-21 09:25:31][352749384473977][3231 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzQ5Mzg0NDczOTc3IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MDVGRjJEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzgzIn0="\r\n
[2025-08-21 09:25:35][352749384473977][7901 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e7df93e-4ddb-4bb2-ace6-182191f98d88","id":"QR_5e7df93e-4ddb-4bb2-ace6-182191f98d88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:25:35][352749384473977][7901 ms][DEBUG] proc_open done in 7295 ms; code=0; res.len=3152
[2025-08-21 09:25:35][352749384473977][7901 ms][DEBUG] END   runCmdUntilRes#1 in 7295 ms
[2025-08-21 09:25:35][352749384473977][7901 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:26:10][351692590446133][1 ms][INFO] === Request start ===
[2025-08-21 09:26:10][351692590446133][2 ms][DEBUG] START check_frida
[2025-08-21 09:26:10][351692590446133][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:26:10][351692590446133][258 ms][DEBUG] SU: done in 256 ms; outroot         20950     1 2263084   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:26:10][351692590446133][258 ms][DEBUG] check_frida: running
[2025-08-21 09:26:10][351692590446133][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 09:26:10][351692590446133][258 ms][DEBUG] START check_internet
[2025-08-21 09:26:10][351692590446133][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:26:10][351692590446133][664 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.962/200.962/200.962/0.000 ms\n
[2025-08-21 09:26:10][351692590446133][665 ms][DEBUG] check_internet: online
[2025-08-21 09:26:10][351692590446133][665 ms][DEBUG] END   check_internet in 406 ms
[2025-08-21 09:26:10][351692590446133][665 ms][DEBUG] START check_scloud
[2025-08-21 09:26:10][351692590446133][665 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:26:11][351692590446133][946 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23635424 71508 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:26:11][351692590446133][946 ms][DEBUG] targetPkg: running
[2025-08-21 09:26:11][351692590446133][946 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 09:26:11][351692590446133][946 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:26:11][351692590446133][946 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjkyNTkwNDQ2MTMzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MEpHTEJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE4MyJ9'" -e "main()" -q"
[2025-08-21 09:26:11][351692590446133][946 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:26:11][351692590446133][946 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjkyNTkwNDQ2MTMzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MEpHTEJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE4MyJ9'" -e "main()" -q"
[2025-08-21 09:26:13][351692590446133][3585 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjkyNTkwNDQ2MTMzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MEpHTEJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE4MyJ9"\r\n
[2025-08-21 09:26:15][351692590446133][5866 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1dc8e085-7605-42f4-b3d2-48318275e625","id":"QR_1dc8e085-7605-42f4-b3d2-48318275e625","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:26:15][351692590446133][5866 ms][DEBUG] proc_open done in 4920 ms; code=0; res.len=3152
[2025-08-21 09:26:15][351692590446133][5866 ms][DEBUG] END   runCmdUntilRes#1 in 4920 ms
[2025-08-21 09:26:15][351692590446133][5866 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:29:07][351877475024747][1 ms][INFO] === Request start ===
[2025-08-21 09:29:07][351877475024747][2 ms][DEBUG] START check_frida
[2025-08-21 09:29:07][351877475024747][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:29:08][351877475024747][298 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4372 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:29:08][351877475024747][298 ms][DEBUG] check_frida: running
[2025-08-21 09:29:08][351877475024747][299 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 09:29:08][351877475024747][299 ms][DEBUG] START check_scloud
[2025-08-21 09:29:08][351877475024747][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:29:08][351877475024747][517 ms][DEBUG] SU: done in 218 ms; outu0_a118      20979 10674 23635456 72024 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:29:08][351877475024747][517 ms][DEBUG] targetPkg: running
[2025-08-21 09:29:08][351877475024747][517 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 09:29:08][351877475024747][517 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:29:08][351877475024747][517 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc1MDI0NzQ3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MTJNWEhaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzE2NiJ9'" -e "main()" -q"
[2025-08-21 09:29:08][351877475024747][518 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:29:08][351877475024747][518 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc1MDI0NzQ3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MTJNWEhaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzE2NiJ9'" -e "main()" -q"
[2025-08-21 09:29:11][351877475024747][3188 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDc1MDI0NzQ3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MTJNWEhaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzE2NiJ9"\r\n
[2025-08-21 09:29:13][351877475024747][5531 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0480f173-8b0b-4e16-a437-939f3e091ee8","id":"QR_0480f173-8b0b-4e16-a437-939f3e091ee8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:29:13][351877475024747][5532 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 09:29:13][351877475024747][5532 ms][DEBUG] END   runCmdUntilRes#1 in 5014 ms
[2025-08-21 09:29:13][351877475024747][5532 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:30:08][354916443613954][1 ms][INFO] === Request start ===
[2025-08-21 09:30:08][354916443613954][2 ms][DEBUG] START check_frida
[2025-08-21 09:30:08][354916443613954][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:30:08][354916443613954][296 ms][DEBUG] SU: done in 294 ms; outroot         20950     1 2263084   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:30:08][354916443613954][296 ms][DEBUG] check_frida: running
[2025-08-21 09:30:08][354916443613954][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 09:30:08][354916443613954][296 ms][DEBUG] START check_internet
[2025-08-21 09:30:08][354916443613954][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:30:09][354916443613954][827 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.612/201.612/201.612/0.000 ms\n
[2025-08-21 09:30:09][354916443613954][827 ms][DEBUG] check_internet: online
[2025-08-21 09:30:09][354916443613954][827 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 09:30:09][354916443613954][827 ms][DEBUG] START check_scloud
[2025-08-21 09:30:09][354916443613954][827 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:30:09][354916443613954][1093 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23635488 71908 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:30:09][354916443613954][1093 ms][DEBUG] targetPkg: running
[2025-08-21 09:30:09][354916443613954][1093 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 09:30:09][354916443613954][1093 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:30:09][354916443613954][1093 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQzNjEzOTU0IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc0MFhIWTlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA0MCJ9'" -e "main()" -q"
[2025-08-21 09:30:09][354916443613954][1093 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:30:09][354916443613954][1093 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQzNjEzOTU0IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc0MFhIWTlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA0MCJ9'" -e "main()" -q"
[2025-08-21 09:30:12][354916443613954][3748 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTE2NDQzNjEzOTU0IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc0MFhIWTlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA0MCJ9"\r\n
[2025-08-21 09:30:14][354916443613954][5795 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c28b0a20-e91e-4475-b603-9704e435b879","id":"QR_c28b0a20-e91e-4475-b603-9704e435b879","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:30:14][354916443613954][5795 ms][DEBUG] proc_open done in 4702 ms; code=0; res.len=3152
[2025-08-21 09:30:14][354916443613954][5795 ms][DEBUG] END   runCmdUntilRes#1 in 4702 ms
[2025-08-21 09:30:14][354916443613954][5795 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:31:09][358577107277019][1 ms][INFO] === Request start ===
[2025-08-21 09:31:09][358577107277019][2 ms][DEBUG] START check_frida
[2025-08-21 09:31:09][358577107277019][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:31:09][358577107277019][296 ms][DEBUG] SU: done in 294 ms; outroot         20950     1 2263084   4380 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:31:09][358577107277019][296 ms][DEBUG] check_frida: running
[2025-08-21 09:31:09][358577107277019][296 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 09:31:09][358577107277019][296 ms][DEBUG] START check_scloud
[2025-08-21 09:31:09][358577107277019][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:31:09][358577107277019][593 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23635520 72388 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:31:09][358577107277019][593 ms][DEBUG] targetPkg: running
[2025-08-21 09:31:09][358577107277019][593 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:31:09][358577107277019][593 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:31:09][358577107277019][593 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTc3MTA3Mjc3MDE5IiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE05Mk1YQkNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTRVIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzY2OCJ9'" -e "main()" -q"
[2025-08-21 09:31:09][358577107277019][593 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:31:09][358577107277019][593 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTc3MTA3Mjc3MDE5IiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE05Mk1YQkNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTRVIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzY2OCJ9'" -e "main()" -q"
[2025-08-21 09:31:12][358577107277019][3248 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NTc3MTA3Mjc3MDE5IiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE05Mk1YQkNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTRVIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzY2OCJ9"\r\n
[2025-08-21 09:31:14][358577107277019][5607 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4fd6e844-3bbb-44ae-ae21-a805d124fdcc","id":"QR_4fd6e844-3bbb-44ae-ae21-a805d124fdcc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:31:14][358577107277019][5607 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 09:31:14][358577107277019][5607 ms][DEBUG] END   runCmdUntilRes#1 in 5014 ms
[2025-08-21 09:31:14][358577107277019][5607 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:32:07][350013885014893][0 ms][INFO] === Request start ===
[2025-08-21 09:32:07][350013885014893][1 ms][DEBUG] START check_frida
[2025-08-21 09:32:07][350013885014893][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:32:07][350013885014893][299 ms][DEBUG] SU: done in 298 ms; outroot         20950     1 2278492   4344 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:32:07][350013885014893][299 ms][DEBUG] check_frida: running
[2025-08-21 09:32:07][350013885014893][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 09:32:07][350013885014893][299 ms][DEBUG] START check_internet
[2025-08-21 09:32:07][350013885014893][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:32:08][351771922472445][0 ms][INFO] === Request start ===
[2025-08-21 09:32:18][350013885014893][10406 ms][DEBUG] SU: done in 10107 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, 100% packet loss, time 0ms\n\n
[2025-08-21 09:32:18][350013885014893][10406 ms][WARN] check_internet: offline
[2025-08-21 09:32:18][350013885014893][10406 ms][DEBUG] END   check_internet in 10107 ms
[2025-08-21 09:32:18][351771922472445][10154 ms][DEBUG] START check_frida
[2025-08-21 09:32:18][351771922472445][10154 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:32:18][351771922472445][10451 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2262072   4348 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:32:18][351771922472445][10451 ms][DEBUG] check_frida: running
[2025-08-21 09:32:18][351771922472445][10451 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 09:32:18][351771922472445][10451 ms][DEBUG] START check_internet
[2025-08-21 09:32:18][351771922472445][10451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:32:18][351771922472445][10794 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.774/243.774/243.774/0.000 ms\n
[2025-08-21 09:32:18][351771922472445][10794 ms][DEBUG] check_internet: online
[2025-08-21 09:32:18][351771922472445][10794 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 09:32:18][351771922472445][10794 ms][DEBUG] START check_scloud
[2025-08-21 09:32:18][351771922472445][10794 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:32:19][351771922472445][11060 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23635552 71424 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:32:19][351771922472445][11060 ms][DEBUG] targetPkg: running
[2025-08-21 09:32:19][351771922472445][11060 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 09:32:19][351771922472445][11060 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:32:19][351771922472445][11060 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTIyNDcyNDQ1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBME1RQU1ZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMzNyJ9'" -e "main()" -q"
[2025-08-21 09:32:19][351771922472445][11060 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:32:19][351771922472445][11060 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTIyNDcyNDQ1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBME1RQU1ZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMzNyJ9'" -e "main()" -q"
[2025-08-21 09:32:20][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 09:32:20][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 09:32:20][][40 ms][DEBUG] ADB: done in 39 ms; out
[2025-08-21 09:32:20][][40 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 09:32:20][][103 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 09:32:20][][103 ms][DEBUG] END   check_boot_completed in 103 ms
[2025-08-21 09:32:20][350013885014893][103 ms][INFO] === Request start ===
[2025-08-21 09:32:20][350013885014893][104 ms][DEBUG] START check_frida
[2025-08-21 09:32:20][350013885014893][104 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:32:20][350013885014893][415 ms][DEBUG] SU: done in 311 ms; outroot         20950     1 2262072   4348 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:32:20][350013885014893][416 ms][DEBUG] check_frida: running
[2025-08-21 09:32:20][350013885014893][416 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 09:32:20][350013885014893][416 ms][DEBUG] START check_internet
[2025-08-21 09:32:20][350013885014893][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:32:20][350013885014893][775 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.773/250.773/250.773/0.000 ms\n
[2025-08-21 09:32:20][350013885014893][775 ms][DEBUG] check_internet: online
[2025-08-21 09:32:20][350013885014893][775 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 09:32:20][350013885014893][775 ms][DEBUG] START check_scloud
[2025-08-21 09:32:20][350013885014893][775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:32:21][350013885014893][1024 ms][DEBUG] SU: done in 249 ms; out
[2025-08-21 09:32:21][350013885014893][1024 ms][WARN] targetPkg: not running, restarting
[2025-08-21 09:32:21][350013885014893][1024 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 09:32:21][350013885014893][1165 ms][DEBUG] SU: done in 141 ms; out
[2025-08-21 09:32:21][350013885014893][1165 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 09:32:21][351771922472445][13153 ms][DEBUG] frida res:Failed to attach: process not found\r\n
[2025-08-21 09:32:21][351771922472445][13309 ms][DEBUG] proc_open done in 2249 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 09:32:21][351771922472445][13309 ms][DEBUG] END   runCmdUntilRes#1 in 2249 ms
[2025-08-21 09:32:21][351771922472445][13309 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 09:32:21][350013885014893][1431 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 09:32:23][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 09:32:23][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 09:32:23][][47 ms][DEBUG] ADB: done in 47 ms; out
[2025-08-21 09:32:23][][48 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 09:32:23][][110 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 09:32:23][][110 ms][DEBUG] END   check_boot_completed in 110 ms
[2025-08-21 09:32:23][351771922472445][110 ms][INFO] === Request start ===
[2025-08-21 09:32:23][350013885014893][3446 ms][DEBUG] END   check_scloud in 2671 ms
[2025-08-21 09:32:23][350013885014893][3446 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:32:23][350013885014893][3446 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzYwMCJ9'" -e "main()" -q"
[2025-08-21 09:32:23][350013885014893][3446 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:32:23][350013885014893][3446 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzYwMCJ9'" -e "main()" -q"
[2025-08-21 09:32:43][][0 ms][INFO] === Request start ===
[2025-08-21 09:32:43][][1 ms][DEBUG] START check_frida
[2025-08-21 09:32:43][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:32:43][][272 ms][DEBUG] SU: done in 271 ms; out
[2025-08-21 09:32:43][][272 ms][WARN] check_frida: not running, restarting
[2025-08-21 09:32:43][][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 09:32:43][][397 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 09:32:43][][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 09:32:43][][507 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 09:32:45][][2522 ms][DEBUG] END   check_frida in 2521 ms
[2025-08-21 09:32:45][][2522 ms][DEBUG] START check_internet
[2025-08-21 09:32:45][][2522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:32:46][][2850 ms][DEBUG] SU: done in 328 ms; out
[2025-08-21 09:32:46][][2850 ms][WARN] check_internet: offline
[2025-08-21 09:32:46][][2850 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 09:32:47][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 09:32:47][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 09:32:47][][40 ms][DEBUG] ADB: done in 40 ms; out
[2025-08-21 09:32:47][][40 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 09:32:48][][103 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 09:32:48][][103 ms][DEBUG] END   check_boot_completed in 103 ms
[2025-08-21 09:32:48][][103 ms][INFO] === Request start ===
[2025-08-21 09:33:05][][17360 ms][DEBUG] START check_frida
[2025-08-21 09:33:05][][17360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:33:05][][17407 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 09:33:05][][17407 ms][WARN] check_frida: not running, restarting
[2025-08-21 09:33:05][][17407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 09:33:05][][17438 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 09:33:05][][17438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 09:33:05][][17469 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 09:33:06][352549939196051][0 ms][INFO] === Request start ===
[2025-08-21 09:33:06][352549939196051][1 ms][DEBUG] START check_frida
[2025-08-21 09:33:06][352549939196051][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:33:06][352549939196051][47 ms][DEBUG] SU: done in 46 ms; out
[2025-08-21 09:33:06][352549939196051][47 ms][WARN] check_frida: not running, restarting
[2025-08-21 09:33:06][352549939196051][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 09:33:06][352549939196051][94 ms][DEBUG] SU: done in 46 ms; out
[2025-08-21 09:33:06][352549939196051][94 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 09:33:06][352549939196051][125 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 09:33:07][][19484 ms][DEBUG] END   check_frida in 2124 ms
[2025-08-21 09:33:07][][19484 ms][DEBUG] START check_scloud
[2025-08-21 09:33:07][][19484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:33:07][][19531 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 09:33:07][][19531 ms][WARN] targetPkg: not running, restarting
[2025-08-21 09:33:07][][19531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 09:33:07][][19578 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 09:33:07][][19578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 09:33:07][][19609 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 09:33:07][354202962135608][1 ms][INFO] === Request start ===
[2025-08-21 09:33:08][350013885014893][1 ms][INFO] === Request start ===
[2025-08-21 09:33:08][352549939196051][2140 ms][DEBUG] END   check_frida in 2139 ms
[2025-08-21 09:33:08][352549939196051][2140 ms][DEBUG] START check_scloud
[2025-08-21 09:33:08][352549939196051][2140 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:33:09][352549939196051][2187 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 09:33:09][352549939196051][2187 ms][WARN] targetPkg: not running, restarting
[2025-08-21 09:33:09][352549939196051][2187 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 09:33:09][352549939196051][2234 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 09:33:09][352549939196051][2234 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 09:33:09][352549939196051][2312 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 09:33:09][][21624 ms][DEBUG] END   check_scloud in 2140 ms
[2025-08-21 09:33:09][][21624 ms][DEBUG] rawBody.length=1131
[2025-08-21 09:33:09][][21625 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBME1RQU1ZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI4MyJ9'" -e "main()" -q"
[2025-08-21 09:33:09][][21625 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:33:09][][21625 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBME1RQU1ZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI4MyJ9'" -e "main()" -q"
[2025-08-21 09:33:11][352549939196051][4327 ms][DEBUG] END   check_scloud in 2187 ms
[2025-08-21 09:33:11][352549939196051][4327 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:33:11][352549939196051][4328 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM5MTk2MDUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMDJDWk5IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDI4OCJ9'" -e "main()" -q"
[2025-08-21 09:33:11][352549939196051][4328 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:33:11][352549939196051][4328 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM5MTk2MDUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMDJDWk5IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDI4OCJ9'" -e "main()" -q"
[2025-08-21 09:33:11][][23405 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 09:33:11][][23561 ms][DEBUG] proc_open done in 1937 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 09:33:11][][23562 ms][DEBUG] END   runCmdUntilRes#1 in 1937 ms
[2025-08-21 09:33:11][][23562 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 09:33:13][][1 ms][INFO] === Request start ===
[2025-08-21 09:33:17][352549939196051][10216 ms][DEBUG] frida res:Failed to spawn: unable to connect to remote frida-server\r\n
[2025-08-21 09:33:17][352549939196051][10373 ms][DEBUG] proc_open done in 6045 ms (timeout); code=255; out.len=59 err.len=11
[2025-08-21 09:33:17][352549939196051][10373 ms][DEBUG] END   runCmdUntilRes#1 in 6045 ms
[2025-08-21 09:33:17][352549939196051][10373 ms][WARN] Detected spawn; restarting frida-server 
[2025-08-21 09:33:17][352549939196051][10373 ms][WARN] check_frida: not running, restarting 2
[2025-08-21 09:33:17][352549939196051][10373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 09:33:17][352549939196051][10419 ms][DEBUG] SU: done in 46 ms; out
[2025-08-21 09:33:17][352549939196051][10419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 09:33:17][352549939196051][10451 ms][DEBUG] SU: done in 32 ms; out
[2025-08-21 09:33:19][352549939196051][12455 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 09:33:19][352549939196051][12455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 09:33:19][352549939196051][12502 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 09:33:19][352549939196051][12502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 09:33:19][352549939196051][12533 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 09:33:21][352549939196051][14548 ms][ERROR] NO RESULT; code=124 out.len=57 err.len=11
[2025-08-21 09:33:21][350013885014893][13186 ms][DEBUG] START check_frida
[2025-08-21 09:33:21][350013885014893][13186 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:33:21][350013885014893][13217 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 09:33:21][350013885014893][13217 ms][WARN] check_frida: not running, restarting
[2025-08-21 09:33:21][350013885014893][13217 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 09:33:21][350013885014893][13248 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 09:33:21][350013885014893][13248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 09:33:21][350013885014893][13279 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 09:33:23][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 09:33:23][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 09:33:23][][34 ms][DEBUG] ADB: done in 33 ms; out
[2025-08-21 09:33:23][][34 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 09:33:23][][237 ms][DEBUG] SU: done in 203 ms; out
[2025-08-21 09:33:23][][237 ms][DEBUG] END   check_boot_completed in 237 ms
[2025-08-21 09:33:23][352549939196051][237 ms][INFO] === Request start ===
[2025-08-21 09:33:23][352549939196051][238 ms][DEBUG] START check_frida
[2025-08-21 09:33:23][352549939196051][238 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:33:23][350013885014893][15294 ms][DEBUG] END   check_frida in 2109 ms
[2025-08-21 09:33:23][350013885014893][15295 ms][DEBUG] START check_scloud
[2025-08-21 09:33:23][350013885014893][15295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:33:24][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 09:33:24][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 09:33:24][][41 ms][DEBUG] ADB: done in 41 ms; out
[2025-08-21 09:33:24][][41 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 09:33:24][350013885014893][16310 ms][DEBUG] SU: done in 1015 ms; out
[2025-08-21 09:33:24][350013885014893][16310 ms][WARN] targetPkg: not running, restarting
[2025-08-21 09:33:24][350013885014893][16310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 09:33:24][][213 ms][DEBUG] SU: done in 172 ms; out
[2025-08-21 09:33:24][][213 ms][DEBUG] END   check_boot_completed in 213 ms
[2025-08-21 09:33:24][354202962135608][213 ms][INFO] === Request start ===
[2025-08-21 09:33:25][352549939196051][2158 ms][DEBUG] SU: done in 1920 ms; out
[2025-08-21 09:33:25][352549939196051][2158 ms][WARN] check_frida: not running, restarting
[2025-08-21 09:33:25][352549939196051][2158 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 09:33:25][350013885014893][16764 ms][DEBUG] SU: done in 454 ms; out
[2025-08-21 09:33:25][350013885014893][16764 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 09:33:25][350013885014893][17356 ms][DEBUG] SU: done in 592 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 09:33:25][352549939196051][2939 ms][DEBUG] SU: done in 781 ms; out
[2025-08-21 09:33:25][352549939196051][2939 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 09:33:26][352549939196051][3470 ms][DEBUG] SU: done in 531 ms; out
[2025-08-21 09:33:27][350013885014893][19372 ms][DEBUG] END   check_scloud in 4077 ms
[2025-08-21 09:33:27][350013885014893][19372 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:33:27][350013885014893][19372 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzUyIn0='" -e "main()" -q"
[2025-08-21 09:33:27][350013885014893][19372 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:33:27][350013885014893][19372 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzUyIn0='" -e "main()" -q"
[2025-08-21 09:33:28][352549939196051][5485 ms][DEBUG] END   check_frida in 5248 ms
[2025-08-21 09:33:28][352549939196051][5485 ms][DEBUG] START check_scloud
[2025-08-21 09:33:28][352549939196051][5486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:33:29][352549939196051][6143 ms][DEBUG] SU: done in 658 ms; out
[2025-08-21 09:33:29][352549939196051][6144 ms][WARN] targetPkg: not running, restarting
[2025-08-21 09:33:29][352549939196051][6144 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 09:33:29][352549939196051][6595 ms][DEBUG] SU: done in 451 ms; out
[2025-08-21 09:33:29][352549939196051][6595 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 09:33:29][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 09:33:29][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 09:33:30][][35 ms][DEBUG] ADB: done in 34 ms; out
[2025-08-21 09:33:30][][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 09:33:30][352549939196051][7063 ms][DEBUG] SU: done in 469 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 09:33:30][][129 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 09:33:30][][129 ms][DEBUG] END   check_boot_completed in 129 ms
[2025-08-21 09:33:30][][129 ms][INFO] === Request start ===
[2025-08-21 09:33:32][352549939196051][9078 ms][DEBUG] END   check_scloud in 3593 ms
[2025-08-21 09:33:32][352549939196051][9078 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:33:32][352549939196051][9078 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM5MTk2MDUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMDJDWk5IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDI4OCJ9'" -e "main()" -q"
[2025-08-21 09:33:32][352549939196051][9079 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:33:32][352549939196051][9079 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM5MTk2MDUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMDJDWk5IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDI4OCJ9'" -e "main()" -q"
[2025-08-21 09:33:38][352549939196051][15342 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTQ5OTM5MTk2MDUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMDJDWk5IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDI4OCJ9"\r\n
[2025-08-21 09:33:40][350013885014893][32150 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzUyIn0="\r\n
[2025-08-21 09:33:40][352549939196051][17733 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9cafa8c-527a-44ef-b751-f00c7f82072e","id":"QR_a9cafa8c-527a-44ef-b751-f00c7f82072e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:33:40][352549939196051][17733 ms][DEBUG] proc_open done in 8654 ms; code=0; res.len=3152
[2025-08-21 09:33:40][352549939196051][17733 ms][DEBUG] END   runCmdUntilRes#1 in 8655 ms
[2025-08-21 09:33:40][352549939196051][17733 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:33:41][354202962135608][16459 ms][DEBUG] START check_frida
[2025-08-21 09:33:41][354202962135608][16459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:33:41][354202962135608][17006 ms][DEBUG] SU: done in 547 ms; outroot          1313     1 2333836  20688 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:33:41][354202962135608][17006 ms][DEBUG] check_frida: running
[2025-08-21 09:33:41][354202962135608][17006 ms][DEBUG] END   check_frida in 547 ms
[2025-08-21 09:33:41][354202962135608][17006 ms][DEBUG] START check_scloud
[2025-08-21 09:33:41][354202962135608][17006 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:33:42][354202962135608][17850 ms][DEBUG] SU: done in 843 ms; outu0_a118       1940 30745 23485000 117848 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:33:42][354202962135608][17850 ms][DEBUG] targetPkg: running
[2025-08-21 09:33:42][354202962135608][17850 ms][DEBUG] END   check_scloud in 844 ms
[2025-08-21 09:33:42][354202962135608][17850 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:33:42][354202962135608][17850 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjAyOTYyMTM1NjA4IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QzMllYNDhUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk5NyJ9'" -e "main()" -q"
[2025-08-21 09:33:42][354202962135608][17850 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:33:42][354202962135608][17850 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjAyOTYyMTM1NjA4IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QzMllYNDhUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk5NyJ9'" -e "main()" -q"
[2025-08-21 09:33:45][350013885014893][37039 ms][DEBUG] proc_open done in 17668 ms (timeout); code=0; out.len=0 err.len=11
[2025-08-21 09:33:45][350013885014893][37039 ms][DEBUG] END   runCmdUntilRes#1 in 17668 ms
[2025-08-21 09:33:45][350013885014893][37040 ms][ERROR] NO RESULT; code=124 out.len=0 err.len=11
[2025-08-21 09:33:45][354202962135608][21099 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjAyOTYyMTM1NjA4IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QzMllYNDhUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk5NyJ9"\r\n
[2025-08-21 09:33:47][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 09:33:47][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 09:33:47][][50 ms][DEBUG] ADB: done in 49 ms; out
[2025-08-21 09:33:47][][50 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 09:33:47][][96 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 09:33:47][][97 ms][DEBUG] END   check_boot_completed in 96 ms
[2025-08-21 09:33:47][350013885014893][97 ms][INFO] === Request start ===
[2025-08-21 09:33:47][354202962135608][22973 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5829ac7d-9875-4f3d-8266-4293f3933b7a","id":"QR_5829ac7d-9875-4f3d-8266-4293f3933b7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:33:47][354202962135608][22973 ms][DEBUG] proc_open done in 5123 ms; code=0; res.len=3152
[2025-08-21 09:33:47][354202962135608][22973 ms][DEBUG] END   runCmdUntilRes#1 in 5124 ms
[2025-08-21 09:33:47][354202962135608][22973 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:33:48][350013885014893][1112 ms][DEBUG] START check_frida
[2025-08-21 09:33:48][350013885014893][1112 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:33:48][350013885014893][1424 ms][DEBUG] SU: done in 312 ms; outroot          1313     1 2317416  20444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:33:48][350013885014893][1424 ms][DEBUG] check_frida: running
[2025-08-21 09:33:48][350013885014893][1424 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 09:33:48][350013885014893][1424 ms][DEBUG] START check_scloud
[2025-08-21 09:33:48][350013885014893][1424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:33:48][350013885014893][1752 ms][DEBUG] SU: done in 328 ms; outu0_a118       1940 30745 23301628 95240 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:33:48][350013885014893][1753 ms][DEBUG] targetPkg: running
[2025-08-21 09:33:48][350013885014893][1753 ms][DEBUG] END   check_scloud in 329 ms
[2025-08-21 09:33:48][350013885014893][1753 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:33:48][350013885014893][1753 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzUyIn0='" -e "main()" -q"
[2025-08-21 09:33:48][350013885014893][1753 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:33:48][350013885014893][1753 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzUyIn0='" -e "main()" -q"
[2025-08-21 09:33:52][350013885014893][4814 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzUyIn0="\r\n
[2025-08-21 09:33:52][351771922472445][0 ms][INFO] === Request start ===
[2025-08-21 09:33:52][351771922472445][1 ms][DEBUG] START check_frida
[2025-08-21 09:33:52][351771922472445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:33:52][351771922472445][290 ms][DEBUG] SU: done in 289 ms; outroot          1313     1 2316404  20572 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:33:52][351771922472445][290 ms][DEBUG] check_frida: running
[2025-08-21 09:33:52][351771922472445][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 09:33:52][351771922472445][290 ms][DEBUG] START check_scloud
[2025-08-21 09:33:52][351771922472445][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:33:53][351771922472445][821 ms][DEBUG] SU: done in 531 ms; out
[2025-08-21 09:33:53][351771922472445][821 ms][WARN] targetPkg: not running, restarting
[2025-08-21 09:33:53][351771922472445][821 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 09:33:53][351771922472445][993 ms][DEBUG] SU: done in 172 ms; out
[2025-08-21 09:33:53][351771922472445][993 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 09:33:53][351771922472445][1259 ms][DEBUG] SU: done in 266 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 09:33:55][351771922472445][3273 ms][DEBUG] END   check_scloud in 2983 ms
[2025-08-21 09:33:55][351771922472445][3273 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:33:55][351771922472445][3273 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTIyNDcyNDQ1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBME1RQU1ZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzQxIn0='" -e "main()" -q"
[2025-08-21 09:33:55][351771922472445][3273 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:33:55][351771922472445][3273 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTIyNDcyNDQ1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBME1RQU1ZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzQxIn0='" -e "main()" -q"
[2025-08-21 09:33:58][351771922472445][6101 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzcxOTIyNDcyNDQ1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBME1RQU1ZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzQxIn0="\r\n
[2025-08-21 09:34:00][350013885014893][13756 ms][DEBUG] proc_open done in 12003 ms (timeout); code=1; out.len=0 err.len=11
[2025-08-21 09:34:00][350013885014893][13756 ms][DEBUG] END   runCmdUntilRes#1 in 12003 ms
[2025-08-21 09:34:00][350013885014893][13756 ms][ERROR] NO RESULT; code=124 out.len=0 err.len=11
[2025-08-21 09:34:01][351771922472445][9178 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1a1baaa-751c-4b6b-b149-722e88d822c9","id":"QR_d1a1baaa-751c-4b6b-b149-722e88d822c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:34:01][351771922472445][9179 ms][DEBUG] proc_open done in 5906 ms; code=0; res.len=3152
[2025-08-21 09:34:01][351771922472445][9179 ms][DEBUG] END   runCmdUntilRes#1 in 5906 ms
[2025-08-21 09:34:01][351771922472445][9179 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:34:02][][0 ms][INFO] === Request start ===
[2025-08-21 09:34:02][][1 ms][DEBUG] START check_frida
[2025-08-21 09:34:02][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:34:03][][338 ms][DEBUG] SU: done in 337 ms; outroot          1313     1 2299984  20364 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:34:03][][338 ms][DEBUG] check_frida: running
[2025-08-21 09:34:03][][338 ms][DEBUG] END   check_frida in 338 ms
[2025-08-21 09:34:03][][339 ms][DEBUG] START check_internet
[2025-08-21 09:34:03][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:34:03][][587 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.098/136.098/136.098/0.000 ms\n
[2025-08-21 09:34:03][][588 ms][DEBUG] check_internet: online
[2025-08-21 09:34:03][][588 ms][DEBUG] END   check_internet in 249 ms
[2025-08-21 09:34:03][][588 ms][DEBUG] START check_scloud
[2025-08-21 09:34:03][][588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:34:03][][947 ms][DEBUG] SU: done in 359 ms; outu0_a118       7399 30745 23310356 112040 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:34:03][][947 ms][DEBUG] targetPkg: running
[2025-08-21 09:34:03][][947 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 09:34:03][][947 ms][DEBUG] rawBody.length=1130
[2025-08-21 09:34:03][][947 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzM2In0='" -e "main()" -q"
[2025-08-21 09:34:03][][947 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:34:03][][947 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzM2In0='" -e "main()" -q"
[2025-08-21 09:34:06][][3962 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzM2In0="\r\n
[2025-08-21 09:34:08][][5961 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75262d4d-1222-4887-a2ae-b219fc8cfd90","id":"QR_75262d4d-1222-4887-a2ae-b219fc8cfd90","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:34:08][][5961 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 09:34:08][][5961 ms][DEBUG] END   runCmdUntilRes#1 in 5014 ms
[2025-08-21 09:34:08][][5961 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:34:12][352949520111636][0 ms][INFO] === Request start ===
[2025-08-21 09:34:12][352949520111636][1 ms][DEBUG] START check_frida
[2025-08-21 09:34:12][352949520111636][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:34:12][352949520111636][303 ms][DEBUG] SU: done in 302 ms; outroot          1313     1 2299984  15132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:34:12][352949520111636][303 ms][DEBUG] check_frida: running
[2025-08-21 09:34:12][352949520111636][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 09:34:12][352949520111636][303 ms][DEBUG] START check_internet
[2025-08-21 09:34:12][352949520111636][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:34:12][352949520111636][662 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.711/247.711/247.711/0.000 ms\n
[2025-08-21 09:34:12][352949520111636][662 ms][DEBUG] check_internet: online
[2025-08-21 09:34:12][352949520111636][662 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 09:34:12][352949520111636][662 ms][DEBUG] START check_scloud
[2025-08-21 09:34:12][352949520111636][662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:34:13][352949520111636][1021 ms][DEBUG] SU: done in 359 ms; outu0_a118       7399 30745 23341212 85536 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:34:13][352949520111636][1021 ms][DEBUG] targetPkg: running
[2025-08-21 09:34:13][352949520111636][1021 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 09:34:13][352949520111636][1021 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:34:13][352949520111636][1021 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTQ5NTIwMTExNjM2IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdBMDBGR1RNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAzMCJ9'" -e "main()" -q"
[2025-08-21 09:34:13][352949520111636][1021 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:34:13][352949520111636][1021 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTQ5NTIwMTExNjM2IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdBMDBGR1RNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAzMCJ9'" -e "main()" -q"
[2025-08-21 09:34:16][352949520111636][4130 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTQ5NTIwMTExNjM2IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdBMDBGR1RNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAzMCJ9"\r\n
[2025-08-21 09:34:18][352949520111636][6254 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e25c8968-244c-4bd1-accb-8ac70ce5d6f9","id":"QR_e25c8968-244c-4bd1-accb-8ac70ce5d6f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:34:18][352949520111636][6255 ms][DEBUG] proc_open done in 5234 ms; code=0; res.len=3152
[2025-08-21 09:34:18][352949520111636][6255 ms][DEBUG] END   runCmdUntilRes#1 in 5234 ms
[2025-08-21 09:34:18][352949520111636][6255 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:34:26][354068195305163][0 ms][INFO] === Request start ===
[2025-08-21 09:34:26][354068195305163][1 ms][DEBUG] START check_frida
[2025-08-21 09:34:26][354068195305163][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:34:26][354068195305163][323 ms][DEBUG] SU: done in 322 ms; outroot          1313     1 2300996   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:34:26][354068195305163][323 ms][DEBUG] check_frida: running
[2025-08-21 09:34:26][354068195305163][323 ms][DEBUG] END   check_frida in 322 ms
[2025-08-21 09:34:26][354068195305163][323 ms][DEBUG] START check_internet
[2025-08-21 09:34:26][354068195305163][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:34:27][354068195305163][744 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.062/200.062/200.062/0.000 ms\n
[2025-08-21 09:34:27][354068195305163][744 ms][DEBUG] check_internet: online
[2025-08-21 09:34:27][354068195305163][744 ms][DEBUG] END   check_internet in 421 ms
[2025-08-21 09:34:27][354068195305163][744 ms][DEBUG] START check_scloud
[2025-08-21 09:34:27][354068195305163][744 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:34:27][354068195305163][1072 ms][DEBUG] SU: done in 328 ms; outu0_a118       7399 30745 23271308 72536 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:34:27][354068195305163][1072 ms][DEBUG] targetPkg: running
[2025-08-21 09:34:27][354068195305163][1072 ms][DEBUG] END   check_scloud in 328 ms
[2025-08-21 09:34:27][354068195305163][1072 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:34:27][354068195305163][1072 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDY4MTk1MzA1MTYzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFFMQ0NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzAxNyJ9'" -e "main()" -q"
[2025-08-21 09:34:27][354068195305163][1073 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:34:27][354068195305163][1073 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDY4MTk1MzA1MTYzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFFMQ0NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzAxNyJ9'" -e "main()" -q"
[2025-08-21 09:34:30][354068195305163][3837 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDY4MTk1MzA1MTYzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFFMQ0NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzAxNyJ9"\r\n
[2025-08-21 09:34:32][354068195305163][5868 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16319861-21b7-4e06-a5d3-211d964db73c","id":"QR_16319861-21b7-4e06-a5d3-211d964db73c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:34:32][354068195305163][5868 ms][DEBUG] proc_open done in 4795 ms; code=0; res.len=3152
[2025-08-21 09:34:32][354068195305163][5868 ms][DEBUG] END   runCmdUntilRes#1 in 4796 ms
[2025-08-21 09:34:32][354068195305163][5868 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:37:13][351082121826914][1 ms][INFO] === Request start ===
[2025-08-21 09:37:13][351082121826914][2 ms][DEBUG] START check_frida
[2025-08-21 09:37:13][351082121826914][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:37:14][351082121826914][347 ms][DEBUG] SU: done in 345 ms; outroot          1313     1 2283564   4072 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:37:14][351082121826914][347 ms][DEBUG] check_frida: running
[2025-08-21 09:37:14][351082121826914][347 ms][DEBUG] END   check_frida in 345 ms
[2025-08-21 09:37:14][351082121826914][347 ms][DEBUG] START check_scloud
[2025-08-21 09:37:14][351082121826914][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:37:14][351082121826914][675 ms][DEBUG] SU: done in 328 ms; outu0_a118       7399 30745 23253856 63816 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:37:14][351082121826914][675 ms][DEBUG] targetPkg: running
[2025-08-21 09:37:14][351082121826914][675 ms][DEBUG] END   check_scloud in 328 ms
[2025-08-21 09:37:14][351082121826914][675 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:37:14][351082121826914][675 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDgyMTIxODI2OTE0IiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QyMUNMOVpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzQ3In0='" -e "main()" -q"
[2025-08-21 09:37:14][351082121826914][675 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:37:14][351082121826914][675 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDgyMTIxODI2OTE0IiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QyMUNMOVpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzQ3In0='" -e "main()" -q"
[2025-08-21 09:37:17][351082121826914][3502 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDgyMTIxODI2OTE0IiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QyMUNMOVpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzQ3In0="\r\n
[2025-08-21 09:37:22][351082121826914][8189 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_809c2134-0904-4405-89ed-19d9c5442d7a","id":"QR_809c2134-0904-4405-89ed-19d9c5442d7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:37:22][351082121826914][8189 ms][DEBUG] proc_open done in 7514 ms; code=0; res.len=3152
[2025-08-21 09:37:22][351082121826914][8189 ms][DEBUG] END   runCmdUntilRes#1 in 7514 ms
[2025-08-21 09:37:22][351082121826914][8189 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:37:30][353182201340881][1 ms][INFO] === Request start ===
[2025-08-21 09:37:30][353182201340881][2 ms][DEBUG] START check_frida
[2025-08-21 09:37:30][353182201340881][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:37:31][353182201340881][317 ms][DEBUG] SU: done in 315 ms; outroot          1313     1 2299984   4416 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:37:31][353182201340881][317 ms][DEBUG] check_frida: running
[2025-08-21 09:37:31][353182201340881][317 ms][DEBUG] END   check_frida in 316 ms
[2025-08-21 09:37:31][353182201340881][317 ms][DEBUG] START check_scloud
[2025-08-21 09:37:31][353182201340881][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:37:31][353182201340881][630 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23253888 67768 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:37:31][353182201340881][630 ms][DEBUG] targetPkg: running
[2025-08-21 09:37:31][353182201340881][630 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 09:37:31][353182201340881][630 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:37:31][353182201340881][630 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTgyMjAxMzQwODgxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME0xNVhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcxNiJ9'" -e "main()" -q"
[2025-08-21 09:37:31][353182201340881][630 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:37:31][353182201340881][630 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTgyMjAxMzQwODgxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME0xNVhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcxNiJ9'" -e "main()" -q"
[2025-08-21 09:37:34][353182201340881][3457 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTgyMjAxMzQwODgxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME0xNVhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcxNiJ9"\r\n
[2025-08-21 09:37:36][353182201340881][5472 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1d946b6-86a7-440d-82ca-903fcb9cc106","id":"QR_e1d946b6-86a7-440d-82ca-903fcb9cc106","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:37:36][353182201340881][5473 ms][DEBUG] proc_open done in 4843 ms; code=0; res.len=3152
[2025-08-21 09:37:36][353182201340881][5473 ms][DEBUG] END   runCmdUntilRes#1 in 4843 ms
[2025-08-21 09:37:36][353182201340881][5473 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:38:08][357211241552472][0 ms][INFO] === Request start ===
[2025-08-21 09:38:08][357211241552472][1 ms][DEBUG] START check_frida
[2025-08-21 09:38:08][357211241552472][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:38:08][357211241552472][310 ms][DEBUG] SU: done in 309 ms; outroot          1313     1 2298972   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:38:08][357211241552472][310 ms][DEBUG] check_frida: running
[2025-08-21 09:38:08][357211241552472][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 09:38:08][357211241552472][310 ms][DEBUG] START check_internet
[2025-08-21 09:38:08][357211241552472][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:38:08][357211241552472][779 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.078/203.078/203.078/0.000 ms\n
[2025-08-21 09:38:08][357211241552472][779 ms][DEBUG] check_internet: online
[2025-08-21 09:38:08][357211241552472][779 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 09:38:08][357211241552472][779 ms][DEBUG] START check_scloud
[2025-08-21 09:38:08][357211241552472][779 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:38:09][357211241552472][1076 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23253920 73704 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:38:09][357211241552472][1076 ms][DEBUG] targetPkg: running
[2025-08-21 09:38:09][357211241552472][1076 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 09:38:09][357211241552472][1076 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:38:09][357211241552472][1076 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MjExMjQxNTUyNDcyIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MTRBV0tIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ0NCJ9'" -e "main()" -q"
[2025-08-21 09:38:09][357211241552472][1076 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:38:09][357211241552472][1076 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MjExMjQxNTUyNDcyIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MTRBV0tIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ0NCJ9'" -e "main()" -q"
[2025-08-21 09:38:11][357211241552472][3887 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MjExMjQxNTUyNDcyIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MTRBV0tIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ0NCJ9"\r\n
[2025-08-21 09:38:14][357211241552472][6074 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c19cab7-0d60-492f-a2dc-127faa8cf04f","id":"QR_4c19cab7-0d60-492f-a2dc-127faa8cf04f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:38:14][357211241552472][6075 ms][DEBUG] proc_open done in 4999 ms; code=0; res.len=3152
[2025-08-21 09:38:14][357211241552472][6075 ms][DEBUG] END   runCmdUntilRes#1 in 4999 ms
[2025-08-21 09:38:14][357211241552472][6075 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:38:21][351978523029348][0 ms][INFO] === Request start ===
[2025-08-21 09:38:21][351978523029348][1 ms][DEBUG] START check_frida
[2025-08-21 09:38:21][351978523029348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:38:21][351978523029348][320 ms][DEBUG] SU: done in 319 ms; outroot          1313     1 2299984   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:38:21][351978523029348][321 ms][DEBUG] check_frida: running
[2025-08-21 09:38:21][351978523029348][321 ms][DEBUG] END   check_frida in 320 ms
[2025-08-21 09:38:21][351978523029348][321 ms][DEBUG] START check_internet
[2025-08-21 09:38:21][351978523029348][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:38:22][351978523029348][649 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.183/231.183/231.183/0.000 ms\n
[2025-08-21 09:38:22][351978523029348][649 ms][DEBUG] check_internet: online
[2025-08-21 09:38:22][351978523029348][649 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 09:38:22][351978523029348][649 ms][DEBUG] START check_scloud
[2025-08-21 09:38:22][351978523029348][649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:38:22][351978523029348][945 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23253952 74420 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:38:22][351978523029348][945 ms][DEBUG] targetPkg: running
[2025-08-21 09:38:22][351978523029348][945 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:38:22][351978523029348][945 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:38:22][351978523029348][946 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIzMDI5MzQ4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRDMDZHMlhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTMyMyJ9'" -e "main()" -q"
[2025-08-21 09:38:22][351978523029348][946 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:38:22][351978523029348][946 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIzMDI5MzQ4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRDMDZHMlhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTMyMyJ9'" -e "main()" -q"
[2025-08-21 09:38:25][351978523029348][3741 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxOTc4NTIzMDI5MzQ4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRDMDZHMlhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTMyMyJ9"\r\n
[2025-08-21 09:38:27][351978523029348][6053 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05013f67-203d-4c1f-821a-e6f49a544682","id":"QR_05013f67-203d-4c1f-821a-e6f49a544682","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:38:27][351978523029348][6053 ms][DEBUG] proc_open done in 5108 ms; code=0; res.len=3152
[2025-08-21 09:38:27][351978523029348][6054 ms][DEBUG] END   runCmdUntilRes#1 in 5108 ms
[2025-08-21 09:38:27][351978523029348][6054 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:39:06][355731679331547][0 ms][INFO] === Request start ===
[2025-08-21 09:39:06][355731679331547][1 ms][DEBUG] START check_frida
[2025-08-21 09:39:06][355731679331547][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:39:06][355731679331547][310 ms][DEBUG] SU: done in 309 ms; outroot          1313     1 2283564   4484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:39:06][355731679331547][310 ms][DEBUG] check_frida: running
[2025-08-21 09:39:06][355731679331547][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 09:39:06][355731679331547][310 ms][DEBUG] START check_scloud
[2025-08-21 09:39:06][355731679331547][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:39:07][355731679331547][622 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23253984 74428 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:39:07][355731679331547][622 ms][DEBUG] targetPkg: running
[2025-08-21 09:39:07][355731679331547][622 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 09:39:07][355731679331547][622 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:39:07][355731679331547][623 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NzMxNjc5MzMxNTQ3IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMFI1M1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMxNCJ9'" -e "main()" -q"
[2025-08-21 09:39:07][355731679331547][623 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:39:07][355731679331547][623 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NzMxNjc5MzMxNTQ3IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMFI1M1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMxNCJ9'" -e "main()" -q"
[2025-08-21 09:39:10][355731679331547][3418 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NzMxNjc5MzMxNTQ3IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMFI1M1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMxNCJ9"\r\n
[2025-08-21 09:39:12][355731679331547][5605 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_366f5acd-e102-491d-a8c9-dc566ce9d06f","id":"QR_366f5acd-e102-491d-a8c9-dc566ce9d06f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:39:12][355731679331547][5605 ms][DEBUG] proc_open done in 4982 ms; code=0; res.len=3152
[2025-08-21 09:39:12][355731679331547][5605 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 09:39:12][355731679331547][5605 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:39:21][353302727454921][0 ms][INFO] === Request start ===
[2025-08-21 09:39:21][353302727454921][1 ms][DEBUG] START check_frida
[2025-08-21 09:39:21][353302727454921][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:39:21][353302727454921][270 ms][DEBUG] SU: done in 269 ms; outroot          1313     1 2299984   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:39:21][353302727454921][270 ms][DEBUG] check_frida: running
[2025-08-21 09:39:21][353302727454921][270 ms][DEBUG] END   check_frida in 269 ms
[2025-08-21 09:39:21][353302727454921][270 ms][DEBUG] START check_scloud
[2025-08-21 09:39:21][353302727454921][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:39:21][353302727454921][582 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23254016 74364 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:39:21][353302727454921][582 ms][DEBUG] targetPkg: running
[2025-08-21 09:39:21][353302727454921][582 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 09:39:21][353302727454921][583 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:39:21][353302727454921][583 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzAyNzI3NDU0OTIxIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNENXQ05QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg0MCJ9'" -e "main()" -q"
[2025-08-21 09:39:21][353302727454921][583 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:39:21][353302727454921][583 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzAyNzI3NDU0OTIxIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNENXQ05QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg0MCJ9'" -e "main()" -q"
[2025-08-21 09:39:24][353302727454921][3363 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzAyNzI3NDU0OTIxIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNENXQ05QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg0MCJ9"\r\n
[2025-08-21 09:39:27][353302727454921][5815 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f8e3433-bac4-434f-a1f9-b48663f1578c","id":"QR_8f8e3433-bac4-434f-a1f9-b48663f1578c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:39:27][353302727454921][5815 ms][DEBUG] proc_open done in 5232 ms; code=0; res.len=3152
[2025-08-21 09:39:27][353302727454921][5815 ms][DEBUG] END   runCmdUntilRes#1 in 5233 ms
[2025-08-21 09:39:27][353302727454921][5815 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:41:07][350103378757353][1 ms][INFO] === Request start ===
[2025-08-21 09:41:07][350103378757353][2 ms][DEBUG] START check_frida
[2025-08-21 09:41:07][350103378757353][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:41:07][350103378757353][291 ms][DEBUG] SU: done in 289 ms; outroot          1313     1 2283564   4476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:41:07][350103378757353][291 ms][DEBUG] check_frida: running
[2025-08-21 09:41:07][350103378757353][291 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 09:41:07][350103378757353][291 ms][DEBUG] START check_scloud
[2025-08-21 09:41:07][350103378757353][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:41:07][350103378757353][603 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23254048 74980 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:41:07][350103378757353][603 ms][DEBUG] targetPkg: running
[2025-08-21 09:41:07][350103378757353][603 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 09:41:07][350103378757353][603 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:41:07][350103378757353][603 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTAzMzc4NzU3MzUzIiwibW9kZWwiOiJTTS1BMjU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MkEzNzdZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTg5MSJ9'" -e "main()" -q"
[2025-08-21 09:41:07][350103378757353][603 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:41:07][350103378757353][603 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTAzMzc4NzU3MzUzIiwibW9kZWwiOiJTTS1BMjU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MkEzNzdZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTg5MSJ9'" -e "main()" -q"
[2025-08-21 09:41:10][350103378757353][3415 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTAzMzc4NzU3MzUzIiwibW9kZWwiOiJTTS1BMjU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MkEzNzdZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTg5MSJ9"\r\n
[2025-08-21 09:41:12][350103378757353][5586 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e04030db-387b-4f5f-9f56-0642a950279a","id":"QR_e04030db-387b-4f5f-9f56-0642a950279a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:41:12][350103378757353][5586 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 09:41:12][350103378757353][5586 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 09:41:12][350103378757353][5586 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:41:22][354327825122087][0 ms][INFO] === Request start ===
[2025-08-21 09:41:22][354327825122087][1 ms][DEBUG] START check_frida
[2025-08-21 09:41:22][354327825122087][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:41:22][354327825122087][298 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2299984   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:41:22][354327825122087][298 ms][DEBUG] check_frida: running
[2025-08-21 09:41:22][354327825122087][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 09:41:22][354327825122087][298 ms][DEBUG] START check_scloud
[2025-08-21 09:41:22][354327825122087][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:41:23][354327825122087][595 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23254080 74672 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:41:23][354327825122087][595 ms][DEBUG] targetPkg: running
[2025-08-21 09:41:23][354327825122087][595 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:41:23][354327825122087][595 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:41:23][354327825122087][595 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzI3ODI1MTIyMDg3IiwibW9kZWwiOiJTTS1UNTAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUUjgwNzNQV04iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDY1In0='" -e "main()" -q"
[2025-08-21 09:41:23][354327825122087][595 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:41:23][354327825122087][595 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzI3ODI1MTIyMDg3IiwibW9kZWwiOiJTTS1UNTAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUUjgwNzNQV04iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDY1In0='" -e "main()" -q"
[2025-08-21 09:41:25][354327825122087][3391 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MzI3ODI1MTIyMDg3IiwibW9kZWwiOiJTTS1UNTAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUUjgwNzNQV04iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDY1In0="\r\n
[2025-08-21 09:41:28][354327825122087][5610 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19303548-b125-4225-b6f6-ab9a92784029","id":"QR_19303548-b125-4225-b6f6-ab9a92784029","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:41:28][354327825122087][5610 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 09:41:28][354327825122087][5610 ms][DEBUG] END   runCmdUntilRes#1 in 5015 ms
[2025-08-21 09:41:28][354327825122087][5610 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:42:07][352757187583728][0 ms][INFO] === Request start ===
[2025-08-21 09:42:07][352757187583728][1 ms][DEBUG] START check_frida
[2025-08-21 09:42:07][352757187583728][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:42:08][352757187583728][310 ms][DEBUG] SU: done in 309 ms; outroot          1313     1 2283564   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:42:08][352757187583728][310 ms][DEBUG] check_frida: running
[2025-08-21 09:42:08][352757187583728][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 09:42:08][352757187583728][310 ms][DEBUG] START check_internet
[2025-08-21 09:42:08][352757187583728][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:42:08][352757187583728][794 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.778/201.778/201.778/0.000 ms\n
[2025-08-21 09:42:08][352757187583728][794 ms][DEBUG] check_internet: online
[2025-08-21 09:42:08][352757187583728][794 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 09:42:08][352757187583728][794 ms][DEBUG] START check_scloud
[2025-08-21 09:42:08][352757187583728][794 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:42:08][350518499435094][0 ms][INFO] === Request start ===
[2025-08-21 09:42:08][352757187583728][1029 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23254112 75288 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:42:08][352757187583728][1029 ms][DEBUG] targetPkg: running
[2025-08-21 09:42:08][352757187583728][1029 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 09:42:08][352757187583728][1029 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:42:08][352757187583728][1029 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzU3MTg3NTgzNzI4IiwibW9kZWwiOiJTTS1BNTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1I3MDA0QjlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY2NCJ9'" -e "main()" -q"
[2025-08-21 09:42:08][352757187583728][1029 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:42:08][352757187583728][1029 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzU3MTg3NTgzNzI4IiwibW9kZWwiOiJTTS1BNTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1I3MDA0QjlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY2NCJ9'" -e "main()" -q"
[2025-08-21 09:42:11][352757187583728][3825 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzU3MTg3NTgzNzI4IiwibW9kZWwiOiJTTS1BNTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1I3MDA0QjlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY2NCJ9"\r\n
[2025-08-21 09:42:13][352757187583728][6152 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a30cf69e-4135-4d45-9aa3-de9f19cc657a","id":"QR_a30cf69e-4135-4d45-9aa3-de9f19cc657a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:42:13][352757187583728][6153 ms][DEBUG] proc_open done in 5124 ms; code=0; res.len=3152
[2025-08-21 09:42:13][352757187583728][6153 ms][DEBUG] END   runCmdUntilRes#1 in 5124 ms
[2025-08-21 09:42:13][352757187583728][6153 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:42:14][350518499435094][6089 ms][DEBUG] START check_frida
[2025-08-21 09:42:14][350518499435094][6089 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:42:14][350518499435094][6402 ms][DEBUG] SU: done in 312 ms; outroot          1313     1 2299984   4476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:42:14][350518499435094][6402 ms][DEBUG] check_frida: running
[2025-08-21 09:42:14][350518499435094][6402 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 09:42:14][350518499435094][6402 ms][DEBUG] START check_internet
[2025-08-21 09:42:14][350518499435094][6402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:42:15][350518499435094][6651 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.543/145.543/145.543/0.000 ms\n
[2025-08-21 09:42:15][350518499435094][6651 ms][DEBUG] check_internet: online
[2025-08-21 09:42:15][350518499435094][6651 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 09:42:15][350518499435094][6651 ms][DEBUG] START check_scloud
[2025-08-21 09:42:15][350518499435094][6651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:42:15][350518499435094][6948 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23254144 74856 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:42:15][350518499435094][6948 ms][DEBUG] targetPkg: running
[2025-08-21 09:42:15][350518499435094][6949 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:42:15][350518499435094][6949 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:42:15][350518499435094][6949 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTE4NDk5NDM1MDk0IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MTJBOTBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA0NSJ9'" -e "main()" -q"
[2025-08-21 09:42:15][350518499435094][6949 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:42:15][350518499435094][6949 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTE4NDk5NDM1MDk0IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MTJBOTBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA0NSJ9'" -e "main()" -q"
[2025-08-21 09:42:18][350518499435094][9744 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTE4NDk5NDM1MDk0IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MTJBOTBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA0NSJ9"\r\n
[2025-08-21 09:42:20][350518499435094][11525 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22f598fa-6992-42e4-839e-c468f3899229","id":"QR_22f598fa-6992-42e4-839e-c468f3899229","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:42:20][350518499435094][11525 ms][DEBUG] proc_open done in 4577 ms; code=0; res.len=3152
[2025-08-21 09:42:20][350518499435094][11525 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 09:42:20][350518499435094][11525 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:42:28][350900922150138][0 ms][INFO] === Request start ===
[2025-08-21 09:42:28][350900922150138][1 ms][DEBUG] START check_frida
[2025-08-21 09:42:28][350900922150138][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:42:28][350900922150138][300 ms][DEBUG] SU: done in 299 ms; outroot          1313     1 2299984   4476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:42:28][350900922150138][301 ms][DEBUG] check_frida: running
[2025-08-21 09:42:28][350900922150138][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 09:42:28][350900922150138][301 ms][DEBUG] START check_internet
[2025-08-21 09:42:28][350900922150138][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:42:28][350900922150138][675 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.321/249.321/249.321/0.000 ms\n
[2025-08-21 09:42:28][350900922150138][675 ms][DEBUG] check_internet: online
[2025-08-21 09:42:28][350900922150138][675 ms][DEBUG] END   check_internet in 374 ms
[2025-08-21 09:42:28][350900922150138][675 ms][DEBUG] START check_scloud
[2025-08-21 09:42:28][350900922150138][675 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:42:29][350900922150138][910 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23254176 75468 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:42:29][350900922150138][910 ms][DEBUG] targetPkg: running
[2025-08-21 09:42:29][350900922150138][910 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 09:42:29][350900922150138][910 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:42:29][350900922150138][910 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTAwOTIyMTUwMTM4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMEIxMzhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM4NSJ9'" -e "main()" -q"
[2025-08-21 09:42:29][350900922150138][910 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:42:29][350900922150138][910 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTAwOTIyMTUwMTM4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMEIxMzhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM4NSJ9'" -e "main()" -q"
[2025-08-21 09:42:31][350900922150138][3721 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTAwOTIyMTUwMTM4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMEIxMzhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM4NSJ9"\r\n
[2025-08-21 09:42:33][350900922150138][5752 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a3f90c0-675f-44f8-8fc9-e2ed8a657814","id":"QR_9a3f90c0-675f-44f8-8fc9-e2ed8a657814","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:42:33][350900922150138][5752 ms][DEBUG] proc_open done in 4842 ms; code=0; res.len=3152
[2025-08-21 09:42:33][350900922150138][5752 ms][DEBUG] END   runCmdUntilRes#1 in 4843 ms
[2025-08-21 09:42:33][350900922150138][5752 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:43:07][350482806826497][0 ms][INFO] === Request start ===
[2025-08-21 09:43:07][350482806826497][1 ms][DEBUG] START check_frida
[2025-08-21 09:43:07][350482806826497][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:43:07][350482806826497][271 ms][DEBUG] SU: done in 270 ms; outroot          1313     1 2283564   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:43:07][350482806826497][271 ms][DEBUG] check_frida: running
[2025-08-21 09:43:07][350482806826497][271 ms][DEBUG] END   check_frida in 270 ms
[2025-08-21 09:43:07][350482806826497][271 ms][DEBUG] START check_scloud
[2025-08-21 09:43:07][350482806826497][271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:43:08][350482806826497][505 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23254208 75240 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:43:08][350482806826497][506 ms][DEBUG] targetPkg: running
[2025-08-21 09:43:08][350482806826497][506 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 09:43:08][350482806826497][506 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:43:08][350482806826497][506 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDgyODA2ODI2NDk3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFg1MDJSODBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTU1OCJ9'" -e "main()" -q"
[2025-08-21 09:43:08][350482806826497][506 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:43:08][350482806826497][506 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDgyODA2ODI2NDk3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFg1MDJSODBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTU1OCJ9'" -e "main()" -q"
[2025-08-21 09:43:10][350482806826497][3302 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDgyODA2ODI2NDk3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFg1MDJSODBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTU1OCJ9"\r\n
[2025-08-21 09:43:12][350482806826497][5145 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba14760a-debf-4d77-a1c5-db0aeec327af","id":"QR_ba14760a-debf-4d77-a1c5-db0aeec327af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:43:12][350482806826497][5145 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 09:43:12][350482806826497][5145 ms][DEBUG] END   runCmdUntilRes#1 in 4639 ms
[2025-08-21 09:43:12][350482806826497][5145 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:44:10][350165822746985][1 ms][INFO] === Request start ===
[2025-08-21 09:44:10][350165822746985][2 ms][DEBUG] START check_frida
[2025-08-21 09:44:10][350165822746985][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:44:11][350165822746985][314 ms][DEBUG] SU: done in 312 ms; outroot          1313     1 2283564   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:44:11][350165822746985][314 ms][DEBUG] check_frida: running
[2025-08-21 09:44:11][350165822746985][314 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 09:44:11][350165822746985][314 ms][DEBUG] START check_internet
[2025-08-21 09:44:11][350165822746985][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:44:11][350165822746985][673 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.439/265.439/265.439/0.000 ms\n
[2025-08-21 09:44:11][350165822746985][674 ms][DEBUG] check_internet: online
[2025-08-21 09:44:11][350165822746985][674 ms][DEBUG] END   check_internet in 360 ms
[2025-08-21 09:44:11][350165822746985][674 ms][DEBUG] START check_scloud
[2025-08-21 09:44:11][350165822746985][674 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:44:11][350165822746985][985 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23254240 75164 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:44:11][350165822746985][985 ms][DEBUG] targetPkg: running
[2025-08-21 09:44:11][350165822746985][985 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 09:44:11][350165822746985][985 ms][DEBUG] rawBody.length=1159
[2025-08-21 09:44:11][350165822746985][985 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTY1ODIyNzQ2OTg1IiwibW9kZWwiOiJTTS1YNjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWTIwMllGRU0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiVFBBIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzk0MDAifQ=='" -e "main()" -q"
[2025-08-21 09:44:11][350165822746985][985 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:44:11][350165822746985][985 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTY1ODIyNzQ2OTg1IiwibW9kZWwiOiJTTS1YNjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWTIwMllGRU0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiVFBBIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzk0MDAifQ=='" -e "main()" -q"
[2025-08-21 09:44:14][350165822746985][3782 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTY1ODIyNzQ2OTg1IiwibW9kZWwiOiJTTS1YNjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWTIwMllGRU0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiVFBBIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzk0MDAifQ=="\r\n
[2025-08-21 09:44:18][350165822746985][7312 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f2a797d-6704-4d0b-b447-ed34d189e6e0","id":"QR_3f2a797d-6704-4d0b-b447-ed34d189e6e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:44:18][350165822746985][7313 ms][DEBUG] proc_open done in 6327 ms; code=0; res.len=3152
[2025-08-21 09:44:18][350165822746985][7313 ms][DEBUG] END   runCmdUntilRes#1 in 6327 ms
[2025-08-21 09:44:18][350165822746985][7313 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:46:10][353835884139744][1 ms][INFO] === Request start ===
[2025-08-21 09:46:10][353835884139744][2 ms][DEBUG] START check_frida
[2025-08-21 09:46:10][353835884139744][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:46:10][353835884139744][301 ms][DEBUG] SU: done in 300 ms; outroot          1313     1 2283564   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:46:10][353835884139744][301 ms][DEBUG] check_frida: running
[2025-08-21 09:46:10][353835884139744][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 09:46:10][353835884139744][301 ms][DEBUG] START check_internet
[2025-08-21 09:46:10][353835884139744][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:46:11][353835884139744][772 ms][DEBUG] SU: done in 470 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.829/200.829/200.829/0.000 ms\n
[2025-08-21 09:46:11][353835884139744][772 ms][DEBUG] check_internet: online
[2025-08-21 09:46:11][353835884139744][772 ms][DEBUG] END   check_internet in 471 ms
[2025-08-21 09:46:11][353835884139744][772 ms][DEBUG] START check_scloud
[2025-08-21 09:46:11][353835884139744][772 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:46:11][353835884139744][1067 ms][DEBUG] SU: done in 295 ms; outu0_a118       7399 30745 23254272 75268 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:46:11][353835884139744][1067 ms][DEBUG] targetPkg: running
[2025-08-21 09:46:11][353835884139744][1067 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 09:46:11][353835884139744][1067 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:46:11][353835884139744][1067 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzODM1ODg0MTM5NzQ0IiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMThKSEJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY0OSJ9'" -e "main()" -q"
[2025-08-21 09:46:11][353835884139744][1067 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:46:11][353835884139744][1067 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzODM1ODg0MTM5NzQ0IiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMThKSEJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY0OSJ9'" -e "main()" -q"
[2025-08-21 09:46:14][353835884139744][3879 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzODM1ODg0MTM5NzQ0IiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMThKSEJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY0OSJ9"\r\n
[2025-08-21 09:46:16][353835884139744][6175 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68447ebf-5b1b-47e0-a113-e7ef357905a8","id":"QR_68447ebf-5b1b-47e0-a113-e7ef357905a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:46:16][353835884139744][6175 ms][DEBUG] proc_open done in 5108 ms; code=0; res.len=3152
[2025-08-21 09:46:16][353835884139744][6175 ms][DEBUG] END   runCmdUntilRes#1 in 5108 ms
[2025-08-21 09:46:16][353835884139744][6175 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:47:11][350250414107489][0 ms][INFO] === Request start ===
[2025-08-21 09:47:11][350250414107489][1 ms][DEBUG] START check_frida
[2025-08-21 09:47:11][350250414107489][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:47:11][350013885014893][1 ms][INFO] === Request start ===
[2025-08-21 09:47:11][350250414107489][250 ms][DEBUG] SU: done in 249 ms; outroot          1313     1 2283564   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:47:11][350250414107489][250 ms][DEBUG] check_frida: running
[2025-08-21 09:47:11][350250414107489][250 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 09:47:11][350250414107489][250 ms][DEBUG] START check_scloud
[2025-08-21 09:47:11][350250414107489][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:47:11][350250414107489][531 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23254304 75880 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:47:11][350250414107489][531 ms][DEBUG] targetPkg: running
[2025-08-21 09:47:11][350250414107489][531 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 09:47:11][350250414107489][531 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:47:11][350250414107489][531 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjUwNDE0MTA3NDg5IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMDQ5UTVYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDAyMCJ9'" -e "main()" -q"
[2025-08-21 09:47:11][350250414107489][532 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:47:11][350250414107489][532 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjUwNDE0MTA3NDg5IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMDQ5UTVYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDAyMCJ9'" -e "main()" -q"
[2025-08-21 09:47:14][350250414107489][3327 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjUwNDE0MTA3NDg5IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMDQ5UTVYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDAyMCJ9"\r\n
[2025-08-21 09:47:16][350250414107489][5561 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_306b1012-5a7d-45b0-9239-5b9715ba30a4","id":"QR_306b1012-5a7d-45b0-9239-5b9715ba30a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:47:16][350250414107489][5561 ms][DEBUG] proc_open done in 5029 ms; code=0; res.len=3152
[2025-08-21 09:47:16][350250414107489][5561 ms][DEBUG] END   runCmdUntilRes#1 in 5030 ms
[2025-08-21 09:47:16][350250414107489][5561 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:47:17][350013885014893][6082 ms][DEBUG] START check_frida
[2025-08-21 09:47:17][350013885014893][6082 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:47:17][350013885014893][6379 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2299984   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:47:17][350013885014893][6379 ms][DEBUG] check_frida: running
[2025-08-21 09:47:17][350013885014893][6379 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 09:47:17][350013885014893][6380 ms][DEBUG] START check_scloud
[2025-08-21 09:47:17][350013885014893][6380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:47:18][350013885014893][6692 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23254336 76440 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:47:18][350013885014893][6692 ms][DEBUG] targetPkg: running
[2025-08-21 09:47:18][350013885014893][6692 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 09:47:18][350013885014893][6692 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:47:18][350013885014893][6692 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYzMiJ9'" -e "main()" -q"
[2025-08-21 09:47:18][350013885014893][6692 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:47:18][350013885014893][6692 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYzMiJ9'" -e "main()" -q"
[2025-08-21 09:47:20][350013885014893][9488 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODg1MDE0ODkzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMFNUR1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYzMiJ9"\r\n
[2025-08-21 09:47:21][352404919700342][0 ms][INFO] === Request start ===
[2025-08-21 09:47:23][350013885014893][11722 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28df2818-9e54-4507-8b3c-bb197c8ebf2c","id":"QR_28df2818-9e54-4507-8b3c-bb197c8ebf2c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:47:23][350013885014893][11722 ms][DEBUG] proc_open done in 5030 ms; code=0; res.len=3152
[2025-08-21 09:47:23][350013885014893][11722 ms][DEBUG] END   runCmdUntilRes#1 in 5030 ms
[2025-08-21 09:47:23][350013885014893][11722 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:47:23][352404919700342][2017 ms][DEBUG] START check_frida
[2025-08-21 09:47:23][352404919700342][2017 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:47:24][352404919700342][2314 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2299984   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:47:24][352404919700342][2314 ms][DEBUG] check_frida: running
[2025-08-21 09:47:24][352404919700342][2314 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 09:47:24][352404919700342][2314 ms][DEBUG] START check_scloud
[2025-08-21 09:47:24][352404919700342][2314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:47:24][352404919700342][2611 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23254368 75888 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:47:24][352404919700342][2611 ms][DEBUG] targetPkg: running
[2025-08-21 09:47:24][352404919700342][2611 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:47:24][352404919700342][2611 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:47:24][352404919700342][2611 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDA0OTE5NzAwMzQyIiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c4MTZCUkNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE1MSJ9'" -e "main()" -q"
[2025-08-21 09:47:24][352404919700342][2611 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:47:24][352404919700342][2611 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDA0OTE5NzAwMzQyIiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c4MTZCUkNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE1MSJ9'" -e "main()" -q"
[2025-08-21 09:47:27][352404919700342][5391 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDA0OTE5NzAwMzQyIiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c4MTZCUkNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE1MSJ9"\r\n
[2025-08-21 09:47:28][353255360722071][0 ms][INFO] === Request start ===
[2025-08-21 09:47:29][352404919700342][7172 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b717a02-3b70-4bd2-ac55-a3152910c630","id":"QR_2b717a02-3b70-4bd2-ac55-a3152910c630","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:47:29][352404919700342][7172 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-21 09:47:29][352404919700342][7173 ms][DEBUG] END   runCmdUntilRes#1 in 4561 ms
[2025-08-21 09:47:29][352404919700342][7173 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:47:29][353255360722071][1016 ms][DEBUG] START check_frida
[2025-08-21 09:47:29][353255360722071][1016 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:47:30][353255360722071][1297 ms][DEBUG] SU: done in 281 ms; outroot          1313     1 2299984   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:47:30][353255360722071][1297 ms][DEBUG] check_frida: running
[2025-08-21 09:47:30][353255360722071][1297 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 09:47:30][353255360722071][1297 ms][DEBUG] START check_scloud
[2025-08-21 09:47:30][353255360722071][1297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:47:30][353255360722071][1580 ms][DEBUG] SU: done in 283 ms; outu0_a118       7399 30745 23254400 76448 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:47:30][353255360722071][1580 ms][DEBUG] targetPkg: running
[2025-08-21 09:47:30][353255360722071][1580 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 09:47:30][353255360722071][1580 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:47:30][353255360722071][1580 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjU1MzYwNzIyMDcxIiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzgwM0tCRFciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNjE3In0='" -e "main()" -q"
[2025-08-21 09:47:30][353255360722071][1580 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:47:30][353255360722071][1580 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjU1MzYwNzIyMDcxIiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzgwM0tCRFciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNjE3In0='" -e "main()" -q"
[2025-08-21 09:47:33][353255360722071][4406 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjU1MzYwNzIyMDcxIiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzgwM0tCRFciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNjE3In0="\r\n
[2025-08-21 09:47:35][353255360722071][6109 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b026bb9-c863-49ec-bf6e-1540bd124574","id":"QR_7b026bb9-c863-49ec-bf6e-1540bd124574","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:47:35][353255360722071][6109 ms][DEBUG] proc_open done in 4529 ms; code=0; res.len=3152
[2025-08-21 09:47:35][353255360722071][6109 ms][DEBUG] END   runCmdUntilRes#1 in 4529 ms
[2025-08-21 09:47:35][353255360722071][6109 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:47:39][359664098463219][0 ms][INFO] === Request start ===
[2025-08-21 09:47:39][359664098463219][1 ms][DEBUG] START check_frida
[2025-08-21 09:47:39][359664098463219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:47:39][359664098463219][306 ms][DEBUG] SU: done in 305 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:47:39][359664098463219][306 ms][DEBUG] check_frida: running
[2025-08-21 09:47:39][359664098463219][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 09:47:39][359664098463219][306 ms][DEBUG] START check_scloud
[2025-08-21 09:47:39][359664098463219][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:47:40][359664098463219][603 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23254432 75984 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:47:40][359664098463219][603 ms][DEBUG] targetPkg: running
[2025-08-21 09:47:40][359664098463219][603 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:47:40][359664098463219][603 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:47:40][359664098463219][603 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NjY0MDk4NDYzMjE5IiwibW9kZWwiOiJTTS1HOTYwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OEtBMlQ5QldQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJWQVUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU1NyJ9'" -e "main()" -q"
[2025-08-21 09:47:40][359664098463219][603 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:47:40][359664098463219][603 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NjY0MDk4NDYzMjE5IiwibW9kZWwiOiJTTS1HOTYwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OEtBMlQ5QldQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJWQVUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU1NyJ9'" -e "main()" -q"
[2025-08-21 09:47:42][359664098463219][3399 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5NjY0MDk4NDYzMjE5IiwibW9kZWwiOiJTTS1HOTYwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OEtBMlQ5QldQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJWQVUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU1NyJ9"\r\n
[2025-08-21 09:47:44][359664098463219][5086 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_069f1470-1896-493f-973b-00971654f29b","id":"QR_069f1470-1896-493f-973b-00971654f29b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:47:44][359664098463219][5086 ms][DEBUG] proc_open done in 4483 ms; code=0; res.len=3152
[2025-08-21 09:47:44][359664098463219][5086 ms][DEBUG] END   runCmdUntilRes#1 in 4483 ms
[2025-08-21 09:47:44][359664098463219][5087 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:48:06][353227415174194][0 ms][INFO] === Request start ===
[2025-08-21 09:48:06][353227415174194][1 ms][DEBUG] START check_frida
[2025-08-21 09:48:06][353227415174194][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:48:06][353227415174194][296 ms][DEBUG] SU: done in 295 ms; outroot          1313     1 2283564   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:48:06][353227415174194][296 ms][DEBUG] check_frida: running
[2025-08-21 09:48:06][353227415174194][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 09:48:06][353227415174194][296 ms][DEBUG] START check_internet
[2025-08-21 09:48:06][353227415174194][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:48:07][353227415174194][562 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.453/171.453/171.453/0.000 ms\n
[2025-08-21 09:48:07][353227415174194][562 ms][DEBUG] check_internet: online
[2025-08-21 09:48:07][353227415174194][562 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 09:48:07][353227415174194][562 ms][DEBUG] START check_scloud
[2025-08-21 09:48:07][353227415174194][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:48:07][353227415174194][858 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23254464 75744 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:48:07][353227415174194][858 ms][DEBUG] targetPkg: running
[2025-08-21 09:48:07][353227415174194][858 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 09:48:07][353227415174194][858 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:48:07][353227415174194][858 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjI3NDE1MTc0MTk0IiwibW9kZWwiOiJTTS1GOTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1c3ME1LREZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE3NiJ9'" -e "main()" -q"
[2025-08-21 09:48:07][353227415174194][859 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:48:07][353227415174194][859 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjI3NDE1MTc0MTk0IiwibW9kZWwiOiJTTS1GOTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1c3ME1LREZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE3NiJ9'" -e "main()" -q"
[2025-08-21 09:48:10][353227415174194][3655 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjI3NDE1MTc0MTk0IiwibW9kZWwiOiJTTS1GOTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1c3ME1LREZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE3NiJ9"\r\n
[2025-08-21 09:48:12][353227415174194][5576 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e97fe16c-169a-4833-abe2-70f994ba753e","id":"QR_e97fe16c-169a-4833-abe2-70f994ba753e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:48:12][353227415174194][5577 ms][DEBUG] proc_open done in 4718 ms; code=0; res.len=3152
[2025-08-21 09:48:12][353227415174194][5577 ms][DEBUG] END   runCmdUntilRes#1 in 4718 ms
[2025-08-21 09:48:12][353227415174194][5577 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:49:07][356928107038947][0 ms][INFO] === Request start ===
[2025-08-21 09:49:07][356928107038947][1 ms][DEBUG] START check_frida
[2025-08-21 09:49:07][356928107038947][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:49:07][356928107038947][313 ms][DEBUG] SU: done in 312 ms; outroot          1313     1 2283564   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:49:07][356928107038947][313 ms][DEBUG] check_frida: running
[2025-08-21 09:49:07][356928107038947][314 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 09:49:07][356928107038947][314 ms][DEBUG] START check_scloud
[2025-08-21 09:49:07][356928107038947][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:49:08][356928107038947][594 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23254752 77316 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:49:08][356928107038947][594 ms][DEBUG] targetPkg: running
[2025-08-21 09:49:08][356928107038947][594 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 09:49:08][356928107038947][594 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:49:08][356928107038947][594 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTI4MTA3MDM4OTQ3IiwibW9kZWwiOiJTTS1HOTczRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE02MlIxWjZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM0NSJ9'" -e "main()" -q"
[2025-08-21 09:49:08][356928107038947][594 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:49:08][356928107038947][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTI4MTA3MDM4OTQ3IiwibW9kZWwiOiJTTS1HOTczRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE02MlIxWjZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM0NSJ9'" -e "main()" -q"
[2025-08-21 09:49:10][356928107038947][3406 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTI4MTA3MDM4OTQ3IiwibW9kZWwiOiJTTS1HOTczRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE02MlIxWjZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM0NSJ9"\r\n
[2025-08-21 09:49:13][356928107038947][5609 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_104c58cb-ae3b-471d-bb82-5d31164fbfd6","id":"QR_104c58cb-ae3b-471d-bb82-5d31164fbfd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:49:13][356928107038947][5609 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 09:49:13][356928107038947][5609 ms][DEBUG] END   runCmdUntilRes#1 in 5015 ms
[2025-08-21 09:49:13][356928107038947][5609 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:52:08][350973421550272][1 ms][INFO] === Request start ===
[2025-08-21 09:52:08][350973421550272][2 ms][DEBUG] START check_frida
[2025-08-21 09:52:08][350973421550272][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:52:08][357879703053609][0 ms][INFO] === Request start ===
[2025-08-21 09:52:08][350973421550272][299 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2282552   4372 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:52:08][350973421550272][299 ms][DEBUG] check_frida: running
[2025-08-21 09:52:08][350973421550272][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 09:52:08][350973421550272][299 ms][DEBUG] START check_internet
[2025-08-21 09:52:08][350973421550272][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:52:08][350973421550272][737 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.473/153.473/153.473/0.000 ms\n
[2025-08-21 09:52:08][350973421550272][737 ms][DEBUG] check_internet: online
[2025-08-21 09:52:08][350973421550272][737 ms][DEBUG] END   check_internet in 438 ms
[2025-08-21 09:52:08][350973421550272][737 ms][DEBUG] START check_scloud
[2025-08-21 09:52:08][350973421550272][737 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:52:09][350973421550272][1034 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23254784 77388 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:52:09][350973421550272][1034 ms][DEBUG] targetPkg: running
[2025-08-21 09:52:09][350973421550272][1034 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:52:09][350973421550272][1034 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:52:09][350973421550272][1034 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTczNDIxNTUwMjcyIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1czMjdNRjJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9'" -e "main()" -q"
[2025-08-21 09:52:09][350973421550272][1034 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:52:09][350973421550272][1034 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTczNDIxNTUwMjcyIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1czMjdNRjJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9'" -e "main()" -q"
[2025-08-21 09:52:12][350973421550272][3892 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTczNDIxNTUwMjcyIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1czMjdNRjJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9"\r\n
[2025-08-21 09:52:14][350973421550272][6032 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06899200-2687-41a7-b9a0-059a5f77cfee","id":"QR_06899200-2687-41a7-b9a0-059a5f77cfee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:52:14][350973421550272][6032 ms][DEBUG] proc_open done in 4998 ms; code=0; res.len=3152
[2025-08-21 09:52:14][350973421550272][6032 ms][DEBUG] END   runCmdUntilRes#1 in 4998 ms
[2025-08-21 09:52:14][350973421550272][6032 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:52:14][357879703053609][6093 ms][DEBUG] START check_frida
[2025-08-21 09:52:14][357879703053609][6093 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:52:14][357879703053609][6390 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2299984   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:52:14][357879703053609][6390 ms][DEBUG] check_frida: running
[2025-08-21 09:52:14][357879703053609][6390 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 09:52:14][357879703053609][6390 ms][DEBUG] START check_internet
[2025-08-21 09:52:14][357879703053609][6390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:52:14][357879703053609][6624 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.144/137.144/137.144/0.000 ms\n
[2025-08-21 09:52:14][357879703053609][6624 ms][DEBUG] check_internet: online
[2025-08-21 09:52:14][357879703053609][6624 ms][DEBUG] END   check_internet in 235 ms
[2025-08-21 09:52:14][357879703053609][6624 ms][DEBUG] START check_scloud
[2025-08-21 09:52:14][357879703053609][6625 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:52:15][357879703053609][6860 ms][DEBUG] SU: done in 235 ms; outu0_a118       7399 30745 23255584 77292 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:52:15][357879703053609][6860 ms][DEBUG] targetPkg: running
[2025-08-21 09:52:15][357879703053609][6860 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 09:52:15][357879703053609][6860 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:52:15][357879703053609][6860 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODc5NzAzMDUzNjA5IiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05CMEs3SlNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk1NyJ9'" -e "main()" -q"
[2025-08-21 09:52:15][357879703053609][6860 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:52:15][357879703053609][6860 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODc5NzAzMDUzNjA5IiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05CMEs3SlNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk1NyJ9'" -e "main()" -q"
[2025-08-21 09:52:17][357879703053609][9623 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3ODc5NzAzMDUzNjA5IiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05CMEs3SlNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk1NyJ9"\r\n
[2025-08-21 09:52:19][357879703053609][11326 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae4cff7c-f944-4881-a331-a8765db9822b","id":"QR_ae4cff7c-f944-4881-a331-a8765db9822b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:52:19][357879703053609][11326 ms][DEBUG] proc_open done in 4466 ms; code=0; res.len=3152
[2025-08-21 09:52:19][357879703053609][11326 ms][DEBUG] END   runCmdUntilRes#1 in 4466 ms
[2025-08-21 09:52:19][357879703053609][11326 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:52:30][355824553705678][0 ms][INFO] === Request start ===
[2025-08-21 09:52:30][355824553705678][1 ms][DEBUG] START check_frida
[2025-08-21 09:52:30][355824553705678][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:52:31][355824553705678][314 ms][DEBUG] SU: done in 313 ms; outroot          1313     1 2299984   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:52:31][355824553705678][314 ms][DEBUG] check_frida: running
[2025-08-21 09:52:31][355824553705678][314 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 09:52:31][355824553705678][314 ms][DEBUG] START check_internet
[2025-08-21 09:52:31][355824553705678][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:52:31][355824553705678][626 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.942/225.942/225.942/0.000 ms\n
[2025-08-21 09:52:31][355824553705678][627 ms][DEBUG] check_internet: online
[2025-08-21 09:52:31][355824553705678][627 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 09:52:31][355824553705678][627 ms][DEBUG] START check_scloud
[2025-08-21 09:52:31][355824553705678][627 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:52:31][355824553705678][923 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23255616 77892 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:52:31][355824553705678][923 ms][DEBUG] targetPkg: running
[2025-08-21 09:52:31][355824553705678][923 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 09:52:31][355824553705678][923 ms][DEBUG] rawBody.length=1160
[2025-08-21 09:52:31][355824553705678][923 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODI0NTUzNzA1Njc4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg2MDRLVEhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODA1In0='" -e "main()" -q"
[2025-08-21 09:52:31][355824553705678][923 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:52:31][355824553705678][923 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODI0NTUzNzA1Njc4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg2MDRLVEhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODA1In0='" -e "main()" -q"
[2025-08-21 09:52:34][355824553705678][3719 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODI0NTUzNzA1Njc4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg2MDRLVEhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODA1In0="\r\n
[2025-08-21 09:52:38][355824553705678][7375 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_587c7841-4d8a-45e3-9a2c-fc77b3817d24","id":"QR_587c7841-4d8a-45e3-9a2c-fc77b3817d24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:52:38][355824553705678][7375 ms][DEBUG] proc_open done in 6452 ms; code=0; res.len=3152
[2025-08-21 09:52:38][355824553705678][7375 ms][DEBUG] END   runCmdUntilRes#1 in 6452 ms
[2025-08-21 09:52:38][355824553705678][7375 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:53:07][354916447291674][0 ms][INFO] === Request start ===
[2025-08-21 09:53:07][354916447291674][1 ms][DEBUG] START check_frida
[2025-08-21 09:53:07][354916447291674][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:53:07][354916447291674][302 ms][DEBUG] SU: done in 301 ms; outroot          1313     1 2283564   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:53:07][354916447291674][302 ms][DEBUG] check_frida: running
[2025-08-21 09:53:07][354916447291674][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 09:53:07][354916447291674][303 ms][DEBUG] START check_scloud
[2025-08-21 09:53:07][354916447291674][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:53:08][354916447291674][614 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23255648 77176 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:53:08][354916447291674][614 ms][DEBUG] targetPkg: running
[2025-08-21 09:53:08][354916447291674][614 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 09:53:08][354916447291674][614 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:53:08][354916447291674][615 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQ3MjkxNjc0IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDRSMlFQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY0MCJ9'" -e "main()" -q"
[2025-08-21 09:53:08][354916447291674][615 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:53:08][354916447291674][615 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQ3MjkxNjc0IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDRSMlFQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY0MCJ9'" -e "main()" -q"
[2025-08-21 09:53:11][354916447291674][3426 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTE2NDQ3MjkxNjc0IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDRSMlFQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY0MCJ9"\r\n
[2025-08-21 09:53:13][354916447291674][6035 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a04fce5-4127-45da-9d65-9abadcbb7009","id":"QR_7a04fce5-4127-45da-9d65-9abadcbb7009","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:53:13][354916447291674][6035 ms][DEBUG] proc_open done in 5420 ms; code=0; res.len=3152
[2025-08-21 09:53:13][354916447291674][6036 ms][DEBUG] END   runCmdUntilRes#1 in 5421 ms
[2025-08-21 09:53:13][354916447291674][6036 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:54:05][352737401753042][0 ms][INFO] === Request start ===
[2025-08-21 09:54:05][352737401753042][1 ms][DEBUG] START check_frida
[2025-08-21 09:54:05][352737401753042][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:54:05][352737401753042][249 ms][DEBUG] SU: done in 248 ms; outroot          1313     1 2283564   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:54:05][352737401753042][249 ms][DEBUG] check_frida: running
[2025-08-21 09:54:05][352737401753042][249 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 09:54:05][352737401753042][249 ms][DEBUG] START check_internet
[2025-08-21 09:54:05][352737401753042][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:54:06][352737401753042][560 ms][DEBUG] SU: done in 311 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.224/205.224/205.224/0.000 ms\n
[2025-08-21 09:54:06][352737401753042][560 ms][DEBUG] check_internet: online
[2025-08-21 09:54:06][352737401753042][560 ms][DEBUG] END   check_internet in 311 ms
[2025-08-21 09:54:06][352737401753042][560 ms][DEBUG] START check_scloud
[2025-08-21 09:54:06][352737401753042][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:54:06][352737401753042][810 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23255680 77756 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:54:06][352737401753042][810 ms][DEBUG] targetPkg: running
[2025-08-21 09:54:06][352737401753042][810 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 09:54:06][352737401753042][810 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:54:06][352737401753042][810 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzM3NDAxNzUzMDQyIiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDNEJTUkhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQ3NCJ9'" -e "main()" -q"
[2025-08-21 09:54:06][352737401753042][810 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:54:06][352737401753042][810 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzM3NDAxNzUzMDQyIiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDNEJTUkhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQ3NCJ9'" -e "main()" -q"
[2025-08-21 09:54:09][352737401753042][3622 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzM3NDAxNzUzMDQyIiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDNEJTUkhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQ3NCJ9"\r\n
[2025-08-21 09:54:11][352737401753042][5543 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90fbffcc-e330-4356-ac22-eff056864b17","id":"QR_90fbffcc-e330-4356-ac22-eff056864b17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:54:11][352737401753042][5543 ms][DEBUG] proc_open done in 4733 ms; code=0; res.len=3152
[2025-08-21 09:54:11][352737401753042][5543 ms][DEBUG] END   runCmdUntilRes#1 in 4733 ms
[2025-08-21 09:54:11][352737401753042][5543 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:57:08][355326625610233][1 ms][INFO] === Request start ===
[2025-08-21 09:57:08][355326625610233][1 ms][DEBUG] START check_frida
[2025-08-21 09:57:08][355326625610233][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:57:08][355326625610233][320 ms][DEBUG] SU: done in 318 ms; outroot          1313     1 2283564   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:57:08][355326625610233][320 ms][DEBUG] check_frida: running
[2025-08-21 09:57:08][355326625610233][320 ms][DEBUG] END   check_frida in 319 ms
[2025-08-21 09:57:08][355326625610233][320 ms][DEBUG] START check_scloud
[2025-08-21 09:57:08][355326625610233][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:57:08][355326625610233][603 ms][DEBUG] SU: done in 283 ms; outu0_a118       7399 30745 23255712 77464 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:57:08][355326625610233][603 ms][DEBUG] targetPkg: running
[2025-08-21 09:57:08][355326625610233][603 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 09:57:08][355326625610233][603 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:57:08][355326625610233][603 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzI2NjI1NjEwMjMzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1g4MDVHWDFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA2MSJ9'" -e "main()" -q"
[2025-08-21 09:57:08][355326625610233][603 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:57:08][355326625610233][603 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzI2NjI1NjEwMjMzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1g4MDVHWDFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA2MSJ9'" -e "main()" -q"
[2025-08-21 09:57:10][357153472076310][1 ms][INFO] === Request start ===
[2025-08-21 09:57:11][355326625610233][3428 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MzI2NjI1NjEwMjMzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1g4MDVHWDFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA2MSJ9"\r\n
[2025-08-21 09:57:15][355326625610233][6881 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8b1a49b-bbc1-4a02-8ac5-80b20c7f83fe","id":"QR_b8b1a49b-bbc1-4a02-8ac5-80b20c7f83fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:57:15][355326625610233][6881 ms][DEBUG] proc_open done in 6278 ms; code=0; res.len=3152
[2025-08-21 09:57:15][355326625610233][6881 ms][DEBUG] END   runCmdUntilRes#1 in 6278 ms
[2025-08-21 09:57:15][355326625610233][6881 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:57:15][357153472076310][5067 ms][DEBUG] START check_frida
[2025-08-21 09:57:15][357153472076310][5067 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:57:15][357153472076310][5379 ms][DEBUG] SU: done in 313 ms; outroot          1313     1 2299984   4512 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:57:15][357153472076310][5379 ms][DEBUG] check_frida: running
[2025-08-21 09:57:15][357153472076310][5379 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 09:57:15][357153472076310][5379 ms][DEBUG] START check_scloud
[2025-08-21 09:57:15][357153472076310][5379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:57:16][357153472076310][5676 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23255744 78036 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:57:16][357153472076310][5676 ms][DEBUG] targetPkg: running
[2025-08-21 09:57:16][357153472076310][5676 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 09:57:16][357153472076310][5676 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:57:16][357153472076310][5676 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MTUzNDcyMDc2MzEwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDEzSkpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk4MSJ9'" -e "main()" -q"
[2025-08-21 09:57:16][357153472076310][5676 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:57:16][357153472076310][5676 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MTUzNDcyMDc2MzEwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDEzSkpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk4MSJ9'" -e "main()" -q"
[2025-08-21 09:57:18][357153472076310][8503 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MTUzNDcyMDc2MzEwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDEzSkpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk4MSJ9"\r\n
[2025-08-21 09:57:20][357153472076310][10503 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ff01499-b0c9-4a81-a544-40f96ff310eb","id":"QR_4ff01499-b0c9-4a81-a544-40f96ff310eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:57:20][357153472076310][10503 ms][DEBUG] proc_open done in 4827 ms; code=0; res.len=3152
[2025-08-21 09:57:20][357153472076310][10503 ms][DEBUG] END   runCmdUntilRes#1 in 4827 ms
[2025-08-21 09:57:20][357153472076310][10503 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:58:07][350026554748096][0 ms][INFO] === Request start ===
[2025-08-21 09:58:07][350026554748096][1 ms][DEBUG] START check_frida
[2025-08-21 09:58:07][350026554748096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:58:07][350026554748096][253 ms][DEBUG] SU: done in 252 ms; outroot          1313     1 2283564   4484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:58:07][350026554748096][254 ms][DEBUG] check_frida: running
[2025-08-21 09:58:07][350026554748096][254 ms][DEBUG] END   check_frida in 253 ms
[2025-08-21 09:58:07][350026554748096][254 ms][DEBUG] START check_internet
[2025-08-21 09:58:07][350026554748096][254 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:58:08][350026554748096][754 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.732/201.732/201.732/0.000 ms\n
[2025-08-21 09:58:08][350026554748096][754 ms][DEBUG] check_internet: online
[2025-08-21 09:58:08][350026554748096][754 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 09:58:08][350026554748096][754 ms][DEBUG] START check_scloud
[2025-08-21 09:58:08][350026554748096][754 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:58:08][350026554748096][1034 ms][DEBUG] SU: done in 280 ms; outu0_a118       7399 30745 23255776 76888 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:58:08][350026554748096][1034 ms][DEBUG] targetPkg: running
[2025-08-21 09:58:08][350026554748096][1034 ms][DEBUG] END   check_scloud in 280 ms
[2025-08-21 09:58:08][350026554748096][1034 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:58:08][350026554748096][1034 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI2NTU0NzQ4MDk2IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc2MEI4TjBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwNCJ9'" -e "main()" -q"
[2025-08-21 09:58:08][350026554748096][1034 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:58:08][350026554748096][1034 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI2NTU0NzQ4MDk2IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc2MEI4TjBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwNCJ9'" -e "main()" -q"
[2025-08-21 09:58:11][350026554748096][3846 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDI2NTU0NzQ4MDk2IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc2MEI4TjBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwNCJ9"\r\n
[2025-08-21 09:58:13][350026554748096][5908 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a8027f1-35d3-48c1-8455-b7635c6ee299","id":"QR_6a8027f1-35d3-48c1-8455-b7635c6ee299","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:58:13][350026554748096][5908 ms][DEBUG] proc_open done in 4874 ms; code=0; res.len=3152
[2025-08-21 09:58:13][350026554748096][5908 ms][DEBUG] END   runCmdUntilRes#1 in 4874 ms
[2025-08-21 09:58:13][350026554748096][5908 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 09:58:21][351642482328014][0 ms][INFO] === Request start ===
[2025-08-21 09:58:21][351642482328014][1 ms][DEBUG] START check_frida
[2025-08-21 09:58:21][351642482328014][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 09:58:22][351642482328014][316 ms][DEBUG] SU: done in 315 ms; outroot          1313     1 2299984   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 09:58:22][351642482328014][316 ms][DEBUG] check_frida: running
[2025-08-21 09:58:22][351642482328014][316 ms][DEBUG] END   check_frida in 315 ms
[2025-08-21 09:58:22][351642482328014][316 ms][DEBUG] START check_internet
[2025-08-21 09:58:22][351642482328014][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 09:58:22][351642482328014][659 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.427/243.427/243.427/0.000 ms\n
[2025-08-21 09:58:22][351642482328014][659 ms][DEBUG] check_internet: online
[2025-08-21 09:58:22][351642482328014][659 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 09:58:22][351642482328014][659 ms][DEBUG] START check_scloud
[2025-08-21 09:58:22][351642482328014][659 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 09:58:22][351642482328014][894 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23255808 77392 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 09:58:22][351642482328014][894 ms][DEBUG] targetPkg: running
[2025-08-21 09:58:22][351642482328014][894 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 09:58:22][351642482328014][894 ms][DEBUG] rawBody.length=1161
[2025-08-21 09:58:22][351642482328014][894 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDgyMzI4MDE0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDJDRUFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAxMSJ9'" -e "main()" -q"
[2025-08-21 09:58:22][351642482328014][894 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 09:58:22][351642482328014][894 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDgyMzI4MDE0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDJDRUFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAxMSJ9'" -e "main()" -q"
[2025-08-21 09:58:25][351642482328014][3690 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjQyNDgyMzI4MDE0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDJDRUFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAxMSJ9"\r\n
[2025-08-21 09:58:28][351642482328014][6158 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ca6feda-090b-422b-b6e4-a609bf5c9dfa","id":"QR_6ca6feda-090b-422b-b6e4-a609bf5c9dfa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 09:58:28][351642482328014][6158 ms][DEBUG] proc_open done in 5264 ms; code=0; res.len=3152
[2025-08-21 09:58:28][351642482328014][6158 ms][DEBUG] END   runCmdUntilRes#1 in 5265 ms
[2025-08-21 09:58:28][351642482328014][6158 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:00:06][350938286345365][1 ms][INFO] === Request start ===
[2025-08-21 10:00:06][350938286345365][2 ms][DEBUG] START check_frida
[2025-08-21 10:00:06][350938286345365][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:00:07][350938286345365][304 ms][DEBUG] SU: done in 302 ms; outroot          1313     1 2283564   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:00:07][350938286345365][304 ms][DEBUG] check_frida: running
[2025-08-21 10:00:07][350938286345365][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 10:00:07][350938286345365][304 ms][DEBUG] START check_internet
[2025-08-21 10:00:07][350938286345365][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:00:07][350938286345365][772 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.554/201.554/201.554/0.000 ms\n
[2025-08-21 10:00:07][350938286345365][773 ms][DEBUG] check_internet: online
[2025-08-21 10:00:07][350938286345365][773 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 10:00:07][350938286345365][773 ms][DEBUG] START check_scloud
[2025-08-21 10:00:07][350938286345365][773 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:00:07][350938286345365][1022 ms][DEBUG] SU: done in 249 ms; outu0_a118       7399 30745 23255840 77924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:00:07][350938286345365][1022 ms][DEBUG] targetPkg: running
[2025-08-21 10:00:07][350938286345365][1022 ms][DEBUG] END   check_scloud in 249 ms
[2025-08-21 10:00:07][350938286345365][1022 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:00:07][350938286345365][1022 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM4OSJ9'" -e "main()" -q"
[2025-08-21 10:00:07][350938286345365][1022 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:00:07][350938286345365][1022 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM4OSJ9'" -e "main()" -q"
[2025-08-21 10:00:10][350938286345365][3818 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM4OSJ9"\r\n
[2025-08-21 10:00:12][350938286345365][5771 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 10:00:12][350938286345365][5771 ms][DEBUG] proc_open done in 4749 ms; code=0; res.len=93
[2025-08-21 10:00:12][350938286345365][5771 ms][DEBUG] END   runCmdUntilRes#1 in 4749 ms
[2025-08-21 10:00:12][350938286345365][5771 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 10:00:13][][0 ms][INFO] === Request start ===
[2025-08-21 10:00:13][][0 ms][DEBUG] START check_frida
[2025-08-21 10:00:13][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:00:13][][303 ms][DEBUG] SU: done in 302 ms; outroot          1313     1 2299984   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:00:13][][303 ms][DEBUG] check_frida: running
[2025-08-21 10:00:13][][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 10:00:13][][303 ms][DEBUG] START check_internet
[2025-08-21 10:00:13][][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:00:13][][553 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.640/153.640/153.640/0.000 ms\n
[2025-08-21 10:00:13][][553 ms][DEBUG] check_internet: online
[2025-08-21 10:00:13][][553 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 10:00:13][][553 ms][DEBUG] START check_scloud
[2025-08-21 10:00:13][][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:00:13][][834 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23255872 77372 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:00:13][][834 ms][DEBUG] targetPkg: running
[2025-08-21 10:00:13][][834 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:00:13][][834 ms][DEBUG] rawBody.length=1131
[2025-08-21 10:00:13][][834 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU5MCJ9'" -e "main()" -q"
[2025-08-21 10:00:13][][834 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:00:13][][834 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU5MCJ9'" -e "main()" -q"
[2025-08-21 10:00:16][][3630 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU5MCJ9"\r\n
[2025-08-21 10:00:18][][5145 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 10:00:18][][5145 ms][DEBUG] proc_open done in 4311 ms; code=0; res.len=107
[2025-08-21 10:00:18][][5145 ms][DEBUG] END   runCmdUntilRes#1 in 4311 ms
[2025-08-21 10:00:18][][5145 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 10:00:18][][0 ms][INFO] === Request start ===
[2025-08-21 10:00:18][][1 ms][DEBUG] START check_frida
[2025-08-21 10:00:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:00:18][][289 ms][DEBUG] SU: done in 288 ms; outroot          1313     1 2299984   4520 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:00:18][][289 ms][DEBUG] check_frida: running
[2025-08-21 10:00:18][][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 10:00:18][][289 ms][DEBUG] START check_internet
[2025-08-21 10:00:18][][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:00:19][][602 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.411/186.411/186.411/0.000 ms\n
[2025-08-21 10:00:19][][602 ms][DEBUG] check_internet: online
[2025-08-21 10:00:19][][602 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 10:00:19][][602 ms][DEBUG] START check_scloud
[2025-08-21 10:00:19][][602 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:00:19][][914 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23255904 77932 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:00:19][][914 ms][DEBUG] targetPkg: running
[2025-08-21 10:00:19][][914 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 10:00:19][][914 ms][DEBUG] rawBody.length=1131
[2025-08-21 10:00:19][][914 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQwMiJ9'" -e "main()" -q"
[2025-08-21 10:00:19][][914 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:00:19][][914 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQwMiJ9'" -e "main()" -q"
[2025-08-21 10:00:22][][3679 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQwMiJ9"\r\n
[2025-08-21 10:00:23][][5163 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 10:00:23][][5163 ms][DEBUG] proc_open done in 4249 ms; code=0; res.len=107
[2025-08-21 10:00:23][][5163 ms][DEBUG] END   runCmdUntilRes#1 in 4249 ms
[2025-08-21 10:00:23][][5163 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 10:00:25][350938286345365][0 ms][INFO] === Request start ===
[2025-08-21 10:00:25][350938286345365][1 ms][DEBUG] START check_frida
[2025-08-21 10:00:25][350938286345365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:00:26][350938286345365][258 ms][DEBUG] SU: done in 256 ms; outroot          1313     1 2299984   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:00:26][350938286345365][258 ms][DEBUG] check_frida: running
[2025-08-21 10:00:26][350938286345365][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 10:00:26][350938286345365][258 ms][DEBUG] START check_internet
[2025-08-21 10:00:26][350938286345365][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:00:26][350938286345365][555 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.018/200.018/200.018/0.000 ms\n
[2025-08-21 10:00:26][350938286345365][555 ms][DEBUG] check_internet: online
[2025-08-21 10:00:26][350938286345365][555 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 10:00:26][350938286345365][555 ms][DEBUG] START check_scloud
[2025-08-21 10:00:26][350938286345365][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:00:26][350938286345365][851 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23255936 77420 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:00:26][350938286345365][851 ms][DEBUG] targetPkg: running
[2025-08-21 10:00:26][350938286345365][851 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:00:26][350938286345365][852 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:00:26][350938286345365][852 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzQ1In0='" -e "main()" -q"
[2025-08-21 10:00:26][350938286345365][852 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:00:26][350938286345365][852 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzQ1In0='" -e "main()" -q"
[2025-08-21 10:00:29][350938286345365][3679 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzQ1In0="\r\n
[2025-08-21 10:00:32][350938286345365][6522 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 10:00:32][350938286345365][6522 ms][DEBUG] proc_open done in 5670 ms; code=0; res.len=93
[2025-08-21 10:00:32][350938286345365][6523 ms][DEBUG] END   runCmdUntilRes#1 in 5671 ms
[2025-08-21 10:00:32][350938286345365][6523 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 10:00:32][][0 ms][INFO] === Request start ===
[2025-08-21 10:00:32][][1 ms][DEBUG] START check_frida
[2025-08-21 10:00:32][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:00:32][][300 ms][DEBUG] SU: done in 299 ms; outroot          1313     1 2299984   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:00:32][][301 ms][DEBUG] check_frida: running
[2025-08-21 10:00:32][][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 10:00:32][][301 ms][DEBUG] START check_internet
[2025-08-21 10:00:32][][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:00:33][][598 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.171/204.171/204.171/0.000 ms\n
[2025-08-21 10:00:33][][598 ms][DEBUG] check_internet: online
[2025-08-21 10:00:33][][598 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 10:00:33][][598 ms][DEBUG] START check_scloud
[2025-08-21 10:00:33][][598 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:00:33][][894 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23255968 77980 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:00:33][][894 ms][DEBUG] targetPkg: running
[2025-08-21 10:00:33][][894 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:00:33][][894 ms][DEBUG] rawBody.length=1130
[2025-08-21 10:00:33][][895 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTQwIn0='" -e "main()" -q"
[2025-08-21 10:00:33][][895 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:00:33][][895 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTQwIn0='" -e "main()" -q"
[2025-08-21 10:00:36][][3690 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTQwIn0="\r\n
[2025-08-21 10:00:38][][5565 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 10:00:38][][5565 ms][DEBUG] proc_open done in 4670 ms; code=0; res.len=107
[2025-08-21 10:00:38][][5565 ms][DEBUG] END   runCmdUntilRes#1 in 4670 ms
[2025-08-21 10:00:38][][5565 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 10:00:38][][0 ms][INFO] === Request start ===
[2025-08-21 10:00:38][][1 ms][DEBUG] START check_frida
[2025-08-21 10:00:38][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:00:38][][310 ms][DEBUG] SU: done in 309 ms; outroot          1313     1 2299984   4476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:00:38][][310 ms][DEBUG] check_frida: running
[2025-08-21 10:00:38][][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 10:00:38][][310 ms][DEBUG] START check_internet
[2025-08-21 10:00:38][][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:00:39][][544 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.819/149.819/149.819/0.000 ms\n
[2025-08-21 10:00:39][][544 ms][DEBUG] check_internet: online
[2025-08-21 10:00:39][][544 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 10:00:39][][544 ms][DEBUG] START check_scloud
[2025-08-21 10:00:39][][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:00:39][][841 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23256000 77748 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:00:39][][841 ms][DEBUG] targetPkg: running
[2025-08-21 10:00:39][][841 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:00:39][][841 ms][DEBUG] rawBody.length=1130
[2025-08-21 10:00:39][][841 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDkzIn0='" -e "main()" -q"
[2025-08-21 10:00:39][][841 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:00:39][][841 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDkzIn0='" -e "main()" -q"
[2025-08-21 10:00:42][][3637 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDkzIn0="\r\n
[2025-08-21 10:00:44][][5621 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 10:00:44][][5621 ms][DEBUG] proc_open done in 4780 ms; code=0; res.len=107
[2025-08-21 10:00:44][][5621 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-21 10:00:44][][5621 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 10:01:08][350536253873326][0 ms][INFO] === Request start ===
[2025-08-21 10:01:08][350536253873326][1 ms][DEBUG] START check_frida
[2025-08-21 10:01:08][350536253873326][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:01:08][350536253873326][307 ms][DEBUG] SU: done in 305 ms; outroot          1313     1 2283564   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:01:08][350536253873326][307 ms][DEBUG] check_frida: running
[2025-08-21 10:01:08][350536253873326][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 10:01:08][350536253873326][307 ms][DEBUG] START check_scloud
[2025-08-21 10:01:08][350536253873326][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:01:09][350536253873326][541 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23256032 77488 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:01:09][350536253873326][541 ms][DEBUG] targetPkg: running
[2025-08-21 10:01:09][350536253873326][541 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 10:01:09][350536253873326][541 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:01:09][350536253873326][541 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTM2MjUzODczMzI2IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MDEyR1BQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg5OSJ9'" -e "main()" -q"
[2025-08-21 10:01:09][350536253873326][541 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:01:09][350536253873326][541 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTM2MjUzODczMzI2IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MDEyR1BQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg5OSJ9'" -e "main()" -q"
[2025-08-21 10:01:11][350536253873326][3321 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTM2MjUzODczMzI2IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MDEyR1BQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg5OSJ9"\r\n
[2025-08-21 10:01:14][350536253873326][5711 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35efaccc-4888-4657-806b-ac7f2ab14733","id":"QR_35efaccc-4888-4657-806b-ac7f2ab14733","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:01:14][350536253873326][5712 ms][DEBUG] proc_open done in 5171 ms; code=0; res.len=3152
[2025-08-21 10:01:14][350536253873326][5712 ms][DEBUG] END   runCmdUntilRes#1 in 5171 ms
[2025-08-21 10:01:14][350536253873326][5712 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:02:08][355450533790703][1 ms][INFO] === Request start ===
[2025-08-21 10:02:08][355450533790703][2 ms][DEBUG] START check_frida
[2025-08-21 10:02:08][355450533790703][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:02:09][355450533790703][309 ms][DEBUG] SU: done in 307 ms; outroot          1313     1 2283564   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:02:09][355450533790703][309 ms][DEBUG] check_frida: running
[2025-08-21 10:02:09][355450533790703][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 10:02:09][355450533790703][309 ms][DEBUG] START check_internet
[2025-08-21 10:02:09][355450533790703][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:02:09][355450533790703][621 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.072/215.072/215.072/0.000 ms\n
[2025-08-21 10:02:09][355450533790703][621 ms][DEBUG] check_internet: online
[2025-08-21 10:02:09][355450533790703][621 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 10:02:09][355450533790703][621 ms][DEBUG] START check_scloud
[2025-08-21 10:02:09][355450533790703][621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:02:09][350938283249263][1 ms][INFO] === Request start ===
[2025-08-21 10:02:09][355450533790703][918 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23256064 76960 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:02:09][355450533790703][918 ms][DEBUG] targetPkg: running
[2025-08-21 10:02:09][355450533790703][918 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:02:09][355450533790703][918 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:02:09][355450533790703][918 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDUwNTMzNzkwNzAzIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMTdDTE5GIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgwOSJ9'" -e "main()" -q"
[2025-08-21 10:02:09][355450533790703][918 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:02:09][355450533790703][918 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDUwNTMzNzkwNzAzIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMTdDTE5GIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgwOSJ9'" -e "main()" -q"
[2025-08-21 10:02:12][355450533790703][3646 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NDUwNTMzNzkwNzAzIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMTdDTE5GIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgwOSJ9"\r\n
[2025-08-21 10:02:14][355450533790703][6115 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be1bd23a-e11d-4d0e-82f2-d2cfa80cc1ce","id":"QR_be1bd23a-e11d-4d0e-82f2-d2cfa80cc1ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:02:14][355450533790703][6115 ms][DEBUG] proc_open done in 5197 ms; code=0; res.len=3152
[2025-08-21 10:02:14][355450533790703][6115 ms][DEBUG] END   runCmdUntilRes#1 in 5197 ms
[2025-08-21 10:02:14][355450533790703][6115 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:02:15][350938283249263][6041 ms][DEBUG] START check_frida
[2025-08-21 10:02:15][350938283249263][6041 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:02:15][350938283249263][6291 ms][DEBUG] SU: done in 249 ms; outroot          1313     1 2299984   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:02:15][350938283249263][6291 ms][DEBUG] check_frida: running
[2025-08-21 10:02:15][350938283249263][6291 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 10:02:15][350938283249263][6291 ms][DEBUG] START check_internet
[2025-08-21 10:02:15][350938283249263][6291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:02:16][350938283249263][6510 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=125 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 125.447/125.447/125.447/0.000 ms\n
[2025-08-21 10:02:16][350938283249263][6510 ms][DEBUG] check_internet: online
[2025-08-21 10:02:16][350938283249263][6510 ms][DEBUG] END   check_internet in 219 ms
[2025-08-21 10:02:16][350938283249263][6510 ms][DEBUG] START check_scloud
[2025-08-21 10:02:16][350938283249263][6510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:02:16][350938283249263][6775 ms][DEBUG] SU: done in 266 ms; outu0_a118       7399 30745 23256096 77548 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:02:16][350938283249263][6775 ms][DEBUG] targetPkg: running
[2025-08-21 10:02:16][350938283249263][6775 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 10:02:16][350938283249263][6775 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:02:16][350938283249263][6775 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4MjgzMjQ5MjYzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhDMEM2UVJQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk5MSJ9'" -e "main()" -q"
[2025-08-21 10:02:16][350938283249263][6775 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:02:16][350938283249263][6775 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4MjgzMjQ5MjYzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhDMEM2UVJQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk5MSJ9'" -e "main()" -q"
[2025-08-21 10:02:19][350938283249263][9778 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4MjgzMjQ5MjYzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhDMEM2UVJQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk5MSJ9"\r\n
[2025-08-21 10:02:21][350938283249263][11922 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98712584-95ac-4e3b-b4c0-ccaaf2160227","id":"QR_98712584-95ac-4e3b-b4c0-ccaaf2160227","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:02:21][350938283249263][11922 ms][DEBUG] proc_open done in 5147 ms; code=0; res.len=3152
[2025-08-21 10:02:21][350938283249263][11922 ms][DEBUG] END   runCmdUntilRes#1 in 5147 ms
[2025-08-21 10:02:21][350938283249263][11922 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:02:28][351798161277516][0 ms][INFO] === Request start ===
[2025-08-21 10:02:28][351798161277516][1 ms][DEBUG] START check_frida
[2025-08-21 10:02:28][351798161277516][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:02:29][351798161277516][309 ms][DEBUG] SU: done in 308 ms; outroot          1313     1 2299984   4364 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:02:29][351798161277516][309 ms][DEBUG] check_frida: running
[2025-08-21 10:02:29][351798161277516][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 10:02:29][351798161277516][309 ms][DEBUG] START check_internet
[2025-08-21 10:02:29][351798161277516][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:02:29][351798161277516][652 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.552/252.552/252.552/0.000 ms\n
[2025-08-21 10:02:29][351798161277516][653 ms][DEBUG] check_internet: online
[2025-08-21 10:02:29][351798161277516][653 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 10:02:29][351798161277516][653 ms][DEBUG] START check_scloud
[2025-08-21 10:02:29][351798161277516][653 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:02:29][351798161277516][980 ms][DEBUG] SU: done in 327 ms; outu0_a118       7399 30745 23494036 104432 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:02:29][351798161277516][980 ms][DEBUG] targetPkg: running
[2025-08-21 10:02:29][351798161277516][980 ms][DEBUG] END   check_scloud in 327 ms
[2025-08-21 10:02:29][351798161277516][980 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:02:29][351798161277516][980 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzk4MTYxMjc3NTE2IiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MTQxVzhQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA4NCJ9'" -e "main()" -q"
[2025-08-21 10:02:29][351798161277516][980 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:02:29][351798161277516][980 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzk4MTYxMjc3NTE2IiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MTQxVzhQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA4NCJ9'" -e "main()" -q"
[2025-08-21 10:02:32][351798161277516][3753 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzk4MTYxMjc3NTE2IiwibW9kZWwiOiJTTS1GNzMxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MTQxVzhQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA4NCJ9"\r\n
[2025-08-21 10:02:34][351798161277516][5643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_534cf5d7-bd91-44d9-b265-bd97c009f860","id":"QR_534cf5d7-bd91-44d9-b265-bd97c009f860","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:02:34][351798161277516][5644 ms][DEBUG] proc_open done in 4663 ms; code=0; res.len=3152
[2025-08-21 10:02:34][351798161277516][5644 ms][DEBUG] END   runCmdUntilRes#1 in 4663 ms
[2025-08-21 10:02:34][351798161277516][5644 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:03:06][350942550305717][0 ms][INFO] === Request start ===
[2025-08-21 10:03:06][350942550305717][0 ms][DEBUG] START check_frida
[2025-08-21 10:03:06][350942550305717][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:03:07][350942550305717][309 ms][DEBUG] SU: done in 309 ms; outroot          1313     1 2283564   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:03:07][350942550305717][309 ms][DEBUG] check_frida: running
[2025-08-21 10:03:07][350942550305717][309 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 10:03:07][350942550305717][309 ms][DEBUG] START check_scloud
[2025-08-21 10:03:07][350942550305717][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:03:07][350942550305717][606 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23494068 104748 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:03:07][350942550305717][606 ms][DEBUG] targetPkg: running
[2025-08-21 10:03:07][350942550305717][606 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:03:07][350942550305717][606 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:03:07][350942550305717][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTQyNTUwMzA1NzE3IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEVWOEdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUyNSJ9'" -e "main()" -q"
[2025-08-21 10:03:07][350942550305717][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:03:07][350942550305717][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTQyNTUwMzA1NzE3IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEVWOEdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUyNSJ9'" -e "main()" -q"
[2025-08-21 10:03:10][350942550305717][3387 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTQyNTUwMzA1NzE3IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEVWOEdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUyNSJ9"\r\n
[2025-08-21 10:03:12][350942550305717][5433 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b5cc9703-7d23-4fe0-a70f-b44f542a4157","id":"QR_b5cc9703-7d23-4fe0-a70f-b44f542a4157","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:03:12][350942550305717][5434 ms][DEBUG] proc_open done in 4828 ms; code=0; res.len=3152
[2025-08-21 10:03:12][350942550305717][5434 ms][DEBUG] END   runCmdUntilRes#1 in 4828 ms
[2025-08-21 10:03:12][350942550305717][5434 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:07:10][351240642810821][1 ms][INFO] === Request start ===
[2025-08-21 10:07:10][351240642810821][2 ms][DEBUG] START check_frida
[2025-08-21 10:07:10][351240642810821][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:07:11][351240642810821][249 ms][DEBUG] SU: done in 247 ms; outroot          1313     1 2282552   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:07:11][351240642810821][249 ms][DEBUG] check_frida: running
[2025-08-21 10:07:11][351240642810821][249 ms][DEBUG] END   check_frida in 247 ms
[2025-08-21 10:07:11][351240642810821][249 ms][DEBUG] START check_scloud
[2025-08-21 10:07:11][351240642810821][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:07:11][351240642810821][531 ms][DEBUG] SU: done in 282 ms; outu0_a118       7399 30745 23494100 105400 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:07:11][351240642810821][531 ms][DEBUG] targetPkg: running
[2025-08-21 10:07:11][351240642810821][531 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 10:07:11][351240642810821][531 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:07:11][351240642810821][531 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQyODEwODIxIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEpXNVBYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAyOSJ9'" -e "main()" -q"
[2025-08-21 10:07:11][351240642810821][531 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:07:11][351240642810821][531 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQyODEwODIxIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEpXNVBYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAyOSJ9'" -e "main()" -q"
[2025-08-21 10:07:14][351240642810821][3342 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQyODEwODIxIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MEpXNVBYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAyOSJ9"\r\n
[2025-08-21 10:07:16][351240642810821][5497 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a11e1c4-99a0-45a9-8b2e-d364348374ba","id":"QR_2a11e1c4-99a0-45a9-8b2e-d364348374ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:07:16][351240642810821][5498 ms][DEBUG] proc_open done in 4966 ms; code=0; res.len=3152
[2025-08-21 10:07:16][351240642810821][5498 ms][DEBUG] END   runCmdUntilRes#1 in 4966 ms
[2025-08-21 10:07:16][351240642810821][5498 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:07:22][356414811185100][1 ms][INFO] === Request start ===
[2025-08-21 10:07:22][356414811185100][2 ms][DEBUG] START check_frida
[2025-08-21 10:07:22][356414811185100][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:07:22][356414811185100][297 ms][DEBUG] SU: done in 296 ms; outroot          1313     1 2299984   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:07:22][356414811185100][298 ms][DEBUG] check_frida: running
[2025-08-21 10:07:22][356414811185100][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 10:07:22][356414811185100][298 ms][DEBUG] START check_scloud
[2025-08-21 10:07:22][356414811185100][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:07:23][356414811185100][594 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23494132 107664 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:07:23][356414811185100][594 ms][DEBUG] targetPkg: running
[2025-08-21 10:07:23][356414811185100][594 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:07:23][356414811185100][594 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:07:23][356414811185100][594 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODExMTg1MTAwIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MTBNVEdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMwMSJ9'" -e "main()" -q"
[2025-08-21 10:07:23][356414811185100][594 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:07:23][356414811185100][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODExMTg1MTAwIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MTBNVEdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMwMSJ9'" -e "main()" -q"
[2025-08-21 10:07:25][356414811185100][3375 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE0ODExMTg1MTAwIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MTBNVEdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMwMSJ9"\r\n
[2025-08-21 10:07:28][356414811185100][5655 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ebc6aabc-f902-457f-8712-592b09a39ee4","id":"QR_ebc6aabc-f902-457f-8712-592b09a39ee4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:07:28][356414811185100][5656 ms][DEBUG] proc_open done in 5061 ms; code=0; res.len=3152
[2025-08-21 10:07:28][356414811185100][5656 ms][DEBUG] END   runCmdUntilRes#1 in 5061 ms
[2025-08-21 10:07:28][356414811185100][5656 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:09:04][354468118384081][0 ms][INFO] === Request start ===
[2025-08-21 10:09:04][354468118384081][1 ms][DEBUG] START check_frida
[2025-08-21 10:09:04][354468118384081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:09:04][354468118384081][265 ms][DEBUG] SU: done in 264 ms; outroot          1313     1 2283564   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:09:04][354468118384081][265 ms][DEBUG] check_frida: running
[2025-08-21 10:09:04][354468118384081][265 ms][DEBUG] END   check_frida in 264 ms
[2025-08-21 10:09:04][354468118384081][265 ms][DEBUG] START check_scloud
[2025-08-21 10:09:04][354468118384081][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:09:04][354468118384081][499 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23494164 108224 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:09:04][354468118384081][499 ms][DEBUG] targetPkg: running
[2025-08-21 10:09:04][354468118384081][499 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 10:09:04][354468118384081][499 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:09:04][354468118384081][499 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDY4MTE4Mzg0MDgxIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4yMVZEOE5SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg5NiJ9'" -e "main()" -q"
[2025-08-21 10:09:04][354468118384081][499 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:09:04][354468118384081][499 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDY4MTE4Mzg0MDgxIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4yMVZEOE5SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg5NiJ9'" -e "main()" -q"
[2025-08-21 10:09:07][354468118384081][3295 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDY4MTE4Mzg0MDgxIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4yMVZEOE5SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg5NiJ9"\r\n
[2025-08-21 10:09:09][354468118384081][5732 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5720bff8-96dd-4601-9e76-83b9fe4df41f","id":"QR_5720bff8-96dd-4601-9e76-83b9fe4df41f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:09:09][354468118384081][5732 ms][DEBUG] proc_open done in 5233 ms; code=0; res.len=3152
[2025-08-21 10:09:09][354468118384081][5732 ms][DEBUG] END   runCmdUntilRes#1 in 5233 ms
[2025-08-21 10:09:09][354468118384081][5732 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:10:09][353607431155279][0 ms][INFO] === Request start ===
[2025-08-21 10:10:09][353607431155279][0 ms][DEBUG] START check_frida
[2025-08-21 10:10:09][353607431155279][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:10:09][353607431155279][243 ms][DEBUG] SU: done in 243 ms; outroot          1313     1 2283564   4480 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:10:09][353607431155279][243 ms][DEBUG] check_frida: running
[2025-08-21 10:10:09][353607431155279][243 ms][DEBUG] END   check_frida in 243 ms
[2025-08-21 10:10:09][353607431155279][243 ms][DEBUG] START check_internet
[2025-08-21 10:10:09][353607431155279][243 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:10:10][353607431155279][759 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.108/197.108/197.108/0.000 ms\n
[2025-08-21 10:10:10][353607431155279][759 ms][DEBUG] check_internet: online
[2025-08-21 10:10:10][353607431155279][759 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 10:10:10][353607431155279][759 ms][DEBUG] START check_scloud
[2025-08-21 10:10:10][353607431155279][759 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:10:10][353607431155279][1024 ms][DEBUG] SU: done in 265 ms; outu0_a118       7399 30745 23494196 108784 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:10:10][353607431155279][1024 ms][DEBUG] targetPkg: running
[2025-08-21 10:10:10][353607431155279][1024 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 10:10:10][353607431155279][1024 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:10:10][353607431155279][1024 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjA3NDMxMTU1Mjc5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMTJBMzhBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkzMCJ9'" -e "main()" -q"
[2025-08-21 10:10:10][353607431155279][1024 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:10:10][353607431155279][1024 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjA3NDMxMTU1Mjc5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMTJBMzhBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkzMCJ9'" -e "main()" -q"
[2025-08-21 10:10:13][353607431155279][3789 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjA3NDMxMTU1Mjc5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMTJBMzhBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkzMCJ9"\r\n
[2025-08-21 10:10:15][353607431155279][5820 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb14da92-8cb0-443a-b096-064d129e1e39","id":"QR_eb14da92-8cb0-443a-b096-064d129e1e39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:10:15][353607431155279][5820 ms][DEBUG] proc_open done in 4796 ms; code=0; res.len=3152
[2025-08-21 10:10:15][353607431155279][5820 ms][DEBUG] END   runCmdUntilRes#1 in 4796 ms
[2025-08-21 10:10:15][353607431155279][5820 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:10:23][353684140732649][0 ms][INFO] === Request start ===
[2025-08-21 10:10:23][353684140732649][1 ms][DEBUG] START check_frida
[2025-08-21 10:10:23][353684140732649][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:10:23][353684140732649][296 ms][DEBUG] SU: done in 295 ms; outroot          1313     1 2299984   4484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:10:23][353684140732649][296 ms][DEBUG] check_frida: running
[2025-08-21 10:10:23][353684140732649][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 10:10:23][353684140732649][297 ms][DEBUG] START check_internet
[2025-08-21 10:10:23][353684140732649][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:10:23][353684140732649][578 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.446/170.446/170.446/0.000 ms\n
[2025-08-21 10:10:23][353684140732649][578 ms][DEBUG] check_internet: online
[2025-08-21 10:10:23][353684140732649][578 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 10:10:23][353684140732649][578 ms][DEBUG] START check_scloud
[2025-08-21 10:10:23][353684140732649][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:10:24][353684140732649][890 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23494228 109500 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:10:24][353684140732649][890 ms][DEBUG] targetPkg: running
[2025-08-21 10:10:24][353684140732649][890 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 10:10:24][353684140732649][890 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:10:24][353684140732649][890 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQwNzMyNjQ5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MDJKU0ZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE1MyJ9'" -e "main()" -q"
[2025-08-21 10:10:24][353684140732649][890 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:10:24][353684140732649][890 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQwNzMyNjQ5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MDJKU0ZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE1MyJ9'" -e "main()" -q"
[2025-08-21 10:10:26][353684140732649][3686 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjg0MTQwNzMyNjQ5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MDJKU0ZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE1MyJ9"\r\n
[2025-08-21 10:10:28][353684140732649][5373 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b052f9b-c34b-4fa4-ac7d-895d70fb3be6","id":"QR_4b052f9b-c34b-4fa4-ac7d-895d70fb3be6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:10:28][353684140732649][5373 ms][DEBUG] proc_open done in 4483 ms; code=0; res.len=3152
[2025-08-21 10:10:28][353684140732649][5374 ms][DEBUG] END   runCmdUntilRes#1 in 4483 ms
[2025-08-21 10:10:28][353684140732649][5374 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:12:07][350695340250490][0 ms][INFO] === Request start ===
[2025-08-21 10:12:07][350695340250490][1 ms][DEBUG] START check_frida
[2025-08-21 10:12:07][350695340250490][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:12:08][350695340250490][308 ms][DEBUG] SU: done in 307 ms; outroot          1313     1 2283564   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:12:08][350695340250490][308 ms][DEBUG] check_frida: running
[2025-08-21 10:12:08][350695340250490][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 10:12:08][350695340250490][308 ms][DEBUG] START check_internet
[2025-08-21 10:12:08][350695340250490][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:12:08][350695340250490][636 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.231/218.231/218.231/0.000 ms\n
[2025-08-21 10:12:08][350695340250490][636 ms][DEBUG] check_internet: online
[2025-08-21 10:12:08][350695340250490][636 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 10:12:08][350695340250490][636 ms][DEBUG] START check_scloud
[2025-08-21 10:12:08][350695340250490][636 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:12:08][350695340250490][886 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23494260 105812 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:12:08][350695340250490][886 ms][DEBUG] targetPkg: running
[2025-08-21 10:12:08][350695340250490][886 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 10:12:08][350695340250490][886 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:12:08][350695340250490][886 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjk1MzQwMjUwNDkwIiwibW9kZWwiOiJTTS1TOTA2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1QzMDNMR1RBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk1MyJ9'" -e "main()" -q"
[2025-08-21 10:12:08][350695340250490][886 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:12:08][350695340250490][886 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjk1MzQwMjUwNDkwIiwibW9kZWwiOiJTTS1TOTA2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1QzMDNMR1RBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk1MyJ9'" -e "main()" -q"
[2025-08-21 10:12:08][357576774003022][0 ms][INFO] === Request start ===
[2025-08-21 10:12:11][350695340250490][3682 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjk1MzQwMjUwNDkwIiwibW9kZWwiOiJTTS1TOTA2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1QzMDNMR1RBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk1MyJ9"\r\n
[2025-08-21 10:12:13][350695340250490][5978 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ba63a80-e0dc-4427-a05d-d6710c9d7f08","id":"QR_6ba63a80-e0dc-4427-a05d-d6710c9d7f08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:12:13][350695340250490][5979 ms][DEBUG] proc_open done in 5093 ms; code=0; res.len=3152
[2025-08-21 10:12:13][350695340250490][5979 ms][DEBUG] END   runCmdUntilRes#1 in 5093 ms
[2025-08-21 10:12:13][350695340250490][5979 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:12:13][357576774003022][5064 ms][DEBUG] START check_frida
[2025-08-21 10:12:13][357576774003022][5064 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:12:14][357576774003022][5345 ms][DEBUG] SU: done in 281 ms; outroot          1313     1 2299984   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:12:14][357576774003022][5345 ms][DEBUG] check_frida: running
[2025-08-21 10:12:14][357576774003022][5345 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 10:12:14][357576774003022][5345 ms][DEBUG] START check_internet
[2025-08-21 10:12:14][357576774003022][5345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:12:14][357576774003022][5579 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.955/143.955/143.955/0.000 ms\n
[2025-08-21 10:12:14][357576774003022][5580 ms][DEBUG] check_internet: online
[2025-08-21 10:12:14][357576774003022][5580 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 10:12:14][357576774003022][5580 ms][DEBUG] START check_scloud
[2025-08-21 10:12:14][357576774003022][5580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:12:14][357576774003022][5860 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23494292 106380 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:12:14][357576774003022][5861 ms][DEBUG] targetPkg: running
[2025-08-21 10:12:14][357576774003022][5861 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:12:14][357576774003022][5861 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:12:14][357576774003022][5861 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2Nzc0MDAzMDIyIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g3MUExRzlOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTM1In0='" -e "main()" -q"
[2025-08-21 10:12:14][357576774003022][5861 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:12:14][357576774003022][5861 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2Nzc0MDAzMDIyIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g3MUExRzlOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTM1In0='" -e "main()" -q"
[2025-08-21 10:12:17][357576774003022][8625 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTc2Nzc0MDAzMDIyIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g3MUExRzlOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTM1In0="\r\n
[2025-08-21 10:12:21][357576774003022][13171 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40cc3e28-41e4-47c0-906e-9c396f63e9b8","id":"QR_40cc3e28-41e4-47c0-906e-9c396f63e9b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:12:21][357576774003022][13171 ms][DEBUG] proc_open done in 7311 ms; code=0; res.len=3152
[2025-08-21 10:12:21][357576774003022][13171 ms][DEBUG] END   runCmdUntilRes#1 in 7311 ms
[2025-08-21 10:12:21][357576774003022][13171 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:12:22][354353551401156][0 ms][INFO] === Request start ===
[2025-08-21 10:12:22][354353551401156][1 ms][DEBUG] START check_frida
[2025-08-21 10:12:22][354353551401156][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:12:22][354353551401156][287 ms][DEBUG] SU: done in 286 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:12:22][354353551401156][288 ms][DEBUG] check_frida: running
[2025-08-21 10:12:22][354353551401156][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 10:12:22][354353551401156][288 ms][DEBUG] START check_internet
[2025-08-21 10:12:22][354353551401156][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:12:22][354353551401156][631 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.050/216.050/216.050/0.000 ms\n
[2025-08-21 10:12:22][354353551401156][631 ms][DEBUG] check_internet: online
[2025-08-21 10:12:22][354353551401156][631 ms][DEBUG] END   check_internet in 343 ms
[2025-08-21 10:12:22][354353551401156][631 ms][DEBUG] START check_scloud
[2025-08-21 10:12:22][354353551401156][631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:12:23][354353551401156][912 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23494324 107028 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:12:23][354353551401156][912 ms][DEBUG] targetPkg: running
[2025-08-21 10:12:23][354353551401156][912 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:12:23][354353551401156][912 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:12:23][354353551401156][913 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzUzNTUxNDAxMTU2IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dDME1GNVpXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQxMCJ9'" -e "main()" -q"
[2025-08-21 10:12:23][354353551401156][913 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:12:23][354353551401156][913 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzUzNTUxNDAxMTU2IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dDME1GNVpXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQxMCJ9'" -e "main()" -q"
[2025-08-21 10:12:25][354353551401156][3677 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MzUzNTUxNDAxMTU2IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1dDME1GNVpXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQxMCJ9"\r\n
[2025-08-21 10:12:28][354353551401156][5927 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7239b9f0-59de-4917-8382-6457c11cbf26","id":"QR_7239b9f0-59de-4917-8382-6457c11cbf26","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:12:28][354353551401156][5927 ms][DEBUG] proc_open done in 5015 ms; code=0; res.len=3152
[2025-08-21 10:12:28][354353551401156][5927 ms][DEBUG] END   runCmdUntilRes#1 in 5015 ms
[2025-08-21 10:12:28][354353551401156][5927 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:13:06][358799699038027][0 ms][INFO] === Request start ===
[2025-08-21 10:13:06][358799699038027][1 ms][DEBUG] START check_frida
[2025-08-21 10:13:06][358799699038027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:13:07][358799699038027][290 ms][DEBUG] SU: done in 289 ms; outroot          1313     1 2283564   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:13:07][358799699038027][290 ms][DEBUG] check_frida: running
[2025-08-21 10:13:07][358799699038027][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 10:13:07][358799699038027][290 ms][DEBUG] START check_scloud
[2025-08-21 10:13:07][358799699038027][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:13:07][358799699038027][587 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23494356 107600 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:13:07][358799699038027][587 ms][DEBUG] targetPkg: running
[2025-08-21 10:13:07][358799699038027][587 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:13:07][358799699038027][587 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:13:07][358799699038027][587 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4Nzk5Njk5MDM4MDI3IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDJCVDlOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxMiJ9'" -e "main()" -q"
[2025-08-21 10:13:07][358799699038027][587 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:13:07][358799699038027][587 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4Nzk5Njk5MDM4MDI3IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDJCVDlOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxMiJ9'" -e "main()" -q"
[2025-08-21 10:13:10][358799699038027][3368 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4Nzk5Njk5MDM4MDI3IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDJCVDlOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxMiJ9"\r\n
[2025-08-21 10:13:11][358799699038027][5195 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec2dcaac-9384-4643-ab6e-8001c14f0a43","id":"QR_ec2dcaac-9384-4643-ab6e-8001c14f0a43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:13:11][358799699038027][5196 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 10:13:11][358799699038027][5196 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-21 10:13:11][358799699038027][5196 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:13:20][351978522323809][0 ms][INFO] === Request start ===
[2025-08-21 10:13:20][351978522323809][1 ms][DEBUG] START check_frida
[2025-08-21 10:13:20][351978522323809][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:13:20][351978522323809][291 ms][DEBUG] SU: done in 290 ms; outroot          1313     1 2299984   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:13:20][351978522323809][291 ms][DEBUG] check_frida: running
[2025-08-21 10:13:20][351978522323809][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 10:13:20][351978522323809][291 ms][DEBUG] START check_scloud
[2025-08-21 10:13:20][351978522323809][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:13:20][351978522323809][570 ms][DEBUG] SU: done in 279 ms; outu0_a118       7399 30745 23494388 108180 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:13:20][351978522323809][570 ms][DEBUG] targetPkg: running
[2025-08-21 10:13:20][351978522323809][570 ms][DEBUG] END   check_scloud in 279 ms
[2025-08-21 10:13:20][351978522323809][570 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:13:20][351978522323809][570 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIyMzIzODA5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMEc5RjlWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMCJ9'" -e "main()" -q"
[2025-08-21 10:13:20][351978522323809][570 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:13:20][351978522323809][570 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIyMzIzODA5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMEc5RjlWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMCJ9'" -e "main()" -q"
[2025-08-21 10:13:23][351978522323809][3350 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxOTc4NTIyMzIzODA5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMEc5RjlWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMCJ9"\r\n
[2025-08-21 10:13:25][351978522323809][5475 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9869a48f-047e-4b51-9755-e3802830cdbe","id":"QR_9869a48f-047e-4b51-9755-e3802830cdbe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:13:25][351978522323809][5475 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 10:13:25][351978522323809][5475 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 10:13:25][351978522323809][5475 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:16:08][352098790109910][1 ms][INFO] === Request start ===
[2025-08-21 10:16:08][352098790109910][2 ms][DEBUG] START check_frida
[2025-08-21 10:16:08][352098790109910][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:16:08][352098790109910][243 ms][DEBUG] SU: done in 241 ms; outroot          1313     1 2283564   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:16:08][352098790109910][243 ms][DEBUG] check_frida: running
[2025-08-21 10:16:08][352098790109910][243 ms][DEBUG] END   check_frida in 241 ms
[2025-08-21 10:16:08][352098790109910][243 ms][DEBUG] START check_internet
[2025-08-21 10:16:08][352098790109910][243 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:16:08][352098790109910][651 ms][DEBUG] SU: done in 408 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.519/201.519/201.519/0.000 ms\n
[2025-08-21 10:16:08][352098790109910][651 ms][DEBUG] check_internet: online
[2025-08-21 10:16:08][352098790109910][651 ms][DEBUG] END   check_internet in 408 ms
[2025-08-21 10:16:08][352098790109910][651 ms][DEBUG] START check_scloud
[2025-08-21 10:16:08][352098790109910][651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:16:09][352098790109910][899 ms][DEBUG] SU: done in 248 ms; outu0_a118       7399 30745 23494420 108752 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:16:09][352098790109910][899 ms][DEBUG] targetPkg: running
[2025-08-21 10:16:09][352098790109910][899 ms][DEBUG] END   check_scloud in 248 ms
[2025-08-21 10:16:09][352098790109910][899 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:16:09][352098790109910][899 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDk4NzkwMTA5OTEwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcyMDdaTTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIyMCJ9'" -e "main()" -q"
[2025-08-21 10:16:09][352098790109910][899 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:16:09][352098790109910][900 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDk4NzkwMTA5OTEwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcyMDdaTTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIyMCJ9'" -e "main()" -q"
[2025-08-21 10:16:11][352098790109910][3711 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDk4NzkwMTA5OTEwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcyMDdaTTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIyMCJ9"\r\n
[2025-08-21 10:16:14][352098790109910][5867 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4036581d-80cf-44e6-a0d5-d8360c750756","id":"QR_4036581d-80cf-44e6-a0d5-d8360c750756","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:16:14][352098790109910][5867 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 10:16:14][352098790109910][5867 ms][DEBUG] END   runCmdUntilRes#1 in 4968 ms
[2025-08-21 10:16:14][352098790109910][5867 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:16:22][354747955346281][0 ms][INFO] === Request start ===
[2025-08-21 10:16:22][354747955346281][1 ms][DEBUG] START check_frida
[2025-08-21 10:16:22][354747955346281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:16:22][354747955346281][248 ms][DEBUG] SU: done in 247 ms; outroot          1313     1 2299984   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:16:22][354747955346281][248 ms][DEBUG] check_frida: running
[2025-08-21 10:16:22][354747955346281][248 ms][DEBUG] END   check_frida in 247 ms
[2025-08-21 10:16:22][354747955346281][248 ms][DEBUG] START check_internet
[2025-08-21 10:16:22][354747955346281][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:16:22][354747955346281][591 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.856/252.856/252.856/0.000 ms\n
[2025-08-21 10:16:22][354747955346281][591 ms][DEBUG] check_internet: online
[2025-08-21 10:16:22][354747955346281][591 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 10:16:22][354747955346281][591 ms][DEBUG] START check_scloud
[2025-08-21 10:16:22][354747955346281][591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:16:22][354747955346281][874 ms][DEBUG] SU: done in 283 ms; outu0_a118       7399 30745 23494452 109296 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:16:22][354747955346281][874 ms][DEBUG] targetPkg: running
[2025-08-21 10:16:22][354747955346281][874 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 10:16:22][354747955346281][874 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:16:22][354747955346281][875 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTU1MzQ2MjgxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MEVWSEdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgyNCJ9'" -e "main()" -q"
[2025-08-21 10:16:22][354747955346281][875 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:16:22][354747955346281][875 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTU1MzQ2MjgxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MEVWSEdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgyNCJ9'" -e "main()" -q"
[2025-08-21 10:16:25][354747955346281][3653 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTU1MzQ2MjgxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MEVWSEdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgyNCJ9"\r\n
[2025-08-21 10:16:27][354747955346281][5449 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da2f6f87-eae1-4f6e-abed-8764da3d71ab","id":"QR_da2f6f87-eae1-4f6e-abed-8764da3d71ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:16:27][354747955346281][5449 ms][DEBUG] proc_open done in 4575 ms; code=0; res.len=3152
[2025-08-21 10:16:27][354747955346281][5449 ms][DEBUG] END   runCmdUntilRes#1 in 4575 ms
[2025-08-21 10:16:27][354747955346281][5450 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:16:35][352665189144466][0 ms][INFO] === Request start ===
[2025-08-21 10:16:35][352665189144466][1 ms][DEBUG] START check_frida
[2025-08-21 10:16:35][352665189144466][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:16:35][352665189144466][249 ms][DEBUG] SU: done in 248 ms; outroot          1313     1 2299984   4512 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:16:35][352665189144466][249 ms][DEBUG] check_frida: running
[2025-08-21 10:16:35][352665189144466][249 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 10:16:35][352665189144466][249 ms][DEBUG] START check_internet
[2025-08-21 10:16:35][352665189144466][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:16:36][352665189144466][547 ms][DEBUG] SU: done in 298 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.967/200.967/200.967/0.000 ms\n
[2025-08-21 10:16:36][352665189144466][548 ms][DEBUG] check_internet: online
[2025-08-21 10:16:36][352665189144466][548 ms][DEBUG] END   check_internet in 299 ms
[2025-08-21 10:16:36][352665189144466][548 ms][DEBUG] START check_scloud
[2025-08-21 10:16:36][352665189144466][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:16:36][352665189144466][827 ms][DEBUG] SU: done in 279 ms; outu0_a118       7399 30745 23494484 109884 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:16:36][352665189144466][827 ms][DEBUG] targetPkg: running
[2025-08-21 10:16:36][352665189144466][827 ms][DEBUG] END   check_scloud in 279 ms
[2025-08-21 10:16:36][352665189144466][827 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:16:36][352665189144466][827 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjY1MTg5MTQ0NDY2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MUFFU0FMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgyNSJ9'" -e "main()" -q"
[2025-08-21 10:16:36][352665189144466][827 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:16:36][352665189144466][827 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjY1MTg5MTQ0NDY2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MUFFU0FMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgyNSJ9'" -e "main()" -q"
[2025-08-21 10:16:39][352665189144466][3591 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjY1MTg5MTQ0NDY2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MUFFU0FMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgyNSJ9"\r\n
[2025-08-21 10:16:41][352665189144466][5435 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43b7e33f-85b5-4c14-8285-fe0547336942","id":"QR_43b7e33f-85b5-4c14-8285-fe0547336942","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:16:41][352665189144466][5436 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 10:16:41][352665189144466][5436 ms][DEBUG] END   runCmdUntilRes#1 in 4609 ms
[2025-08-21 10:16:41][352665189144466][5436 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:17:06][352288963693440][1 ms][INFO] === Request start ===
[2025-08-21 10:17:06][352288963693440][2 ms][DEBUG] START check_frida
[2025-08-21 10:17:06][352288963693440][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:17:06][352288963693440][246 ms][DEBUG] SU: done in 245 ms; outroot          1313     1 2283564   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:17:06][352288963693440][246 ms][DEBUG] check_frida: running
[2025-08-21 10:17:06][352288963693440][246 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 10:17:06][352288963693440][246 ms][DEBUG] START check_scloud
[2025-08-21 10:17:06][352288963693440][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:17:07][352288963693440][543 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23494516 106520 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:17:07][352288963693440][543 ms][DEBUG] targetPkg: running
[2025-08-21 10:17:07][352288963693440][543 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:17:07][352288963693440][543 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:17:07][352288963693440][543 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTYzNjkzNDQwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ1MTRUV1JKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU4MiJ9'" -e "main()" -q"
[2025-08-21 10:17:07][352288963693440][543 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:17:07][352288963693440][543 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTYzNjkzNDQwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ1MTRUV1JKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU4MiJ9'" -e "main()" -q"
[2025-08-21 10:17:09][351351020230662][0 ms][INFO] === Request start ===
[2025-08-21 10:17:10][352288963693440][3339 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjg4OTYzNjkzNDQwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ1MTRUV1JKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU4MiJ9"\r\n
[2025-08-21 10:17:12][352288963693440][5573 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c1e6e9f-bc06-446f-b497-6c57dbd43264","id":"QR_3c1e6e9f-bc06-446f-b497-6c57dbd43264","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:17:12][352288963693440][5573 ms][DEBUG] proc_open done in 5030 ms; code=0; res.len=3152
[2025-08-21 10:17:12][352288963693440][5573 ms][DEBUG] END   runCmdUntilRes#1 in 5030 ms
[2025-08-21 10:17:12][352288963693440][5573 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:17:13][351351020230662][4056 ms][DEBUG] START check_frida
[2025-08-21 10:17:13][351351020230662][4056 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:17:13][351351020230662][4306 ms][DEBUG] SU: done in 250 ms; outroot          1313     1 2299984   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:17:13][351351020230662][4306 ms][DEBUG] check_frida: running
[2025-08-21 10:17:13][351351020230662][4306 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 10:17:13][351351020230662][4306 ms][DEBUG] START check_scloud
[2025-08-21 10:17:13][351351020230662][4306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:17:13][351351020230662][4618 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23494548 107064 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:17:13][351351020230662][4618 ms][DEBUG] targetPkg: running
[2025-08-21 10:17:13][351351020230662][4618 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 10:17:13][351351020230662][4618 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:17:13][351351020230662][4618 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzUxMDIwMjMwNjYyIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gyMkdRRVpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAxOCJ9'" -e "main()" -q"
[2025-08-21 10:17:13][351351020230662][4618 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:17:13][351351020230662][4618 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzUxMDIwMjMwNjYyIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gyMkdRRVpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAxOCJ9'" -e "main()" -q"
[2025-08-21 10:17:16][351351020230662][7414 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzUxMDIwMjMwNjYyIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gyMkdRRVpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAxOCJ9"\r\n
[2025-08-21 10:17:18][351351020230662][9242 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70a2e940-0c15-48e2-8cfe-9c132f241865","id":"QR_70a2e940-0c15-48e2-8cfe-9c132f241865","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:17:18][351351020230662][9242 ms][DEBUG] proc_open done in 4624 ms; code=0; res.len=3152
[2025-08-21 10:17:18][351351020230662][9242 ms][DEBUG] END   runCmdUntilRes#1 in 4624 ms
[2025-08-21 10:17:18][351351020230662][9242 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:20:11][354916447085233][1 ms][INFO] === Request start ===
[2025-08-21 10:20:11][354916447085233][2 ms][DEBUG] START check_frida
[2025-08-21 10:20:11][354916447085233][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:20:11][354916447085233][308 ms][DEBUG] SU: done in 306 ms; outroot          1313     1 2284576   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:20:11][354916447085233][308 ms][DEBUG] check_frida: running
[2025-08-21 10:20:11][354916447085233][308 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 10:20:11][354916447085233][308 ms][DEBUG] START check_internet
[2025-08-21 10:20:11][354916447085233][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:20:12][354916447085233][824 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.330/202.330/202.330/0.000 ms\n
[2025-08-21 10:20:12][354916447085233][825 ms][DEBUG] check_internet: online
[2025-08-21 10:20:12][354916447085233][825 ms][DEBUG] END   check_internet in 516 ms
[2025-08-21 10:20:12][354916447085233][825 ms][DEBUG] START check_scloud
[2025-08-21 10:20:12][354916447085233][825 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:20:12][354916447085233][1105 ms][DEBUG] SU: done in 280 ms; outu0_a118       7399 30745 23494580 107584 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:20:12][354916447085233][1105 ms][DEBUG] targetPkg: running
[2025-08-21 10:20:12][354916447085233][1105 ms][DEBUG] END   check_scloud in 280 ms
[2025-08-21 10:20:12][354916447085233][1105 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:20:12][354916447085233][1105 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQ3MDg1MjMzIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDFMVDBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE3OSJ9'" -e "main()" -q"
[2025-08-21 10:20:12][354916447085233][1105 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:20:12][354916447085233][1105 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQ3MDg1MjMzIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDFMVDBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE3OSJ9'" -e "main()" -q"
[2025-08-21 10:20:15][354916447085233][3901 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTE2NDQ3MDg1MjMzIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDFMVDBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE3OSJ9"\r\n
[2025-08-21 10:20:17][354916447085233][6588 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df7618cb-c91b-454b-bea1-6caa99f05f89","id":"QR_df7618cb-c91b-454b-bea1-6caa99f05f89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:20:17][354916447085233][6588 ms][DEBUG] proc_open done in 5484 ms; code=0; res.len=3152
[2025-08-21 10:20:17][354916447085233][6588 ms][DEBUG] END   runCmdUntilRes#1 in 5484 ms
[2025-08-21 10:20:17][354916447085233][6588 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:21:09][352350272098909][1 ms][INFO] === Request start ===
[2025-08-21 10:21:09][352350272098909][1 ms][DEBUG] START check_frida
[2025-08-21 10:21:09][352350272098909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:21:10][352350272098909][309 ms][DEBUG] SU: done in 307 ms; outroot          1313     1 2282552   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:21:10][352350272098909][309 ms][DEBUG] check_frida: running
[2025-08-21 10:21:10][352350272098909][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 10:21:10][352350272098909][309 ms][DEBUG] START check_scloud
[2025-08-21 10:21:10][352350272098909][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:21:10][352350272098909][573 ms][DEBUG] SU: done in 264 ms; outu0_a118       7399 30745 23494612 107844 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:21:10][352350272098909][573 ms][DEBUG] targetPkg: running
[2025-08-21 10:21:10][352350272098909][573 ms][DEBUG] END   check_scloud in 264 ms
[2025-08-21 10:21:10][352350272098909][573 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:21:10][352350272098909][573 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzUwMjcyMDk4OTA5IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MDRQWTBQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTMxIn0='" -e "main()" -q"
[2025-08-21 10:21:10][352350272098909][573 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:21:10][352350272098909][573 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzUwMjcyMDk4OTA5IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MDRQWTBQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTMxIn0='" -e "main()" -q"
[2025-08-21 10:21:13][352350272098909][3337 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzUwMjcyMDk4OTA5IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MDRQWTBQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTMxIn0="\r\n
[2025-08-21 10:21:18][352350272098909][8664 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9bea66cf-6192-48ba-b470-2ca4ae1a6e2e","id":"QR_9bea66cf-6192-48ba-b470-2ca4ae1a6e2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:21:18][352350272098909][8665 ms][DEBUG] proc_open done in 8092 ms; code=0; res.len=3152
[2025-08-21 10:21:18][352350272098909][8665 ms][DEBUG] END   runCmdUntilRes#1 in 8092 ms
[2025-08-21 10:21:18][352350272098909][8665 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:22:11][354464110989274][0 ms][INFO] === Request start ===
[2025-08-21 10:22:11][354464110989274][1 ms][DEBUG] START check_frida
[2025-08-21 10:22:11][354464110989274][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:22:11][354464110989274][310 ms][DEBUG] SU: done in 309 ms; outroot          1313     1 2283564   4480 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:22:11][354464110989274][310 ms][DEBUG] check_frida: running
[2025-08-21 10:22:11][354464110989274][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 10:22:11][354464110989274][310 ms][DEBUG] START check_internet
[2025-08-21 10:22:11][354464110989274][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:22:12][354464110989274][654 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.183/232.183/232.183/0.000 ms\n
[2025-08-21 10:22:12][354464110989274][654 ms][DEBUG] check_internet: online
[2025-08-21 10:22:12][354464110989274][654 ms][DEBUG] END   check_internet in 343 ms
[2025-08-21 10:22:12][354464110989274][654 ms][DEBUG] START check_scloud
[2025-08-21 10:22:12][354464110989274][654 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:22:12][354464110989274][904 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23494644 108044 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:22:12][354464110989274][904 ms][DEBUG] targetPkg: running
[2025-08-21 10:22:12][354464110989274][904 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 10:22:12][354464110989274][904 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:22:12][354464110989274][904 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDY0MTEwOTg5Mjc0IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE4xMEREWkNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU3MCJ9'" -e "main()" -q"
[2025-08-21 10:22:12][354464110989274][904 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:22:12][354464110989274][904 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDY0MTEwOTg5Mjc0IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE4xMEREWkNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU3MCJ9'" -e "main()" -q"
[2025-08-21 10:22:15][354464110989274][3684 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDY0MTEwOTg5Mjc0IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE4xMEREWkNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU3MCJ9"\r\n
[2025-08-21 10:22:17][354464110989274][5824 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1232fc63-7a5c-43ea-87b2-3d1f036b18e6","id":"QR_1232fc63-7a5c-43ea-87b2-3d1f036b18e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:22:17][354464110989274][5825 ms][DEBUG] proc_open done in 4921 ms; code=0; res.len=3152
[2025-08-21 10:22:17][354464110989274][5825 ms][DEBUG] END   runCmdUntilRes#1 in 4921 ms
[2025-08-21 10:22:17][354464110989274][5825 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:22:25][351554743703440][1 ms][INFO] === Request start ===
[2025-08-21 10:22:25][351554743703440][2 ms][DEBUG] START check_frida
[2025-08-21 10:22:25][351554743703440][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:22:25][351554743703440][297 ms][DEBUG] SU: done in 295 ms; outroot          1313     1 2299984   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:22:25][351554743703440][297 ms][DEBUG] check_frida: running
[2025-08-21 10:22:25][351554743703440][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 10:22:25][351554743703440][297 ms][DEBUG] START check_internet
[2025-08-21 10:22:25][351554743703440][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:22:25][351554743703440][592 ms][DEBUG] SU: done in 294 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.990/194.990/194.990/0.000 ms\n
[2025-08-21 10:22:25][351554743703440][592 ms][DEBUG] check_internet: online
[2025-08-21 10:22:25][351554743703440][592 ms][DEBUG] END   check_internet in 295 ms
[2025-08-21 10:22:25][351554743703440][592 ms][DEBUG] START check_scloud
[2025-08-21 10:22:25][351554743703440][592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:22:26][351554743703440][889 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23494676 107804 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:22:26][351554743703440][889 ms][DEBUG] targetPkg: running
[2025-08-21 10:22:26][351554743703440][889 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:22:26][351554743703440][889 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:22:26][351554743703440][889 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTU0NzQzNzAzNDQwIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QzMVdWUVJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg5NCJ9'" -e "main()" -q"
[2025-08-21 10:22:26][351554743703440][889 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:22:26][351554743703440][889 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTU0NzQzNzAzNDQwIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QzMVdWUVJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg5NCJ9'" -e "main()" -q"
[2025-08-21 10:22:29][351554743703440][3700 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTU0NzQzNzAzNDQwIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QzMVdWUVJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg5NCJ9"\r\n
[2025-08-21 10:22:30][351554743703440][5591 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bea21ef0-5cf6-428c-ac00-621068f686f7","id":"QR_bea21ef0-5cf6-428c-ac00-621068f686f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:22:30][351554743703440][5591 ms][DEBUG] proc_open done in 4702 ms; code=0; res.len=3152
[2025-08-21 10:22:30][351554743703440][5591 ms][DEBUG] END   runCmdUntilRes#1 in 4702 ms
[2025-08-21 10:22:30][351554743703440][5591 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:22:40][355552513689175][0 ms][INFO] === Request start ===
[2025-08-21 10:22:40][355552513689175][1 ms][DEBUG] START check_frida
[2025-08-21 10:22:40][355552513689175][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:22:41][355552513689175][292 ms][DEBUG] SU: done in 291 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:22:41][355552513689175][292 ms][DEBUG] check_frida: running
[2025-08-21 10:22:41][355552513689175][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 10:22:41][355552513689175][292 ms][DEBUG] START check_internet
[2025-08-21 10:22:41][355552513689175][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:22:41][355552513689175][667 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.530/248.530/248.530/0.000 ms\n
[2025-08-21 10:22:41][355552513689175][667 ms][DEBUG] check_internet: online
[2025-08-21 10:22:41][355552513689175][667 ms][DEBUG] END   check_internet in 374 ms
[2025-08-21 10:22:41][355552513689175][667 ms][DEBUG] START check_scloud
[2025-08-21 10:22:41][355552513689175][667 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:22:41][355552513689175][901 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23494708 108396 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:22:41][355552513689175][901 ms][DEBUG] targetPkg: running
[2025-08-21 10:22:41][355552513689175][901 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 10:22:41][355552513689175][901 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:22:41][355552513689175][901 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NTUyNTEzNjg5MTc1IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlZVDYwQTU5MEgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTA3In0='" -e "main()" -q"
[2025-08-21 10:22:41][355552513689175][901 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:22:41][355552513689175][901 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NTUyNTEzNjg5MTc1IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlZVDYwQTU5MEgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTA3In0='" -e "main()" -q"
[2025-08-21 10:22:44][355552513689175][3682 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NTUyNTEzNjg5MTc1IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlZVDYwQTU5MEgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTA3In0="\r\n
[2025-08-21 10:22:46][355552513689175][5650 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9634bb4e-4baa-4069-a93b-030c22ca5707","id":"QR_9634bb4e-4baa-4069-a93b-030c22ca5707","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:22:46][355552513689175][5650 ms][DEBUG] proc_open done in 4749 ms; code=0; res.len=3152
[2025-08-21 10:22:46][355552513689175][5650 ms][DEBUG] END   runCmdUntilRes#1 in 4749 ms
[2025-08-21 10:22:46][355552513689175][5650 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:24:06][352539594457633][0 ms][INFO] === Request start ===
[2025-08-21 10:24:06][352539594457633][1 ms][DEBUG] START check_frida
[2025-08-21 10:24:06][352539594457633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:24:06][352539594457633][252 ms][DEBUG] SU: done in 251 ms; outroot          1313     1 2283564   4476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:24:06][352539594457633][252 ms][DEBUG] check_frida: running
[2025-08-21 10:24:06][352539594457633][252 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 10:24:06][352539594457633][252 ms][DEBUG] START check_internet
[2025-08-21 10:24:06][352539594457633][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:24:07][352539594457633][626 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=271 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 271.467/271.467/271.467/0.000 ms\n
[2025-08-21 10:24:07][352539594457633][626 ms][DEBUG] check_internet: online
[2025-08-21 10:24:07][352539594457633][626 ms][DEBUG] END   check_internet in 374 ms
[2025-08-21 10:24:07][352539594457633][626 ms][DEBUG] START check_scloud
[2025-08-21 10:24:07][352539594457633][626 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:24:07][352539594457633][923 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23494740 105372 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:24:07][352539594457633][923 ms][DEBUG] targetPkg: running
[2025-08-21 10:24:07][352539594457633][923 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:24:07][352539594457633][923 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:24:07][352539594457633][923 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTM5NTk0NDU3NjMzIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RDMUcwS1pIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTMwNyJ9'" -e "main()" -q"
[2025-08-21 10:24:07][352539594457633][923 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:24:07][352539594457633][923 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTM5NTk0NDU3NjMzIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RDMUcwS1pIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTMwNyJ9'" -e "main()" -q"
[2025-08-21 10:24:10][352539594457633][3719 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTM5NTk0NDU3NjMzIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RDMUcwS1pIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTMwNyJ9"\r\n
[2025-08-21 10:24:12][352539594457633][6125 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6487e9b4-c704-4ba9-a969-c8ab77dbb67c","id":"QR_6487e9b4-c704-4ba9-a969-c8ab77dbb67c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:24:12][352539594457633][6125 ms][DEBUG] proc_open done in 5202 ms; code=0; res.len=3152
[2025-08-21 10:24:12][352539594457633][6125 ms][DEBUG] END   runCmdUntilRes#1 in 5203 ms
[2025-08-21 10:24:12][352539594457633][6126 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:26:08][352879326526473][1 ms][INFO] === Request start ===
[2025-08-21 10:26:08][352879326526473][2 ms][DEBUG] START check_frida
[2025-08-21 10:26:08][352879326526473][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:26:09][352879326526473][260 ms][DEBUG] SU: done in 258 ms; outroot          1313     1 2283564   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:26:09][352879326526473][260 ms][DEBUG] check_frida: running
[2025-08-21 10:26:09][352879326526473][260 ms][DEBUG] END   check_frida in 258 ms
[2025-08-21 10:26:09][352879326526473][260 ms][DEBUG] START check_internet
[2025-08-21 10:26:09][352879326526473][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:26:09][352879326526473][728 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.312/202.312/202.312/0.000 ms\n
[2025-08-21 10:26:09][352879326526473][728 ms][DEBUG] check_internet: online
[2025-08-21 10:26:09][352879326526473][728 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 10:26:09][352879326526473][728 ms][DEBUG] START check_scloud
[2025-08-21 10:26:09][352879326526473][728 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:26:10][352879326526473][1025 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23494772 106284 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:26:10][352879326526473][1025 ms][DEBUG] targetPkg: running
[2025-08-21 10:26:10][352879326526473][1025 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:26:10][352879326526473][1025 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:26:10][352879326526473][1025 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODc5MzI2NTI2NDczIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dDMTBTMDZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY5OSJ9'" -e "main()" -q"
[2025-08-21 10:26:10][352879326526473][1025 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:26:10][352879326526473][1025 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODc5MzI2NTI2NDczIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dDMTBTMDZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY5OSJ9'" -e "main()" -q"
[2025-08-21 10:26:12][352879326526473][3837 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyODc5MzI2NTI2NDczIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dDMTBTMDZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY5OSJ9"\r\n
[2025-08-21 10:26:15][352879326526473][6243 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_788576a7-2c12-42cb-bab6-5d3793221c7e","id":"QR_788576a7-2c12-42cb-bab6-5d3793221c7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:26:15][352879326526473][6243 ms][DEBUG] proc_open done in 5218 ms; code=0; res.len=3152
[2025-08-21 10:26:15][352879326526473][6243 ms][DEBUG] END   runCmdUntilRes#1 in 5218 ms
[2025-08-21 10:26:15][352879326526473][6243 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:26:21][354454651459548][0 ms][INFO] === Request start ===
[2025-08-21 10:26:21][354454651459548][1 ms][DEBUG] START check_frida
[2025-08-21 10:26:21][354454651459548][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:26:21][354454651459548][300 ms][DEBUG] SU: done in 299 ms; outroot          1313     1 2299984   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:26:21][354454651459548][300 ms][DEBUG] check_frida: running
[2025-08-21 10:26:21][354454651459548][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 10:26:21][354454651459548][300 ms][DEBUG] START check_internet
[2025-08-21 10:26:21][354454651459548][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:26:21][354454651459548][566 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.255/156.255/156.255/0.000 ms\n
[2025-08-21 10:26:21][354454651459548][566 ms][DEBUG] check_internet: online
[2025-08-21 10:26:21][354454651459548][566 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 10:26:21][354454651459548][566 ms][DEBUG] START check_scloud
[2025-08-21 10:26:21][354454651459548][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:26:22][354454651459548][816 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23494804 106828 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:26:22][354454651459548][816 ms][DEBUG] targetPkg: running
[2025-08-21 10:26:22][354454651459548][816 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 10:26:22][354454651459548][816 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:26:22][354454651459548][816 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDU0NjUxNDU5NTQ4IiwibW9kZWwiOiJTTS1BMjU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMU5GUlhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTAyNSJ9'" -e "main()" -q"
[2025-08-21 10:26:22][354454651459548][816 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:26:22][354454651459548][817 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDU0NjUxNDU5NTQ4IiwibW9kZWwiOiJTTS1BMjU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMU5GUlhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTAyNSJ9'" -e "main()" -q"
[2025-08-21 10:26:24][354454651459548][3596 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDU0NjUxNDU5NTQ4IiwibW9kZWwiOiJTTS1BMjU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMU5GUlhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTAyNSJ9"\r\n
[2025-08-21 10:26:26][354454651459548][5658 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c71dfe89-0cd4-4fc7-91ed-c2737cb393ae","id":"QR_c71dfe89-0cd4-4fc7-91ed-c2737cb393ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:26:26][354454651459548][5659 ms][DEBUG] proc_open done in 4842 ms; code=0; res.len=3152
[2025-08-21 10:26:26][354454651459548][5659 ms][DEBUG] END   runCmdUntilRes#1 in 4842 ms
[2025-08-21 10:26:26][354454651459548][5659 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:27:11][351521287453997][0 ms][INFO] === Request start ===
[2025-08-21 10:27:11][351521287453997][1 ms][DEBUG] START check_frida
[2025-08-21 10:27:11][351521287453997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:27:11][351521287453997][257 ms][DEBUG] SU: done in 256 ms; outroot          1313     1 2283564   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:27:11][351521287453997][257 ms][DEBUG] check_frida: running
[2025-08-21 10:27:11][351521287453997][257 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 10:27:11][351521287453997][257 ms][DEBUG] START check_scloud
[2025-08-21 10:27:11][351521287453997][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:27:11][351521287453997][569 ms][DEBUG] SU: done in 313 ms; outu0_a118       7399 30745 23494836 107400 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:27:11][351521287453997][570 ms][DEBUG] targetPkg: running
[2025-08-21 10:27:11][351521287453997][570 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 10:27:11][351521287453997][570 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:27:11][351521287453997][570 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MUFIQUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk0OSJ9'" -e "main()" -q"
[2025-08-21 10:27:11][351521287453997][570 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:27:11][351521287453997][570 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MUFIQUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk0OSJ9'" -e "main()" -q"
[2025-08-21 10:27:14][351521287453997][3381 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MUFIQUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk0OSJ9"\r\n
[2025-08-21 10:27:16][351521287453997][5740 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db4ad5e0-fdeb-4ce5-8dbb-ca1c6b66b206","id":"QR_db4ad5e0-fdeb-4ce5-8dbb-ca1c6b66b206","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:27:16][351521287453997][5740 ms][DEBUG] proc_open done in 5170 ms; code=0; res.len=3152
[2025-08-21 10:27:16][351521287453997][5740 ms][DEBUG] END   runCmdUntilRes#1 in 5170 ms
[2025-08-21 10:27:16][351521287453997][5740 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:28:20][352387289380912][1 ms][INFO] === Request start ===
[2025-08-21 10:28:20][352387289380912][1 ms][DEBUG] START check_frida
[2025-08-21 10:28:20][352387289380912][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:28:20][352387289380912][262 ms][DEBUG] SU: done in 261 ms; outroot          1313     1 2283564   4512 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:28:20][352387289380912][263 ms][DEBUG] check_frida: running
[2025-08-21 10:28:20][352387289380912][263 ms][DEBUG] END   check_frida in 261 ms
[2025-08-21 10:28:20][352387289380912][263 ms][DEBUG] START check_internet
[2025-08-21 10:28:20][352387289380912][263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:28:21][352387289380912][591 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.805/229.805/229.805/0.000 ms\n
[2025-08-21 10:28:21][352387289380912][591 ms][DEBUG] check_internet: online
[2025-08-21 10:28:21][352387289380912][591 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 10:28:21][352387289380912][591 ms][DEBUG] START check_scloud
[2025-08-21 10:28:21][352387289380912][591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:28:21][352387289380912][871 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23494868 107924 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:28:21][352387289380912][872 ms][DEBUG] targetPkg: running
[2025-08-21 10:28:21][352387289380912][872 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:28:21][352387289380912][872 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:28:21][352387289380912][872 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzg3Mjg5MzgwOTEyIiwibW9kZWwiOiJTTS1BMzI2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QzMlBRSkpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjM0In0='" -e "main()" -q"
[2025-08-21 10:28:21][352387289380912][872 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:28:21][352387289380912][872 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzg3Mjg5MzgwOTEyIiwibW9kZWwiOiJTTS1BMzI2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QzMlBRSkpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjM0In0='" -e "main()" -q"
[2025-08-21 10:28:24][352387289380912][3668 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzg3Mjg5MzgwOTEyIiwibW9kZWwiOiJTTS1BMzI2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QzMlBRSkpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjM0In0="\r\n
[2025-08-21 10:28:27][352387289380912][7026 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35d8eb54-e92a-4efc-8fc1-800b3c3df753","id":"QR_35d8eb54-e92a-4efc-8fc1-800b3c3df753","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:28:27][352387289380912][7026 ms][DEBUG] proc_open done in 6154 ms; code=0; res.len=3152
[2025-08-21 10:28:27][352387289380912][7026 ms][DEBUG] END   runCmdUntilRes#1 in 6155 ms
[2025-08-21 10:28:27][352387289380912][7026 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:28:38][350178734186802][0 ms][INFO] === Request start ===
[2025-08-21 10:28:38][350178734186802][1 ms][DEBUG] START check_frida
[2025-08-21 10:28:38][350178734186802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:28:38][350178734186802][305 ms][DEBUG] SU: done in 304 ms; outroot          1313     1 2299984   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:28:38][350178734186802][305 ms][DEBUG] check_frida: running
[2025-08-21 10:28:38][350178734186802][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 10:28:38][350178734186802][305 ms][DEBUG] START check_internet
[2025-08-21 10:28:38][350178734186802][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:28:39][350178734186802][789 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=384 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 384.357/384.357/384.357/0.000 ms\n
[2025-08-21 10:28:39][350178734186802][789 ms][DEBUG] check_internet: online
[2025-08-21 10:28:39][350178734186802][789 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 10:28:39][350178734186802][789 ms][DEBUG] START check_scloud
[2025-08-21 10:28:39][350178734186802][789 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:28:39][350178734186802][1070 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23494900 105464 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:28:39][350178734186802][1070 ms][DEBUG] targetPkg: running
[2025-08-21 10:28:39][350178734186802][1070 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:28:39][350178734186802][1070 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:28:39][350178734186802][1070 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTc4NzM0MTg2ODAyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MDE5R1dCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDcxNiJ9'" -e "main()" -q"
[2025-08-21 10:28:39][350178734186802][1070 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:28:39][350178734186802][1070 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTc4NzM0MTg2ODAyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MDE5R1dCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDcxNiJ9'" -e "main()" -q"
[2025-08-21 10:28:42][350178734186802][3866 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTc4NzM0MTg2ODAyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MDE5R1dCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDcxNiJ9"\r\n
[2025-08-21 10:28:44][350178734186802][6022 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f0f72fe-41e2-4ab9-9597-86f70854004b","id":"QR_4f0f72fe-41e2-4ab9-9597-86f70854004b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:28:44][350178734186802][6022 ms][DEBUG] proc_open done in 4952 ms; code=0; res.len=3152
[2025-08-21 10:28:44][350178734186802][6022 ms][DEBUG] END   runCmdUntilRes#1 in 4952 ms
[2025-08-21 10:28:44][350178734186802][6022 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:28:50][358141436118400][0 ms][INFO] === Request start ===
[2025-08-21 10:28:50][358141436118400][1 ms][DEBUG] START check_frida
[2025-08-21 10:28:50][358141436118400][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:28:51][358141436118400][256 ms][DEBUG] SU: done in 255 ms; outroot          1313     1 2299984   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:28:51][358141436118400][256 ms][DEBUG] check_frida: running
[2025-08-21 10:28:51][358141436118400][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 10:28:51][358141436118400][256 ms][DEBUG] START check_internet
[2025-08-21 10:28:51][358141436118400][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:28:51][358141436118400][521 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.354/171.354/171.354/0.000 ms\n
[2025-08-21 10:28:51][358141436118400][522 ms][DEBUG] check_internet: online
[2025-08-21 10:28:51][358141436118400][522 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 10:28:51][358141436118400][522 ms][DEBUG] START check_scloud
[2025-08-21 10:28:51][358141436118400][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:28:51][358141436118400][834 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23494932 106040 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:28:51][358141436118400][834 ms][DEBUG] targetPkg: running
[2025-08-21 10:28:51][358141436118400][834 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 10:28:51][358141436118400][834 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:28:51][358141436118400][834 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTQxNDM2MTE4NDAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MDZUSEFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxOCJ9'" -e "main()" -q"
[2025-08-21 10:28:51][358141436118400][834 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:28:51][358141436118400][835 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTQxNDM2MTE4NDAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MDZUSEFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxOCJ9'" -e "main()" -q"
[2025-08-21 10:28:54][358141436118400][3614 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MTQxNDM2MTE4NDAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MDZUSEFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxOCJ9"\r\n
[2025-08-21 10:28:56][358141436118400][5473 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_872ad207-43e8-4d9a-ae9d-7120c9d59fbe","id":"QR_872ad207-43e8-4d9a-ae9d-7120c9d59fbe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:28:56][358141436118400][5474 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 10:28:56][358141436118400][5474 ms][DEBUG] END   runCmdUntilRes#1 in 4639 ms
[2025-08-21 10:28:56][358141436118400][5474 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:32:26][352923548550968][1 ms][INFO] === Request start ===
[2025-08-21 10:32:26][352923548550968][2 ms][DEBUG] START check_frida
[2025-08-21 10:32:26][352923548550968][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:32:26][352923548550968][252 ms][DEBUG] SU: done in 250 ms; outroot          1313     1 2283564   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:32:26][352923548550968][252 ms][DEBUG] check_frida: running
[2025-08-21 10:32:26][352923548550968][252 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 10:32:26][352923548550968][252 ms][DEBUG] START check_internet
[2025-08-21 10:32:26][352923548550968][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:32:27][352923548550968][722 ms][DEBUG] SU: done in 470 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.280/203.280/203.280/0.000 ms\n
[2025-08-21 10:32:27][352923548550968][722 ms][DEBUG] check_internet: online
[2025-08-21 10:32:27][352923548550968][722 ms][DEBUG] END   check_internet in 470 ms
[2025-08-21 10:32:27][352923548550968][722 ms][DEBUG] START check_scloud
[2025-08-21 10:32:27][352923548550968][722 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:32:27][352923548550968][1018 ms][DEBUG] SU: done in 295 ms; outu0_a118       7399 30745 23494964 106952 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:32:27][352923548550968][1018 ms][DEBUG] targetPkg: running
[2025-08-21 10:32:27][352923548550968][1018 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 10:32:27][352923548550968][1018 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:32:27][352923548550968][1018 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTIzNTQ4NTUwOTY4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMVgwRlFCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE0MiJ9'" -e "main()" -q"
[2025-08-21 10:32:27][352923548550968][1018 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:32:27][352923548550968][1018 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTIzNTQ4NTUwOTY4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMVgwRlFCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE0MiJ9'" -e "main()" -q"
[2025-08-21 10:32:30][352923548550968][3798 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTIzNTQ4NTUwOTY4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMVgwRlFCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE0MiJ9"\r\n
[2025-08-21 10:32:32][352923548550968][6235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4f81f52-58e4-4807-bd6e-346908e53162","id":"QR_e4f81f52-58e4-4807-bd6e-346908e53162","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:32:32][352923548550968][6235 ms][DEBUG] proc_open done in 5217 ms; code=0; res.len=3152
[2025-08-21 10:32:32][352923548550968][6235 ms][DEBUG] END   runCmdUntilRes#1 in 5217 ms
[2025-08-21 10:32:32][352923548550968][6235 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:32:41][350142320651488][0 ms][INFO] === Request start ===
[2025-08-21 10:32:41][350142320651488][0 ms][DEBUG] START check_frida
[2025-08-21 10:32:41][350142320651488][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:32:41][350142320651488][296 ms][DEBUG] SU: done in 296 ms; outroot          1313     1 2299984   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:32:41][350142320651488][297 ms][DEBUG] check_frida: running
[2025-08-21 10:32:41][350142320651488][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 10:32:41][350142320651488][297 ms][DEBUG] START check_internet
[2025-08-21 10:32:41][350142320651488][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:32:42][350142320651488][578 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.992/181.992/181.992/0.000 ms\n
[2025-08-21 10:32:42][350142320651488][578 ms][DEBUG] check_internet: online
[2025-08-21 10:32:42][350142320651488][578 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 10:32:42][350142320651488][578 ms][DEBUG] START check_scloud
[2025-08-21 10:32:42][350142320651488][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:32:42][350142320651488][874 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23494996 107656 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:32:42][350142320651488][874 ms][DEBUG] targetPkg: running
[2025-08-21 10:32:42][350142320651488][874 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:32:42][350142320651488][874 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:32:42][350142320651488][874 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTQyMzIwNjUxNDg4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MFhURVBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc4MyJ9'" -e "main()" -q"
[2025-08-21 10:32:42][350142320651488][874 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:32:42][350142320651488][875 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTQyMzIwNjUxNDg4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MFhURVBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc4MyJ9'" -e "main()" -q"
[2025-08-21 10:32:45][350142320651488][3639 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTQyMzIwNjUxNDg4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MFhURVBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc4MyJ9"\r\n
[2025-08-21 10:32:47][350142320651488][5967 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8bcbc61-1e93-466e-87f1-8e32b37da750","id":"QR_d8bcbc61-1e93-466e-87f1-8e32b37da750","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:32:47][350142320651488][5967 ms][DEBUG] proc_open done in 5092 ms; code=0; res.len=3152
[2025-08-21 10:32:47][350142320651488][5967 ms][DEBUG] END   runCmdUntilRes#1 in 5092 ms
[2025-08-21 10:32:47][350142320651488][5967 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:33:02][351596890885512][1 ms][INFO] === Request start ===
[2025-08-21 10:33:02][351596890885512][2 ms][DEBUG] START check_frida
[2025-08-21 10:33:02][351596890885512][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:33:03][351596890885512][300 ms][DEBUG] SU: done in 298 ms; outroot          1313     1 2283564   4484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:33:03][351596890885512][300 ms][DEBUG] check_frida: running
[2025-08-21 10:33:03][351596890885512][300 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 10:33:03][351596890885512][300 ms][DEBUG] START check_scloud
[2025-08-21 10:33:03][351596890885512][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:33:03][351596890885512][596 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23495028 108168 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:33:03][351596890885512][596 ms][DEBUG] targetPkg: running
[2025-08-21 10:33:03][351596890885512][596 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:33:03][351596890885512][596 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:33:03][351596890885512][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTk2ODkwODg1NTEyIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1hCMDRNMTRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjk1In0='" -e "main()" -q"
[2025-08-21 10:33:03][351596890885512][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:33:03][351596890885512][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTk2ODkwODg1NTEyIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1hCMDRNMTRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjk1In0='" -e "main()" -q"
[2025-08-21 10:33:06][351596890885512][3393 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTk2ODkwODg1NTEyIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1hCMDRNMTRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjk1In0="\r\n
[2025-08-21 10:33:10][351596890885512][7891 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2aefcb67-54e2-4d75-92c2-debdc67e075e","id":"QR_2aefcb67-54e2-4d75-92c2-debdc67e075e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:33:10][351596890885512][7892 ms][DEBUG] proc_open done in 7295 ms; code=0; res.len=3152
[2025-08-21 10:33:10][351596890885512][7892 ms][DEBUG] END   runCmdUntilRes#1 in 7295 ms
[2025-08-21 10:33:10][351596890885512][7892 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:33:19][356544392595986][0 ms][INFO] === Request start ===
[2025-08-21 10:33:19][356544392595986][1 ms][DEBUG] START check_frida
[2025-08-21 10:33:19][356544392595986][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:33:19][356544392595986][297 ms][DEBUG] SU: done in 296 ms; outroot          1313     1 2299984   4516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:33:19][356544392595986][297 ms][DEBUG] check_frida: running
[2025-08-21 10:33:19][356544392595986][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 10:33:19][356544392595986][297 ms][DEBUG] START check_scloud
[2025-08-21 10:33:19][356544392595986][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:33:19][356544392595986][578 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23495060 106204 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:33:19][356544392595986][578 ms][DEBUG] targetPkg: running
[2025-08-21 10:33:19][356544392595986][578 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:33:19][356544392595986][578 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:33:19][356544392595986][578 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0MzkyNTk1OTg2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1gxMDBMTlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzQ2In0='" -e "main()" -q"
[2025-08-21 10:33:19][356544392595986][579 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:33:19][356544392595986][579 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0MzkyNTk1OTg2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1gxMDBMTlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzQ2In0='" -e "main()" -q"
[2025-08-21 10:33:22][356544392595986][3359 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NTQ0MzkyNTk1OTg2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1gxMDBMTlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzQ2In0="\r\n
[2025-08-21 10:33:27][356544392595986][7873 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14942a57-c85d-4457-94a2-26b93562088d","id":"QR_14942a57-c85d-4457-94a2-26b93562088d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:33:27][356544392595986][7873 ms][DEBUG] proc_open done in 7294 ms; code=0; res.len=3152
[2025-08-21 10:33:27][356544392595986][7873 ms][DEBUG] END   runCmdUntilRes#1 in 7295 ms
[2025-08-21 10:33:27][356544392595986][7873 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:33:29][350013907582893][0 ms][INFO] === Request start ===
[2025-08-21 10:33:29][350013907582893][1 ms][DEBUG] START check_frida
[2025-08-21 10:33:29][350013907582893][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:33:29][350013907582893][302 ms][DEBUG] SU: done in 301 ms; outroot          1313     1 2299984   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:33:29][350013907582893][302 ms][DEBUG] check_frida: running
[2025-08-21 10:33:29][350013907582893][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 10:33:29][350013907582893][303 ms][DEBUG] START check_scloud
[2025-08-21 10:33:29][350013907582893][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:33:29][350013907582893][600 ms][DEBUG] SU: done in 298 ms; outu0_a118       7399 30745 23495092 106812 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:33:29][350013907582893][600 ms][DEBUG] targetPkg: running
[2025-08-21 10:33:29][350013907582893][600 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 10:33:29][350013907582893][600 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:33:29][350013907582893][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzOTA3NTgyODkzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MTZNMUVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM1NCJ9'" -e "main()" -q"
[2025-08-21 10:33:29][350013907582893][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:33:29][350013907582893][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzOTA3NTgyODkzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MTZNMUVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM1NCJ9'" -e "main()" -q"
[2025-08-21 10:33:32][350013907582893][3395 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzOTA3NTgyODkzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MTZNMUVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM1NCJ9"\r\n
[2025-08-21 10:33:34][350013907582893][5551 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_172b78b6-981e-4342-b346-7bd0927456a2","id":"QR_172b78b6-981e-4342-b346-7bd0927456a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:33:34][350013907582893][5551 ms][DEBUG] proc_open done in 4950 ms; code=0; res.len=3152
[2025-08-21 10:33:34][350013907582893][5551 ms][DEBUG] END   runCmdUntilRes#1 in 4951 ms
[2025-08-21 10:33:34][350013907582893][5551 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:33:47][357435844143625][0 ms][INFO] === Request start ===
[2025-08-21 10:33:47][357435844143625][1 ms][DEBUG] START check_frida
[2025-08-21 10:33:47][357435844143625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:33:47][357435844143625][302 ms][DEBUG] SU: done in 301 ms; outroot          1313     1 2299984   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:33:47][357435844143625][302 ms][DEBUG] check_frida: running
[2025-08-21 10:33:47][357435844143625][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 10:33:47][357435844143625][302 ms][DEBUG] START check_scloud
[2025-08-21 10:33:47][357435844143625][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:33:47][357435844143625][598 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23495124 107396 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:33:47][357435844143625][598 ms][DEBUG] targetPkg: running
[2025-08-21 10:33:47][357435844143625][598 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:33:47][357435844143625][599 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:33:47][357435844143625][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0MTQzNjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MDE2QTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDI1In0='" -e "main()" -q"
[2025-08-21 10:33:47][357435844143625][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:33:47][357435844143625][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0MTQzNjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MDE2QTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDI1In0='" -e "main()" -q"
[2025-08-21 10:33:50][357435844143625][3379 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDM1ODQ0MTQzNjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MDE2QTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDI1In0="\r\n
[2025-08-21 10:33:54][355622366805465][0 ms][INFO] === Request start ===
[2025-08-21 10:33:55][357435844143625][8081 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_363a7b14-bcf1-4f32-a5d2-704c96d7b2dc","id":"QR_363a7b14-bcf1-4f32-a5d2-704c96d7b2dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:33:55][357435844143625][8082 ms][DEBUG] proc_open done in 7483 ms; code=0; res.len=3152
[2025-08-21 10:33:55][357435844143625][8082 ms][DEBUG] END   runCmdUntilRes#1 in 7483 ms
[2025-08-21 10:33:55][357435844143625][8082 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:33:55][355622366805465][1014 ms][DEBUG] START check_frida
[2025-08-21 10:33:55][355622366805465][1014 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:33:55][355622366805465][1280 ms][DEBUG] SU: done in 266 ms; outroot          1313     1 2299984   4484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:33:55][355622366805465][1280 ms][DEBUG] check_frida: running
[2025-08-21 10:33:55][355622366805465][1280 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 10:33:55][355622366805465][1280 ms][DEBUG] START check_scloud
[2025-08-21 10:33:55][355622366805465][1280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:33:56][355622366805465][1576 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23495156 108000 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:33:56][355622366805465][1576 ms][DEBUG] targetPkg: running
[2025-08-21 10:33:56][355622366805465][1576 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:33:56][355622366805465][1576 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:33:56][355622366805465][1577 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NjIyMzY2ODA1NDY1IiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MlQ2UkdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwNSJ9'" -e "main()" -q"
[2025-08-21 10:33:56][355622366805465][1577 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:33:56][355622366805465][1577 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NjIyMzY2ODA1NDY1IiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MlQ2UkdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwNSJ9'" -e "main()" -q"
[2025-08-21 10:33:58][355622366805465][4357 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NjIyMzY2ODA1NDY1IiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MlQ2UkdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwNSJ9"\r\n
[2025-08-21 10:34:00][355622366805465][6216 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_201d6a03-9b63-4cd5-8215-6aec962962ef","id":"QR_201d6a03-9b63-4cd5-8215-6aec962962ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:34:00][355622366805465][6216 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 10:34:00][355622366805465][6216 ms][DEBUG] END   runCmdUntilRes#1 in 4640 ms
[2025-08-21 10:34:00][355622366805465][6216 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:34:08][351771920789279][0 ms][INFO] === Request start ===
[2025-08-21 10:34:08][351771920789279][1 ms][DEBUG] START check_frida
[2025-08-21 10:34:08][351771920789279][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:34:08][351771920789279][303 ms][DEBUG] SU: done in 302 ms; outroot          1313     1 2299984   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:34:08][351771920789279][303 ms][DEBUG] check_frida: running
[2025-08-21 10:34:08][351771920789279][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 10:34:08][351771920789279][303 ms][DEBUG] START check_internet
[2025-08-21 10:34:08][351771920789279][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:34:09][351771920789279][661 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.744/258.744/258.744/0.000 ms\n
[2025-08-21 10:34:09][351771920789279][661 ms][DEBUG] check_internet: online
[2025-08-21 10:34:09][351771920789279][661 ms][DEBUG] END   check_internet in 358 ms
[2025-08-21 10:34:09][351771920789279][661 ms][DEBUG] START check_scloud
[2025-08-21 10:34:09][351771920789279][661 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:34:09][351771920789279][942 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23495188 108584 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:34:09][351771920789279][943 ms][DEBUG] targetPkg: running
[2025-08-21 10:34:09][351771920789279][943 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:34:09][351771920789279][943 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:34:09][351771920789279][943 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTIwNzg5Mjc5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MkMzQ0RSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQVUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE4MiJ9'" -e "main()" -q"
[2025-08-21 10:34:09][351771920789279][943 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:34:09][351771920789279][943 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTIwNzg5Mjc5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MkMzQ0RSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQVUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE4MiJ9'" -e "main()" -q"
[2025-08-21 10:34:12][351771920789279][3754 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzcxOTIwNzg5Mjc5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MkMzQ0RSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQVUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE4MiJ9"\r\n
[2025-08-21 10:34:14][351771920789279][5754 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0aea9226-b5ee-4b70-ba9c-6dc51ccdc9f7","id":"QR_0aea9226-b5ee-4b70-ba9c-6dc51ccdc9f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:34:14][351771920789279][5754 ms][DEBUG] proc_open done in 4811 ms; code=0; res.len=3152
[2025-08-21 10:34:14][351771920789279][5754 ms][DEBUG] END   runCmdUntilRes#1 in 4811 ms
[2025-08-21 10:34:14][351771920789279][5754 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:35:11][351723304422373][1 ms][INFO] === Request start ===
[2025-08-21 10:35:11][351723304422373][2 ms][DEBUG] START check_frida
[2025-08-21 10:35:11][351723304422373][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:35:11][351723304422373][276 ms][DEBUG] SU: done in 274 ms; outroot          1313     1 2283564   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:35:11][351723304422373][276 ms][DEBUG] check_frida: running
[2025-08-21 10:35:11][351723304422373][276 ms][DEBUG] END   check_frida in 274 ms
[2025-08-21 10:35:11][351723304422373][276 ms][DEBUG] START check_scloud
[2025-08-21 10:35:11][351723304422373][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:35:11][351723304422373][573 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23495220 106968 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:35:11][351723304422373][573 ms][DEBUG] targetPkg: running
[2025-08-21 10:35:11][351723304422373][573 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:35:11][351723304422373][573 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:35:11][351723304422373][573 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzIzMzA0NDIyMzczIiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJDMVNWS01MIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM0MSJ9'" -e "main()" -q"
[2025-08-21 10:35:11][351723304422373][573 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:35:11][351723304422373][573 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzIzMzA0NDIyMzczIiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJDMVNWS01MIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM0MSJ9'" -e "main()" -q"
[2025-08-21 10:35:14][351723304422373][3353 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzIzMzA0NDIyMzczIiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJDMVNWS01MIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM0MSJ9"\r\n
[2025-08-21 10:35:17][351723304422373][5837 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c607119a-e392-4396-8c3a-ac53bd618930","id":"QR_c607119a-e392-4396-8c3a-ac53bd618930","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:35:17][351723304422373][5837 ms][DEBUG] proc_open done in 5264 ms; code=0; res.len=3152
[2025-08-21 10:35:17][351723304422373][5837 ms][DEBUG] END   runCmdUntilRes#1 in 5264 ms
[2025-08-21 10:35:17][351723304422373][5837 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:36:09][351424284801336][0 ms][INFO] === Request start ===
[2025-08-21 10:36:09][351424284801336][1 ms][DEBUG] START check_frida
[2025-08-21 10:36:09][351424284801336][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:36:09][351424284801336][258 ms][DEBUG] SU: done in 256 ms; outroot          1313     1 2284576   4360 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:36:09][351424284801336][258 ms][DEBUG] check_frida: running
[2025-08-21 10:36:09][351424284801336][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 10:36:09][351424284801336][258 ms][DEBUG] START check_internet
[2025-08-21 10:36:09][351424284801336][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:36:10][351424284801336][664 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.850/200.850/200.850/0.000 ms\n
[2025-08-21 10:36:10][351424284801336][664 ms][DEBUG] check_internet: online
[2025-08-21 10:36:10][351424284801336][664 ms][DEBUG] END   check_internet in 406 ms
[2025-08-21 10:36:10][351424284801336][664 ms][DEBUG] START check_scloud
[2025-08-21 10:36:10][351424284801336][664 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:36:10][351424284801336][961 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23495252 102452 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:36:10][351424284801336][961 ms][DEBUG] targetPkg: running
[2025-08-21 10:36:10][351424284801336][961 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:36:10][351424284801336][961 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:36:10][351424284801336][961 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDI0Mjg0ODAxMzM2IiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlQVDEwS1RGR0siLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1XRCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NzIzIn0='" -e "main()" -q"
[2025-08-21 10:36:10][351424284801336][961 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:36:10][351424284801336][961 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDI0Mjg0ODAxMzM2IiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlQVDEwS1RGR0siLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1XRCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NzIzIn0='" -e "main()" -q"
[2025-08-21 10:36:13][351424284801336][3772 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDI0Mjg0ODAxMzM2IiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlQVDEwS1RGR0siLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1XRCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NzIzIn0="\r\n
[2025-08-21 10:36:15][351424284801336][5553 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e8ec74d-56cf-4cc8-98ae-adc0879c9245","id":"QR_9e8ec74d-56cf-4cc8-98ae-adc0879c9245","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:36:15][351424284801336][5553 ms][DEBUG] proc_open done in 4592 ms; code=0; res.len=3152
[2025-08-21 10:36:15][351424284801336][5554 ms][DEBUG] END   runCmdUntilRes#1 in 4592 ms
[2025-08-21 10:36:15][351424284801336][5554 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:36:26][353220828230679][0 ms][INFO] === Request start ===
[2025-08-21 10:36:26][353220828230679][1 ms][DEBUG] START check_frida
[2025-08-21 10:36:26][353220828230679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:36:27][353220828230679][317 ms][DEBUG] SU: done in 316 ms; outroot          1313     1 2299984   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:36:27][353220828230679][317 ms][DEBUG] check_frida: running
[2025-08-21 10:36:27][353220828230679][317 ms][DEBUG] END   check_frida in 316 ms
[2025-08-21 10:36:27][353220828230679][317 ms][DEBUG] START check_internet
[2025-08-21 10:36:27][353220828230679][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:36:27][353220828230679][567 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=161 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 161.184/161.184/161.184/0.000 ms\n
[2025-08-21 10:36:27][353220828230679][567 ms][DEBUG] check_internet: online
[2025-08-21 10:36:27][353220828230679][567 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 10:36:27][353220828230679][567 ms][DEBUG] START check_scloud
[2025-08-21 10:36:27][353220828230679][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:36:27][353220828230679][848 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23495284 103088 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:36:27][353220828230679][848 ms][DEBUG] targetPkg: running
[2025-08-21 10:36:27][353220828230679][848 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:36:27][353220828230679][848 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:36:27][353220828230679][848 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjIwODI4MjMwNjc5IiwibW9kZWwiOiJTTS1BMjM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDNLRjlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY3MCJ9'" -e "main()" -q"
[2025-08-21 10:36:27][353220828230679][848 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:36:27][353220828230679][848 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjIwODI4MjMwNjc5IiwibW9kZWwiOiJTTS1BMjM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDNLRjlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY3MCJ9'" -e "main()" -q"
[2025-08-21 10:36:30][353220828230679][3628 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjIwODI4MjMwNjc5IiwibW9kZWwiOiJTTS1BMjM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDNLRjlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY3MCJ9"\r\n
[2025-08-21 10:36:32][353220828230679][5862 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7c083a9-1250-4566-8f08-edcd7de2b8b1","id":"QR_e7c083a9-1250-4566-8f08-edcd7de2b8b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:36:32][353220828230679][5862 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 10:36:32][353220828230679][5862 ms][DEBUG] END   runCmdUntilRes#1 in 5014 ms
[2025-08-21 10:36:32][353220828230679][5862 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:37:04][352688110598592][0 ms][INFO] === Request start ===
[2025-08-21 10:37:04][352688110598592][1 ms][DEBUG] START check_frida
[2025-08-21 10:37:04][352688110598592][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:37:04][352688110598592][312 ms][DEBUG] SU: done in 311 ms; outroot          1313     1 2283564   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:37:04][352688110598592][312 ms][DEBUG] check_frida: running
[2025-08-21 10:37:04][352688110598592][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 10:37:04][352688110598592][312 ms][DEBUG] START check_scloud
[2025-08-21 10:37:04][352688110598592][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:37:04][352688110598592][593 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23495444 102120 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:37:04][352688110598592][593 ms][DEBUG] targetPkg: running
[2025-08-21 10:37:04][352688110598592][593 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:37:04][352688110598592][593 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:37:04][352688110598592][593 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjg4MTEwNTk4NTkyIiwibW9kZWwiOiJTTS1HNzcwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE4xMFA5NVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJVFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM2OCJ9'" -e "main()" -q"
[2025-08-21 10:37:04][352688110598592][593 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:37:04][352688110598592][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjg4MTEwNTk4NTkyIiwibW9kZWwiOiJTTS1HNzcwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE4xMFA5NVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJVFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM2OCJ9'" -e "main()" -q"
[2025-08-21 10:37:06][350987614910879][1 ms][INFO] === Request start ===
[2025-08-21 10:37:07][352688110598592][3390 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjg4MTEwNTk4NTkyIiwibW9kZWwiOiJTTS1HNzcwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE4xMFA5NVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJVFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM2OCJ9"\r\n
[2025-08-21 10:37:09][352688110598592][5233 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2d20842-dd3f-4ddc-bf04-7f0741bf69ce","id":"QR_e2d20842-dd3f-4ddc-bf04-7f0741bf69ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:37:09][352688110598592][5233 ms][DEBUG] proc_open done in 4640 ms; code=0; res.len=3152
[2025-08-21 10:37:09][352688110598592][5234 ms][DEBUG] END   runCmdUntilRes#1 in 4640 ms
[2025-08-21 10:37:09][352688110598592][5234 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:37:09][350987614910879][3034 ms][DEBUG] START check_frida
[2025-08-21 10:37:09][350987614910879][3034 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:37:10][350987614910879][3347 ms][DEBUG] SU: done in 312 ms; outroot          1313     1 2299984   4408 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:37:10][350987614910879][3347 ms][DEBUG] check_frida: running
[2025-08-21 10:37:10][350987614910879][3347 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 10:37:10][350987614910879][3347 ms][DEBUG] START check_scloud
[2025-08-21 10:37:10][350987614910879][3347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:37:10][350987614910879][3644 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23495476 102716 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:37:10][350987614910879][3644 ms][DEBUG] targetPkg: running
[2025-08-21 10:37:10][350987614910879][3644 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:37:10][350987614910879][3644 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:37:10][350987614910879][3644 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjE0OTEwODc5IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MFNUS0JFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE2MCJ9'" -e "main()" -q"
[2025-08-21 10:37:10][350987614910879][3645 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:37:10][350987614910879][3645 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjE0OTEwODc5IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MFNUS0JFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE2MCJ9'" -e "main()" -q"
[2025-08-21 10:37:12][350249604576289][1 ms][INFO] === Request start ===
[2025-08-21 10:37:13][350987614910879][6424 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTg3NjE0OTEwODc5IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MFNUS0JFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE2MCJ9"\r\n
[2025-08-21 10:37:14][350987614910879][8220 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_258c100b-2e7b-4166-8d10-3cd5fc042853","id":"QR_258c100b-2e7b-4166-8d10-3cd5fc042853","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:37:14][350987614910879][8221 ms][DEBUG] proc_open done in 4576 ms; code=0; res.len=3152
[2025-08-21 10:37:14][350987614910879][8221 ms][DEBUG] END   runCmdUntilRes#1 in 4576 ms
[2025-08-21 10:37:14][350987614910879][8221 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:37:15][350249604576289][3042 ms][DEBUG] START check_frida
[2025-08-21 10:37:15][350249604576289][3042 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:37:15][350249604576289][3354 ms][DEBUG] SU: done in 312 ms; outroot          1313     1 2299984   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:37:15][350249604576289][3354 ms][DEBUG] check_frida: running
[2025-08-21 10:37:15][350249604576289][3354 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 10:37:15][350249604576289][3354 ms][DEBUG] START check_scloud
[2025-08-21 10:37:15][350249604576289][3354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:37:16][350249604576289][3651 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23499604 103352 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:37:16][350249604576289][3651 ms][DEBUG] targetPkg: running
[2025-08-21 10:37:16][350249604576289][3651 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:37:16][350249604576289][3651 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:37:16][350249604576289][3651 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjQ5NjA0NTc2Mjg5IiwibW9kZWwiOiJTTS1BMjU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hCMkJWS0xOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIyMCJ9'" -e "main()" -q"
[2025-08-21 10:37:16][350249604576289][3651 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:37:16][350249604576289][3651 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjQ5NjA0NTc2Mjg5IiwibW9kZWwiOiJTTS1BMjU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hCMkJWS0xOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIyMCJ9'" -e "main()" -q"
[2025-08-21 10:37:18][350249604576289][6447 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjQ5NjA0NTc2Mjg5IiwibW9kZWwiOiJTTS1BMjU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hCMkJWS0xOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIyMCJ9"\r\n
[2025-08-21 10:37:20][350249604576289][8462 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53a2422c-8e82-4abb-87c0-71163fbe1a01","id":"QR_53a2422c-8e82-4abb-87c0-71163fbe1a01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:37:20][350249604576289][8462 ms][DEBUG] proc_open done in 4811 ms; code=0; res.len=3152
[2025-08-21 10:37:20][350249604576289][8462 ms][DEBUG] END   runCmdUntilRes#1 in 4811 ms
[2025-08-21 10:37:20][350249604576289][8462 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:39:10][350200951380635][1 ms][INFO] === Request start ===
[2025-08-21 10:39:10][350200951380635][2 ms][DEBUG] START check_frida
[2025-08-21 10:39:10][350200951380635][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:39:11][350200951380635][251 ms][DEBUG] SU: done in 249 ms; outroot          1313     1 2282552   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:39:11][350200951380635][251 ms][DEBUG] check_frida: running
[2025-08-21 10:39:11][350200951380635][251 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 10:39:11][350200951380635][251 ms][DEBUG] START check_scloud
[2025-08-21 10:39:11][350200951380635][251 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:39:11][350200951380635][563 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23499636 102192 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:39:11][350200951380635][563 ms][DEBUG] targetPkg: running
[2025-08-21 10:39:11][350200951380635][563 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 10:39:11][350200951380635][563 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:39:11][350200951380635][563 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjAwOTUxMzgwNjM1IiwibW9kZWwiOiJTTS1HOTk4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I2MEI0WFBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjQwIn0='" -e "main()" -q"
[2025-08-21 10:39:11][350200951380635][563 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:39:11][350200951380635][563 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjAwOTUxMzgwNjM1IiwibW9kZWwiOiJTTS1HOTk4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I2MEI0WFBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjQwIn0='" -e "main()" -q"
[2025-08-21 10:39:14][350200951380635][3359 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjAwOTUxMzgwNjM1IiwibW9kZWwiOiJTTS1HOTk4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I2MEI0WFBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjQwIn0="\r\n
[2025-08-21 10:39:17][350200951380635][7030 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a458f61a-e5dd-44e4-8582-685ee201249c","id":"QR_a458f61a-e5dd-44e4-8582-685ee201249c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:39:17][350200951380635][7031 ms][DEBUG] proc_open done in 6467 ms; code=0; res.len=3152
[2025-08-21 10:39:17][350200951380635][7031 ms][DEBUG] END   runCmdUntilRes#1 in 6468 ms
[2025-08-21 10:39:17][350200951380635][7031 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:39:38][353948921886514][0 ms][INFO] === Request start ===
[2025-08-21 10:39:38][353948921886514][1 ms][DEBUG] START check_frida
[2025-08-21 10:39:38][353948921886514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:39:39][353948921886514][277 ms][DEBUG] SU: done in 276 ms; outroot          1313     1 2283564   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:39:39][353948921886514][277 ms][DEBUG] check_frida: running
[2025-08-21 10:39:39][353948921886514][277 ms][DEBUG] END   check_frida in 276 ms
[2025-08-21 10:39:39][353948921886514][277 ms][DEBUG] START check_scloud
[2025-08-21 10:39:39][353948921886514][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:39:39][353948921886514][496 ms][DEBUG] SU: done in 219 ms; outu0_a118       7399 30745 23499668 102784 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:39:39][353948921886514][496 ms][DEBUG] targetPkg: running
[2025-08-21 10:39:39][353948921886514][496 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 10:39:39][353948921886514][496 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:39:39][353948921886514][496 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTQ4OTIxODg2NTE0IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjA0RDJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxURyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMTk1In0='" -e "main()" -q"
[2025-08-21 10:39:39][353948921886514][496 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:39:39][353948921886514][496 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTQ4OTIxODg2NTE0IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjA0RDJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxURyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMTk1In0='" -e "main()" -q"
[2025-08-21 10:39:42][353948921886514][3307 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTQ4OTIxODg2NTE0IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjA0RDJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxURyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMTk1In0="\r\n
[2025-08-21 10:39:45][353948921886514][6338 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84d15a51-5687-4ef9-a92a-4f207712e059","id":"QR_84d15a51-5687-4ef9-a92a-4f207712e059","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:39:45][353948921886514][6339 ms][DEBUG] proc_open done in 5843 ms; code=0; res.len=3152
[2025-08-21 10:39:45][353948921886514][6339 ms][DEBUG] END   runCmdUntilRes#1 in 5843 ms
[2025-08-21 10:39:45][353948921886514][6339 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:39:51][353919116734710][0 ms][INFO] === Request start ===
[2025-08-21 10:39:51][353919116734710][1 ms][DEBUG] START check_frida
[2025-08-21 10:39:51][353919116734710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:39:52][353919116734710][288 ms][DEBUG] SU: done in 287 ms; outroot          1313     1 2299984   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:39:52][353919116734710][289 ms][DEBUG] check_frida: running
[2025-08-21 10:39:52][353919116734710][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 10:39:52][353919116734710][289 ms][DEBUG] START check_scloud
[2025-08-21 10:39:52][353919116734710][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:39:52][353919116734710][585 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23499700 103412 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:39:52][353919116734710][585 ms][DEBUG] targetPkg: running
[2025-08-21 10:39:52][353919116734710][585 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 10:39:52][353919116734710][585 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:39:52][353919116734710][585 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTE5MTE2NzM0NzEwIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTQ2MmEyZWMyMWVmZTMwZGFlYyIsImdyb3VwIjoiZjk5ZWYxY2ItMTU1MS00M2FkLWI2OWQtYTg3NmJhMjM5NmM1IiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDkzIn0='" -e "main()" -q"
[2025-08-21 10:39:52][353919116734710][585 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:39:52][353919116734710][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTE5MTE2NzM0NzEwIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTQ2MmEyZWMyMWVmZTMwZGFlYyIsImdyb3VwIjoiZjk5ZWYxY2ItMTU1MS00M2FkLWI2OWQtYTg3NmJhMjM5NmM1IiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDkzIn0='" -e "main()" -q"
[2025-08-21 10:39:55][353919116734710][3366 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTE5MTE2NzM0NzEwIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTQ2MmEyZWMyMWVmZTMwZGFlYyIsImdyb3VwIjoiZjk5ZWYxY2ItMTU1MS00M2FkLWI2OWQtYTg3NmJhMjM5NmM1IiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDkzIn0="\r\n
[2025-08-21 10:39:57][353919116734710][5631 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b9fb672-f912-4149-aa3b-08c5e35d18fb","id":"QR_9b9fb672-f912-4149-aa3b-08c5e35d18fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:39:57][353919116734710][5631 ms][DEBUG] proc_open done in 5046 ms; code=0; res.len=3152
[2025-08-21 10:39:57][353919116734710][5631 ms][DEBUG] END   runCmdUntilRes#1 in 5046 ms
[2025-08-21 10:39:57][353919116734710][5632 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:40:07][351676563400219][0 ms][INFO] === Request start ===
[2025-08-21 10:40:07][351676563400219][1 ms][DEBUG] START check_frida
[2025-08-21 10:40:07][351676563400219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:40:07][351676563400219][250 ms][DEBUG] SU: done in 248 ms; outroot          1313     1 2299984   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:40:07][351676563400219][250 ms][DEBUG] check_frida: running
[2025-08-21 10:40:07][351676563400219][250 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 10:40:07][351676563400219][250 ms][DEBUG] START check_internet
[2025-08-21 10:40:07][351676563400219][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:40:07][351676563400219][734 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.714/202.714/202.714/0.000 ms\n
[2025-08-21 10:40:07][351676563400219][734 ms][DEBUG] check_internet: online
[2025-08-21 10:40:07][351676563400219][734 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 10:40:07][351676563400219][734 ms][DEBUG] START check_scloud
[2025-08-21 10:40:07][351676563400219][734 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:40:08][351676563400219][969 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23499732 102724 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:40:08][351676563400219][969 ms][DEBUG] targetPkg: running
[2025-08-21 10:40:08][351676563400219][969 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 10:40:08][351676563400219][969 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:40:08][351676563400219][969 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjc2NTYzNDAwMjE5IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MDFNNjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODA1In0='" -e "main()" -q"
[2025-08-21 10:40:08][351676563400219][969 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:40:08][351676563400219][969 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjc2NTYzNDAwMjE5IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MDFNNjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODA1In0='" -e "main()" -q"
[2025-08-21 10:40:10][351676563400219][3733 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjc2NTYzNDAwMjE5IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MDFNNjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODA1In0="\r\n
[2025-08-21 10:40:14][351676563400219][6951 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bb07c90-2336-4092-8b43-ec6b843486fa","id":"QR_1bb07c90-2336-4092-8b43-ec6b843486fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:40:14][351676563400219][6951 ms][DEBUG] proc_open done in 5982 ms; code=0; res.len=3152
[2025-08-21 10:40:14][351676563400219][6952 ms][DEBUG] END   runCmdUntilRes#1 in 5983 ms
[2025-08-21 10:40:14][351676563400219][6952 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:40:25][351065780627905][0 ms][INFO] === Request start ===
[2025-08-21 10:40:25][351065780627905][1 ms][DEBUG] START check_frida
[2025-08-21 10:40:25][351065780627905][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:40:25][351065780627905][296 ms][DEBUG] SU: done in 294 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:40:25][351065780627905][296 ms][DEBUG] check_frida: running
[2025-08-21 10:40:25][351065780627905][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 10:40:25][351065780627905][296 ms][DEBUG] START check_internet
[2025-08-21 10:40:25][351065780627905][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:40:26][351065780627905][780 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.365/203.365/203.365/0.000 ms\n
[2025-08-21 10:40:26][351065780627905][780 ms][DEBUG] check_internet: online
[2025-08-21 10:40:26][351065780627905][780 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 10:40:26][351065780627905][780 ms][DEBUG] START check_scloud
[2025-08-21 10:40:26][351065780627905][780 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:40:26][351065780627905][1014 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23499764 103176 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:40:26][351065780627905][1014 ms][DEBUG] targetPkg: running
[2025-08-21 10:40:26][351065780627905][1014 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 10:40:26][351065780627905][1014 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:40:26][351065780627905][1014 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDY1NzgwNjI3OTA1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMEFZVkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTA5In0='" -e "main()" -q"
[2025-08-21 10:40:26][351065780627905][1014 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:40:26][351065780627905][1014 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDY1NzgwNjI3OTA1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMEFZVkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTA5In0='" -e "main()" -q"
[2025-08-21 10:40:29][351065780627905][3779 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDY1NzgwNjI3OTA1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMEFZVkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTA5In0="\r\n
[2025-08-21 10:40:32][351065780627905][7012 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bca0d271-2f8e-463e-bdd9-cdecdb1964f5","id":"QR_bca0d271-2f8e-463e-bdd9-cdecdb1964f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:40:32][351065780627905][7013 ms][DEBUG] proc_open done in 5999 ms; code=0; res.len=3152
[2025-08-21 10:40:32][351065780627905][7013 ms][DEBUG] END   runCmdUntilRes#1 in 5999 ms
[2025-08-21 10:40:32][351065780627905][7013 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:40:42][352053264003487][0 ms][INFO] === Request start ===
[2025-08-21 10:40:42][352053264003487][1 ms][DEBUG] START check_frida
[2025-08-21 10:40:42][352053264003487][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:40:42][352053264003487][295 ms][DEBUG] SU: done in 294 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:40:42][352053264003487][295 ms][DEBUG] check_frida: running
[2025-08-21 10:40:42][352053264003487][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 10:40:42][352053264003487][295 ms][DEBUG] START check_internet
[2025-08-21 10:40:42][352053264003487][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:40:43][352053264003487][545 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.849/143.849/143.849/0.000 ms\n
[2025-08-21 10:40:43][352053264003487][545 ms][DEBUG] check_internet: online
[2025-08-21 10:40:43][352053264003487][545 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 10:40:43][352053264003487][545 ms][DEBUG] START check_scloud
[2025-08-21 10:40:43][352053264003487][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:40:43][352053264003487][842 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23499796 102508 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:40:43][352053264003487][842 ms][DEBUG] targetPkg: running
[2025-08-21 10:40:43][352053264003487][842 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:40:43][352053264003487][842 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:40:43][352053264003487][842 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDUzMjY0MDAzNDg3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MFI4OTdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzgzIn0='" -e "main()" -q"
[2025-08-21 10:40:43][352053264003487][842 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:40:43][352053264003487][842 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDUzMjY0MDAzNDg3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MFI4OTdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzgzIn0='" -e "main()" -q"
[2025-08-21 10:40:46][352053264003487][3622 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDUzMjY0MDAzNDg3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MFI4OTdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzgzIn0="\r\n
[2025-08-21 10:40:49][352053264003487][6871 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a84d943-d0c2-4dec-b44f-9592c8e7ebdf","id":"QR_0a84d943-d0c2-4dec-b44f-9592c8e7ebdf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:40:49][352053264003487][6871 ms][DEBUG] proc_open done in 6030 ms; code=0; res.len=3152
[2025-08-21 10:40:49][352053264003487][6871 ms][DEBUG] END   runCmdUntilRes#1 in 6030 ms
[2025-08-21 10:40:49][352053264003487][6872 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:40:51][351460455658485][0 ms][INFO] === Request start ===
[2025-08-21 10:40:51][351460455658485][1 ms][DEBUG] START check_frida
[2025-08-21 10:40:51][351460455658485][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:40:51][351460455658485][288 ms][DEBUG] SU: done in 287 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:40:51][351460455658485][288 ms][DEBUG] check_frida: running
[2025-08-21 10:40:51][351460455658485][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 10:40:51][351460455658485][288 ms][DEBUG] START check_internet
[2025-08-21 10:40:51][351460455658485][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:40:51][351460455658485][583 ms][DEBUG] SU: done in 294 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.570/181.570/181.570/0.000 ms\n
[2025-08-21 10:40:51][351460455658485][583 ms][DEBUG] check_internet: online
[2025-08-21 10:40:51][351460455658485][583 ms][DEBUG] END   check_internet in 295 ms
[2025-08-21 10:40:51][351460455658485][583 ms][DEBUG] START check_scloud
[2025-08-21 10:40:51][351460455658485][583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:40:51][351460455658485][880 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23499828 103136 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:40:51][351460455658485][880 ms][DEBUG] targetPkg: running
[2025-08-21 10:40:51][351460455658485][880 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:40:51][351460455658485][880 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:40:51][351460455658485][880 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDYwNDU1NjU4NDg1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTQ2SzBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTIyIn0='" -e "main()" -q"
[2025-08-21 10:40:51][351460455658485][880 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:40:51][351460455658485][880 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDYwNDU1NjU4NDg1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTQ2SzBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTIyIn0='" -e "main()" -q"
[2025-08-21 10:40:54][351460455658485][3660 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDYwNDU1NjU4NDg1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTQ2SzBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTIyIn0="\r\n
[2025-08-21 10:40:58][351460455658485][7331 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d30c2fb1-ad1f-4610-8792-d69debd28401","id":"QR_d30c2fb1-ad1f-4610-8792-d69debd28401","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:40:58][351460455658485][7332 ms][DEBUG] proc_open done in 6452 ms; code=0; res.len=3152
[2025-08-21 10:40:58][351460455658485][7332 ms][DEBUG] END   runCmdUntilRes#1 in 6452 ms
[2025-08-21 10:40:58][351460455658485][7332 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:41:21][355738551572445][1 ms][INFO] === Request start ===
[2025-08-21 10:41:21][355738551572445][1 ms][DEBUG] START check_frida
[2025-08-21 10:41:21][355738551572445][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:41:21][355738551572445][288 ms][DEBUG] SU: done in 286 ms; outroot          1313     1 2283564   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:41:21][355738551572445][288 ms][DEBUG] check_frida: running
[2025-08-21 10:41:21][355738551572445][288 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 10:41:21][355738551572445][288 ms][DEBUG] START check_scloud
[2025-08-21 10:41:21][355738551572445][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:41:21][355738551572445][569 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23499860 101740 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:41:21][355738551572445][569 ms][DEBUG] targetPkg: running
[2025-08-21 10:41:21][355738551572445][569 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:41:21][355738551572445][569 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:41:21][355738551572445][570 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NzM4NTUxNTcyNDQ1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g4MDBZRDJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzQyIn0='" -e "main()" -q"
[2025-08-21 10:41:21][355738551572445][570 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:41:21][355738551572445][570 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NzM4NTUxNTcyNDQ1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g4MDBZRDJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzQyIn0='" -e "main()" -q"
[2025-08-21 10:41:24][355738551572445][3365 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NzM4NTUxNTcyNDQ1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g4MDBZRDJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzQyIn0="\r\n
[2025-08-21 10:41:27][355738551572445][6443 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_738b5999-178f-497c-b909-f3110e6e4b2c","id":"QR_738b5999-178f-497c-b909-f3110e6e4b2c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:41:27][355738551572445][6443 ms][DEBUG] proc_open done in 5873 ms; code=0; res.len=3152
[2025-08-21 10:41:27][355738551572445][6443 ms][DEBUG] END   runCmdUntilRes#1 in 5873 ms
[2025-08-21 10:41:27][355738551572445][6443 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:41:33][358991132423326][1 ms][INFO] === Request start ===
[2025-08-21 10:41:33][358991132423326][1 ms][DEBUG] START check_frida
[2025-08-21 10:41:33][358991132423326][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:41:33][358991132423326][245 ms][DEBUG] SU: done in 244 ms; outroot          1313     1 2299984   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:41:33][358991132423326][246 ms][DEBUG] check_frida: running
[2025-08-21 10:41:33][358991132423326][246 ms][DEBUG] END   check_frida in 244 ms
[2025-08-21 10:41:33][358991132423326][246 ms][DEBUG] START check_scloud
[2025-08-21 10:41:33][358991132423326][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:41:34][358991132423326][558 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23499892 102304 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:41:34][358991132423326][558 ms][DEBUG] targetPkg: running
[2025-08-21 10:41:34][358991132423326][558 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 10:41:34][358991132423326][558 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:41:34][358991132423326][558 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4OTkxMTMyNDIzMzI2IiwibW9kZWwiOiJTTS1TNzIxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kxNERESEhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NjYyIn0='" -e "main()" -q"
[2025-08-21 10:41:34][358991132423326][558 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:41:34][358991132423326][558 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4OTkxMTMyNDIzMzI2IiwibW9kZWwiOiJTTS1TNzIxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kxNERESEhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NjYyIn0='" -e "main()" -q"
[2025-08-21 10:41:36][358991132423326][3385 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4OTkxMTMyNDIzMzI2IiwibW9kZWwiOiJTTS1TNzIxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kxNERESEhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NjYyIn0="\r\n
[2025-08-21 10:41:41][358991132423326][7618 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27b63df1-a0d6-4a17-9757-e74703c7b73a","id":"QR_27b63df1-a0d6-4a17-9757-e74703c7b73a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:41:41][358991132423326][7619 ms][DEBUG] proc_open done in 7061 ms; code=0; res.len=3152
[2025-08-21 10:41:41][358991132423326][7619 ms][DEBUG] END   runCmdUntilRes#1 in 7061 ms
[2025-08-21 10:41:41][358991132423326][7619 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:41:50][353154432926853][0 ms][INFO] === Request start ===
[2025-08-21 10:41:50][353154432926853][1 ms][DEBUG] START check_frida
[2025-08-21 10:41:50][353154432926853][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:41:50][353154432926853][264 ms][DEBUG] SU: done in 263 ms; outroot          1313     1 2299984   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:41:50][353154432926853][264 ms][DEBUG] check_frida: running
[2025-08-21 10:41:50][353154432926853][264 ms][DEBUG] END   check_frida in 263 ms
[2025-08-21 10:41:50][353154432926853][264 ms][DEBUG] START check_scloud
[2025-08-21 10:41:50][353154432926853][264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:41:50][353154432926853][484 ms][DEBUG] SU: done in 220 ms; outu0_a118       7399 30745 23499924 102844 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:41:50][353154432926853][484 ms][DEBUG] targetPkg: running
[2025-08-21 10:41:50][353154432926853][484 ms][DEBUG] END   check_scloud in 220 ms
[2025-08-21 10:41:50][353154432926853][484 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:41:50][353154432926853][484 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTU0NDMyOTI2ODUzIiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMVo1Rk5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA1MSJ9'" -e "main()" -q"
[2025-08-21 10:41:50][353154432926853][484 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:41:50][353154432926853][484 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTU0NDMyOTI2ODUzIiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMVo1Rk5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA1MSJ9'" -e "main()" -q"
[2025-08-21 10:41:53][353154432926853][3263 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTU0NDMyOTI2ODUzIiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMVo1Rk5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA1MSJ9"\r\n
[2025-08-21 10:41:55][353154432926853][5418 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_def0a3cd-b078-47ee-8ec5-4d2e43798f04","id":"QR_def0a3cd-b078-47ee-8ec5-4d2e43798f04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:41:55][353154432926853][5419 ms][DEBUG] proc_open done in 4934 ms; code=0; res.len=3152
[2025-08-21 10:41:55][353154432926853][5419 ms][DEBUG] END   runCmdUntilRes#1 in 4934 ms
[2025-08-21 10:41:55][353154432926853][5419 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:42:03][354048746823989][0 ms][INFO] === Request start ===
[2025-08-21 10:42:03][354048746823989][1 ms][DEBUG] START check_frida
[2025-08-21 10:42:03][354048746823989][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:42:03][354048746823989][298 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2299984   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:42:03][354048746823989][298 ms][DEBUG] check_frida: running
[2025-08-21 10:42:03][354048746823989][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 10:42:03][354048746823989][299 ms][DEBUG] START check_internet
[2025-08-21 10:42:03][354048746823989][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:42:04][354048746823989][673 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.788/269.788/269.788/0.000 ms\n
[2025-08-21 10:42:04][354048746823989][673 ms][DEBUG] check_internet: online
[2025-08-21 10:42:04][354048746823989][673 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 10:42:04][354048746823989][673 ms][DEBUG] START check_scloud
[2025-08-21 10:42:04][354048746823989][673 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:42:04][354048746823989][956 ms][DEBUG] SU: done in 283 ms; outu0_a118       7399 30745 23499956 103396 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:42:04][354048746823989][956 ms][DEBUG] targetPkg: running
[2025-08-21 10:42:04][354048746823989][956 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 10:42:04][354048746823989][957 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:42:04][354048746823989][957 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDQ4NzQ2ODIzOTg5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMjlZN0ZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY4MSJ9'" -e "main()" -q"
[2025-08-21 10:42:04][354048746823989][957 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:42:04][354048746823989][957 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDQ4NzQ2ODIzOTg5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMjlZN0ZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY4MSJ9'" -e "main()" -q"
[2025-08-21 10:42:07][354048746823989][3735 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDQ4NzQ2ODIzOTg5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMjlZN0ZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY4MSJ9"\r\n
[2025-08-21 10:42:09][354048746823989][5875 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f177e23e-a525-4c4e-8f4a-fadbf776c486","id":"QR_f177e23e-a525-4c4e-8f4a-fadbf776c486","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:42:09][354048746823989][5875 ms][DEBUG] proc_open done in 4918 ms; code=0; res.len=3152
[2025-08-21 10:42:09][354048746823989][5875 ms][DEBUG] END   runCmdUntilRes#1 in 4918 ms
[2025-08-21 10:42:09][354048746823989][5875 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:42:12][356544398773595][0 ms][INFO] === Request start ===
[2025-08-21 10:42:12][356544398773595][1 ms][DEBUG] START check_frida
[2025-08-21 10:42:12][356544398773595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:42:12][356544398773595][297 ms][DEBUG] SU: done in 296 ms; outroot          1313     1 2299984   4476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:42:12][356544398773595][297 ms][DEBUG] check_frida: running
[2025-08-21 10:42:12][356544398773595][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 10:42:12][356544398773595][297 ms][DEBUG] START check_internet
[2025-08-21 10:42:12][356544398773595][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:42:13][356544398773595][594 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=180 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 180.606/180.606/180.606/0.000 ms\n
[2025-08-21 10:42:13][356544398773595][594 ms][DEBUG] check_internet: online
[2025-08-21 10:42:13][356544398773595][594 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 10:42:13][356544398773595][594 ms][DEBUG] START check_scloud
[2025-08-21 10:42:13][356544398773595][594 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:42:13][356544398773595][828 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23499988 103852 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:42:13][356544398773595][828 ms][DEBUG] targetPkg: running
[2025-08-21 10:42:13][356544398773595][828 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 10:42:13][356544398773595][828 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:42:13][356544398773595][828 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0Mzk4NzczNTk1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1dDMDZHVEFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzU0In0='" -e "main()" -q"
[2025-08-21 10:42:13][356544398773595][828 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:42:13][356544398773595][828 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0Mzk4NzczNTk1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1dDMDZHVEFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzU0In0='" -e "main()" -q"
[2025-08-21 10:42:16][356544398773595][3609 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NTQ0Mzk4NzczNTk1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1dDMDZHVEFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzU0In0="\r\n
[2025-08-21 10:42:19][350389915816808][1 ms][INFO] === Request start ===
[2025-08-21 10:42:21][356544398773595][9170 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8d433f8-9729-4284-bf4f-f0f07eb06ddc","id":"QR_b8d433f8-9729-4284-bf4f-f0f07eb06ddc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:42:21][356544398773595][9170 ms][DEBUG] proc_open done in 8341 ms; code=0; res.len=3152
[2025-08-21 10:42:21][356544398773595][9170 ms][DEBUG] END   runCmdUntilRes#1 in 8342 ms
[2025-08-21 10:42:21][356544398773595][9170 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:42:21][352501918776536][0 ms][INFO] === Request start ===
[2025-08-21 10:42:21][352501918776536][0 ms][DEBUG] START check_frida
[2025-08-21 10:42:21][352501918776536][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:42:21][352501918776536][280 ms][DEBUG] SU: done in 279 ms; outroot          1313     1 2299984   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:42:21][352501918776536][280 ms][DEBUG] check_frida: running
[2025-08-21 10:42:21][352501918776536][280 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 10:42:21][352501918776536][280 ms][DEBUG] START check_internet
[2025-08-21 10:42:21][352501918776536][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:42:22][352501918776536][576 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.727/191.727/191.727/0.000 ms\n
[2025-08-21 10:42:22][352501918776536][576 ms][DEBUG] check_internet: online
[2025-08-21 10:42:22][352501918776536][576 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 10:42:22][352501918776536][576 ms][DEBUG] START check_scloud
[2025-08-21 10:42:22][352501918776536][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:42:22][352501918776536][873 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23500020 104420 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:42:22][352501918776536][873 ms][DEBUG] targetPkg: running
[2025-08-21 10:42:22][352501918776536][873 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:42:22][352501918776536][873 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:42:22][352501918776536][873 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTAxOTE4Nzc2NTM2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1ME1IV1FXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU1NyJ9'" -e "main()" -q"
[2025-08-21 10:42:22][352501918776536][873 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:42:22][352501918776536][873 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTAxOTE4Nzc2NTM2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1ME1IV1FXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU1NyJ9'" -e "main()" -q"
[2025-08-21 10:42:25][352501918776536][3701 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTAxOTE4Nzc2NTM2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1ME1IV1FXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU1NyJ9"\r\n
[2025-08-21 10:42:27][352501918776536][5778 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6b960ce-e021-4319-8ec7-79478985becb","id":"QR_f6b960ce-e021-4319-8ec7-79478985becb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:42:27][352501918776536][5778 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 10:42:27][352501918776536][5778 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 10:42:27][352501918776536][5778 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:42:28][350389915816808][9131 ms][DEBUG] START check_frida
[2025-08-21 10:42:28][350389915816808][9131 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:42:28][350389915816808][9428 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2299984   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:42:28][350389915816808][9428 ms][DEBUG] check_frida: running
[2025-08-21 10:42:28][350389915816808][9428 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 10:42:28][350389915816808][9428 ms][DEBUG] START check_internet
[2025-08-21 10:42:28][350389915816808][9429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:42:28][350389915816808][9694 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.088/142.088/142.088/0.000 ms\n
[2025-08-21 10:42:28][350389915816808][9694 ms][DEBUG] check_internet: online
[2025-08-21 10:42:28][350389915816808][9694 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 10:42:28][350389915816808][9694 ms][DEBUG] START check_scloud
[2025-08-21 10:42:28][350389915816808][9694 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:42:29][350389915816808][9990 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23500052 104976 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:42:29][350389915816808][9990 ms][DEBUG] targetPkg: running
[2025-08-21 10:42:29][350389915816808][9991 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:42:29][350389915816808][9991 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:42:29][350389915816808][9991 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzg5OTE1ODE2ODA4IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dDMDFQTTJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODkxIn0='" -e "main()" -q"
[2025-08-21 10:42:29][350389915816808][9991 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:42:29][350389915816808][9991 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzg5OTE1ODE2ODA4IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dDMDFQTTJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODkxIn0='" -e "main()" -q"
[2025-08-21 10:42:31][350389915816808][12787 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzg5OTE1ODE2ODA4IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dDMDFQTTJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODkxIn0="\r\n
[2025-08-21 10:42:35][350389915816808][15927 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c920cb8-8d50-4754-ba94-0ea441bc9d78","id":"QR_6c920cb8-8d50-4754-ba94-0ea441bc9d78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:42:35][350389915816808][15927 ms][DEBUG] proc_open done in 5936 ms; code=0; res.len=3152
[2025-08-21 10:42:35][350389915816808][15927 ms][DEBUG] END   runCmdUntilRes#1 in 5937 ms
[2025-08-21 10:42:35][350389915816808][15927 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:42:45][356544399148672][0 ms][INFO] === Request start ===
[2025-08-21 10:42:45][356544399148672][1 ms][DEBUG] START check_frida
[2025-08-21 10:42:45][356544399148672][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:42:45][356544399148672][277 ms][DEBUG] SU: done in 276 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:42:45][356544399148672][277 ms][DEBUG] check_frida: running
[2025-08-21 10:42:45][356544399148672][277 ms][DEBUG] END   check_frida in 276 ms
[2025-08-21 10:42:45][356544399148672][278 ms][DEBUG] START check_internet
[2025-08-21 10:42:45][356544399148672][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:42:45][356544399148672][637 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.232/234.232/234.232/0.000 ms\n
[2025-08-21 10:42:45][356544399148672][637 ms][DEBUG] check_internet: online
[2025-08-21 10:42:45][356544399148672][637 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 10:42:45][356544399148672][637 ms][DEBUG] START check_scloud
[2025-08-21 10:42:45][356544399148672][637 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:42:46][356544399148672][933 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23500084 105524 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:42:46][356544399148672][933 ms][DEBUG] targetPkg: running
[2025-08-21 10:42:46][356544399148672][933 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 10:42:46][356544399148672][933 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:42:46][356544399148672][934 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0Mzk5MTQ4NjcyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gyMDdaUkJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njk2In0='" -e "main()" -q"
[2025-08-21 10:42:46][356544399148672][934 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:42:46][356544399148672][934 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0Mzk5MTQ4NjcyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gyMDdaUkJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njk2In0='" -e "main()" -q"
[2025-08-21 10:42:48][356544399148672][3714 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NTQ0Mzk5MTQ4NjcyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gyMDdaUkJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njk2In0="\r\n
[2025-08-21 10:42:53][354721880515112][0 ms][INFO] === Request start ===
[2025-08-21 10:42:53][352967355066980][0 ms][INFO] === Request start ===
[2025-08-21 10:42:53][356544399148672][8400 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6becebb6-abd3-41ce-9b6a-0bf940655896","id":"QR_6becebb6-abd3-41ce-9b6a-0bf940655896","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:42:53][356544399148672][8400 ms][DEBUG] proc_open done in 7467 ms; code=0; res.len=3152
[2025-08-21 10:42:53][356544399148672][8401 ms][DEBUG] END   runCmdUntilRes#1 in 7467 ms
[2025-08-21 10:42:53][356544399148672][8401 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:42:54][354721880515112][1010 ms][DEBUG] START check_frida
[2025-08-21 10:42:54][354721880515112][1010 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:42:54][354721880515112][1260 ms][DEBUG] SU: done in 250 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:42:54][354721880515112][1260 ms][DEBUG] check_frida: running
[2025-08-21 10:42:54][354721880515112][1260 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 10:42:54][354721880515112][1260 ms][DEBUG] START check_internet
[2025-08-21 10:42:54][354721880515112][1260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:42:54][354721880515112][1525 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.234/172.234/172.234/0.000 ms\n
[2025-08-21 10:42:54][354721880515112][1525 ms][DEBUG] check_internet: online
[2025-08-21 10:42:54][354721880515112][1525 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 10:42:54][354721880515112][1525 ms][DEBUG] START check_scloud
[2025-08-21 10:42:54][354721880515112][1525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:42:54][354721880515112][1822 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23500116 106072 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:42:54][354721880515112][1822 ms][DEBUG] targetPkg: running
[2025-08-21 10:42:54][354721880515112][1822 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:42:54][354721880515112][1822 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:42:54][354721880515112][1823 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzIxODgwNTE1MTEyIiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1cxMDdDR0dCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzU2MiJ9'" -e "main()" -q"
[2025-08-21 10:42:54][354721880515112][1823 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:42:54][354721880515112][1823 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzIxODgwNTE1MTEyIiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1cxMDdDR0dCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzU2MiJ9'" -e "main()" -q"
[2025-08-21 10:42:57][354721880515112][4634 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzIxODgwNTE1MTEyIiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1cxMDdDR0dCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzU2MiJ9"\r\n
[2025-08-21 10:42:59][354721880515112][6727 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4d87aae-c44c-447a-9039-0beb4ad291ee","id":"QR_c4d87aae-c44c-447a-9039-0beb4ad291ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:42:59][354721880515112][6727 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 10:42:59][354721880515112][6727 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 10:42:59][354721880515112][6727 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:43:00][352967355066980][7100 ms][DEBUG] START check_frida
[2025-08-21 10:43:00][352967355066980][7100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:43:00][352967355066980][7399 ms][DEBUG] SU: done in 298 ms; outroot          1313     1 2299984   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:43:00][352967355066980][7399 ms][DEBUG] check_frida: running
[2025-08-21 10:43:00][352967355066980][7399 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 10:43:00][352967355066980][7399 ms][DEBUG] START check_scloud
[2025-08-21 10:43:00][352967355066980][7399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:43:01][352967355066980][7709 ms][DEBUG] SU: done in 310 ms; outu0_a118       7399 30745 23500148 106636 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:43:01][352967355066980][7709 ms][DEBUG] targetPkg: running
[2025-08-21 10:43:01][352967355066980][7709 ms][DEBUG] END   check_scloud in 310 ms
[2025-08-21 10:43:01][352967355066980][7709 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:43:01][352967355066980][7709 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzU1MDY2OTgwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDY3MTRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjg4In0='" -e "main()" -q"
[2025-08-21 10:43:01][352967355066980][7709 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:43:01][352967355066980][7709 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzU1MDY2OTgwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDY3MTRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjg4In0='" -e "main()" -q"
[2025-08-21 10:43:03][352967355066980][10506 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTY3MzU1MDY2OTgwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDY3MTRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjg4In0="\r\n
[2025-08-21 10:43:08][352967355066980][14708 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4032181c-bd9c-4bb9-8272-adcdd89f4a21","id":"QR_4032181c-bd9c-4bb9-8272-adcdd89f4a21","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:43:08][352967355066980][14708 ms][DEBUG] proc_open done in 6998 ms; code=0; res.len=3152
[2025-08-21 10:43:08][352967355066980][14708 ms][DEBUG] END   runCmdUntilRes#1 in 6998 ms
[2025-08-21 10:43:08][352967355066980][14708 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:43:19][358080740831870][0 ms][INFO] === Request start ===
[2025-08-21 10:43:19][358080740831870][1 ms][DEBUG] START check_frida
[2025-08-21 10:43:19][358080740831870][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:43:19][358080740831870][285 ms][DEBUG] SU: done in 283 ms; outroot          1313     1 2283564   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:43:19][358080740831870][285 ms][DEBUG] check_frida: running
[2025-08-21 10:43:19][358080740831870][285 ms][DEBUG] END   check_frida in 284 ms
[2025-08-21 10:43:19][358080740831870][285 ms][DEBUG] START check_scloud
[2025-08-21 10:43:19][358080740831870][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:43:20][358080740831870][566 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23500180 107196 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:43:20][358080740831870][566 ms][DEBUG] targetPkg: running
[2025-08-21 10:43:20][358080740831870][566 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:43:20][358080740831870][566 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:43:20][358080740831870][566 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MDgwNzQwODMxODcwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjY4In0='" -e "main()" -q"
[2025-08-21 10:43:20][358080740831870][566 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:43:20][358080740831870][566 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MDgwNzQwODMxODcwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjY4In0='" -e "main()" -q"
[2025-08-21 10:43:22][358080740831870][3377 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MDgwNzQwODMxODcwIiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFc3MDBMTlJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhNRSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjY4In0="\r\n
[2025-08-21 10:43:26][358080740831870][7142 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dabf7930-8fa6-49d0-85af-5a1a73d53228","id":"QR_dabf7930-8fa6-49d0-85af-5a1a73d53228","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:43:26][358080740831870][7143 ms][DEBUG] proc_open done in 6576 ms; code=0; res.len=3152
[2025-08-21 10:43:26][358080740831870][7143 ms][DEBUG] END   runCmdUntilRes#1 in 6576 ms
[2025-08-21 10:43:26][358080740831870][7143 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:43:44][351477972925387][1 ms][INFO] === Request start ===
[2025-08-21 10:43:44][351477972925387][2 ms][DEBUG] START check_frida
[2025-08-21 10:43:44][351477972925387][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:43:44][351477972925387][247 ms][DEBUG] SU: done in 245 ms; outroot          1313     1 2283564   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:43:44][351477972925387][247 ms][DEBUG] check_frida: running
[2025-08-21 10:43:44][351477972925387][247 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 10:43:44][351477972925387][247 ms][DEBUG] START check_scloud
[2025-08-21 10:43:44][351477972925387][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:43:44][351477972925387][545 ms][DEBUG] SU: done in 298 ms; outu0_a118       7399 30745 23505332 108936 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:43:44][351477972925387][545 ms][DEBUG] targetPkg: running
[2025-08-21 10:43:44][351477972925387][545 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 10:43:44][351477972925387][545 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:43:44][351477972925387][545 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTcyOTI1Mzg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFNKR0hWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUwNCJ9'" -e "main()" -q"
[2025-08-21 10:43:44][351477972925387][546 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:43:44][351477972925387][546 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTcyOTI1Mzg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFNKR0hWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUwNCJ9'" -e "main()" -q"
[2025-08-21 10:43:47][351477972925387][3355 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDc3OTcyOTI1Mzg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFNKR0hWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUwNCJ9"\r\n
[2025-08-21 10:43:49][351477972925387][5261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8bc0925e-edb0-4a2b-a2a2-2c3cdc81c48f","id":"QR_8bc0925e-edb0-4a2b-a2a2-2c3cdc81c48f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:43:49][351477972925387][5261 ms][DEBUG] proc_open done in 4715 ms; code=0; res.len=3152
[2025-08-21 10:43:49][351477972925387][5261 ms][DEBUG] END   runCmdUntilRes#1 in 4716 ms
[2025-08-21 10:43:49][351477972925387][5261 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:43:54][352600226214675][0 ms][INFO] === Request start ===
[2025-08-21 10:43:54][352600226214675][1 ms][DEBUG] START check_frida
[2025-08-21 10:43:54][352600226214675][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:43:54][352600226214675][257 ms][DEBUG] SU: done in 256 ms; outroot          1313     1 2299984   4512 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:43:54][352600226214675][257 ms][DEBUG] check_frida: running
[2025-08-21 10:43:54][352600226214675][257 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 10:43:54][352600226214675][257 ms][DEBUG] START check_scloud
[2025-08-21 10:43:54][352600226214675][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:43:55][352600226214675][540 ms][DEBUG] SU: done in 283 ms; outu0_a118       7399 30745 23505364 103396 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:43:55][352600226214675][540 ms][DEBUG] targetPkg: running
[2025-08-21 10:43:55][352600226214675][540 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 10:43:55][352600226214675][540 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:43:55][352600226214675][540 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI2MjE0Njc1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MFpDOFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTloiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzE2NCJ9'" -e "main()" -q"
[2025-08-21 10:43:55][352600226214675][541 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:43:55][352600226214675][541 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI2MjE0Njc1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MFpDOFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTloiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzE2NCJ9'" -e "main()" -q"
[2025-08-21 10:43:57][352600226214675][3334 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjAwMjI2MjE0Njc1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MFpDOFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTloiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzE2NCJ9"\r\n
[2025-08-21 10:43:59][352600226214675][5240 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a20604e-1296-4b44-951d-e1e3565c5b7b","id":"QR_8a20604e-1296-4b44-951d-e1e3565c5b7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:43:59][352600226214675][5240 ms][DEBUG] proc_open done in 4700 ms; code=0; res.len=3152
[2025-08-21 10:43:59][352600226214675][5240 ms][DEBUG] END   runCmdUntilRes#1 in 4700 ms
[2025-08-21 10:43:59][352600226214675][5240 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:44:09][351695960585463][0 ms][INFO] === Request start ===
[2025-08-21 10:44:09][351695960585463][1 ms][DEBUG] START check_frida
[2025-08-21 10:44:09][351695960585463][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:44:09][351695960585463][286 ms][DEBUG] SU: done in 285 ms; outroot          1313     1 2299984   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:44:09][351695960585463][286 ms][DEBUG] check_frida: running
[2025-08-21 10:44:09][351695960585463][286 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 10:44:09][351695960585463][287 ms][DEBUG] START check_internet
[2025-08-21 10:44:09][351695960585463][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:44:09][351695960585463][598 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.015/187.015/187.015/0.000 ms\n
[2025-08-21 10:44:09][351695960585463][599 ms][DEBUG] check_internet: online
[2025-08-21 10:44:09][351695960585463][599 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 10:44:09][351695960585463][599 ms][DEBUG] START check_scloud
[2025-08-21 10:44:09][351695960585463][599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:44:10][350261970809020][1 ms][INFO] === Request start ===
[2025-08-21 10:44:10][351695960585463][911 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23505396 103940 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:44:10][351695960585463][911 ms][DEBUG] targetPkg: running
[2025-08-21 10:44:10][351695960585463][911 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 10:44:10][351695960585463][911 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:44:10][351695960585463][911 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjk1OTYwNTg1NDYzIiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDVTTVRYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTMyIn0='" -e "main()" -q"
[2025-08-21 10:44:10][351695960585463][911 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:44:10][351695960585463][911 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjk1OTYwNTg1NDYzIiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDVTTVRYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTMyIn0='" -e "main()" -q"
[2025-08-21 10:44:12][351695960585463][3691 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjk1OTYwNTg1NDYzIiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDVTTVRYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTMyIn0="\r\n
[2025-08-21 10:44:18][351695960585463][9065 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b09fd9f7-20f8-4569-93a1-0754a3636550","id":"QR_b09fd9f7-20f8-4569-93a1-0754a3636550","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:44:18][351695960585463][9065 ms][DEBUG] proc_open done in 8154 ms; code=0; res.len=3152
[2025-08-21 10:44:18][351695960585463][9065 ms][DEBUG] END   runCmdUntilRes#1 in 8154 ms
[2025-08-21 10:44:18][351695960585463][9065 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:44:19][350261970809020][9127 ms][DEBUG] START check_frida
[2025-08-21 10:44:19][350261970809020][9127 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:44:19][350261970809020][9377 ms][DEBUG] SU: done in 250 ms; outroot          1313     1 2299984   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:44:19][350261970809020][9377 ms][DEBUG] check_frida: running
[2025-08-21 10:44:19][350261970809020][9377 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 10:44:19][350261970809020][9377 ms][DEBUG] START check_internet
[2025-08-21 10:44:19][350261970809020][9377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:44:19][350261970809020][9736 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.306/255.306/255.306/0.000 ms\n
[2025-08-21 10:44:19][350261970809020][9736 ms][DEBUG] check_internet: online
[2025-08-21 10:44:19][350261970809020][9736 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 10:44:19][350261970809020][9736 ms][DEBUG] START check_scloud
[2025-08-21 10:44:19][350261970809020][9736 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:44:20][350261970809020][10048 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23505428 104488 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:44:20][350261970809020][10048 ms][DEBUG] targetPkg: running
[2025-08-21 10:44:20][350261970809020][10048 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 10:44:20][350261970809020][10048 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:44:20][350261970809020][10048 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjYxOTcwODA5MDIwIiwibW9kZWwiOiJTTS1HOTkxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1JDMEEySEZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODEwMiJ9'" -e "main()" -q"
[2025-08-21 10:44:20][350261970809020][10048 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:44:20][350261970809020][10048 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjYxOTcwODA5MDIwIiwibW9kZWwiOiJTTS1HOTkxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1JDMEEySEZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODEwMiJ9'" -e "main()" -q"
[2025-08-21 10:44:20][353176440284934][0 ms][INFO] === Request start ===
[2025-08-21 10:44:22][350261970809020][12860 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjYxOTcwODA5MDIwIiwibW9kZWwiOiJTTS1HOTkxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1JDMEEySEZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODEwMiJ9"\r\n
[2025-08-21 10:44:25][350261970809020][15016 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31450225-f58e-468e-a69b-803b98a0e6f1","id":"QR_31450225-f58e-468e-a69b-803b98a0e6f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:44:25][350261970809020][15016 ms][DEBUG] proc_open done in 4968 ms; code=0; res.len=3152
[2025-08-21 10:44:25][350261970809020][15016 ms][DEBUG] END   runCmdUntilRes#1 in 4968 ms
[2025-08-21 10:44:25][350261970809020][15016 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:44:26][353176440284934][5075 ms][DEBUG] START check_frida
[2025-08-21 10:44:26][353176440284934][5075 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:44:26][353176440284934][5372 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2299984   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:44:26][353176440284934][5372 ms][DEBUG] check_frida: running
[2025-08-21 10:44:26][353176440284934][5372 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 10:44:26][353176440284934][5372 ms][DEBUG] START check_internet
[2025-08-21 10:44:26][353176440284934][5373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:44:26][353176440284934][5638 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.032/145.032/145.032/0.000 ms\n
[2025-08-21 10:44:26][353176440284934][5638 ms][DEBUG] check_internet: online
[2025-08-21 10:44:26][353176440284934][5638 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 10:44:26][353176440284934][5638 ms][DEBUG] START check_scloud
[2025-08-21 10:44:26][353176440284934][5638 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:44:26][353176440284934][5934 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23505460 105036 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:44:26][353176440284934][5935 ms][DEBUG] targetPkg: running
[2025-08-21 10:44:26][353176440284934][5935 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:44:26][353176440284934][5935 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:44:26][353176440284934][5935 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTc2NDQwMjg0OTM0IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMDFNS0dSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjgxIn0='" -e "main()" -q"
[2025-08-21 10:44:26][353176440284934][5935 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:44:26][353176440284934][5935 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTc2NDQwMjg0OTM0IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMDFNS0dSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjgxIn0='" -e "main()" -q"
[2025-08-21 10:44:29][353176440284934][8715 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTc2NDQwMjg0OTM0IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMDFNS0dSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjgxIn0="\r\n
[2025-08-21 10:44:32][351992290189771][0 ms][INFO] === Request start ===
[2025-08-21 10:44:32][353176440284934][11995 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04f2eb7a-3d4f-489a-bee1-403b522b362b","id":"QR_04f2eb7a-3d4f-489a-bee1-403b522b362b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:44:32][353176440284934][11996 ms][DEBUG] proc_open done in 6061 ms; code=0; res.len=3152
[2025-08-21 10:44:32][353176440284934][11996 ms][DEBUG] END   runCmdUntilRes#1 in 6061 ms
[2025-08-21 10:44:32][353176440284934][11996 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:44:33][351992290189771][1014 ms][DEBUG] START check_frida
[2025-08-21 10:44:33][351992290189771][1014 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:44:34][351992290189771][1311 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2299984   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:44:34][351992290189771][1311 ms][DEBUG] check_frida: running
[2025-08-21 10:44:34][351992290189771][1311 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 10:44:34][351992290189771][1311 ms][DEBUG] START check_internet
[2025-08-21 10:44:34][351992290189771][1311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:44:34][351992290189771][1639 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.392/206.392/206.392/0.000 ms\n
[2025-08-21 10:44:34][351992290189771][1639 ms][DEBUG] check_internet: online
[2025-08-21 10:44:34][351992290189771][1639 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 10:44:34][351992290189771][1639 ms][DEBUG] START check_scloud
[2025-08-21 10:44:34][351992290189771][1639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:44:34][351992290189771][1874 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23505492 105580 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:44:34][351992290189771][1874 ms][DEBUG] targetPkg: running
[2025-08-21 10:44:34][351992290189771][1874 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 10:44:34][351992290189771][1874 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:44:34][351992290189771][1874 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTkyMjkwMTg5NzcxIiwibW9kZWwiOiJTTS1BNTQ2UyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MjFZNTBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS0MiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg4MyJ9'" -e "main()" -q"
[2025-08-21 10:44:34][351992290189771][1874 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:44:34][351992290189771][1874 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTkyMjkwMTg5NzcxIiwibW9kZWwiOiJTTS1BNTQ2UyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MjFZNTBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS0MiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg4MyJ9'" -e "main()" -q"
[2025-08-21 10:44:37][351992290189771][4669 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxOTkyMjkwMTg5NzcxIiwibW9kZWwiOiJTTS1BNTQ2UyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MjFZNTBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS0MiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg4MyJ9"\r\n
[2025-08-21 10:44:39][351992290189771][6935 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e8f5da7-8095-4df2-97cb-b81916035167","id":"QR_4e8f5da7-8095-4df2-97cb-b81916035167","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:44:39][351992290189771][6935 ms][DEBUG] proc_open done in 5060 ms; code=0; res.len=3152
[2025-08-21 10:44:39][351992290189771][6935 ms][DEBUG] END   runCmdUntilRes#1 in 5061 ms
[2025-08-21 10:44:39][351992290189771][6935 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:45:06][352412371375156][0 ms][INFO] === Request start ===
[2025-08-21 10:45:06][352412371375156][1 ms][DEBUG] START check_frida
[2025-08-21 10:45:06][352412371375156][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:45:06][352412371375156][286 ms][DEBUG] SU: done in 285 ms; outroot          1313     1 2283564   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:45:06][352412371375156][286 ms][DEBUG] check_frida: running
[2025-08-21 10:45:06][352412371375156][286 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 10:45:06][352412371375156][286 ms][DEBUG] START check_scloud
[2025-08-21 10:45:06][352412371375156][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:45:06][352412371375156][599 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23505524 106132 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:45:06][352412371375156][599 ms][DEBUG] targetPkg: running
[2025-08-21 10:45:06][352412371375156][599 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 10:45:06][352412371375156][599 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:45:06][352412371375156][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDEyMzcxMzc1MTU2IiwibW9kZWwiOiJTTS1HOTk4TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1IxMEhOQldXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDYwNSJ9'" -e "main()" -q"
[2025-08-21 10:45:06][352412371375156][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:45:06][352412371375156][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDEyMzcxMzc1MTU2IiwibW9kZWwiOiJTTS1HOTk4TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1IxMEhOQldXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDYwNSJ9'" -e "main()" -q"
[2025-08-21 10:45:09][352412371375156][3395 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDEyMzcxMzc1MTU2IiwibW9kZWwiOiJTTS1HOTk4TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1IxMEhOQldXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDYwNSJ9"\r\n
[2025-08-21 10:45:11][352412371375156][5472 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f04fa4d-fd19-4201-bfcd-2aeaa44b464b","id":"QR_3f04fa4d-fd19-4201-bfcd-2aeaa44b464b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:45:11][352412371375156][5473 ms][DEBUG] proc_open done in 4873 ms; code=0; res.len=3152
[2025-08-21 10:45:11][352412371375156][5473 ms][DEBUG] END   runCmdUntilRes#1 in 4873 ms
[2025-08-21 10:45:11][352412371375156][5473 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:45:35][354411843620692][0 ms][INFO] === Request start ===
[2025-08-21 10:45:35][354411843620692][1 ms][DEBUG] START check_frida
[2025-08-21 10:45:35][354411843620692][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:45:36][354411843620692][306 ms][DEBUG] SU: done in 305 ms; outroot          1313     1 2283564   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:45:36][354411843620692][306 ms][DEBUG] check_frida: running
[2025-08-21 10:45:36][354411843620692][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 10:45:36][354411843620692][306 ms][DEBUG] START check_scloud
[2025-08-21 10:45:36][354411843620692][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:45:36][354411843620692][603 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23505556 106680 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:45:36][354411843620692][603 ms][DEBUG] targetPkg: running
[2025-08-21 10:45:36][354411843620692][603 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:45:36][354411843620692][603 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:45:36][354411843620692][603 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDExODQzNjIwNjkyIiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMVZQMUZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg4MCJ9'" -e "main()" -q"
[2025-08-21 10:45:36][354411843620692][603 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:45:36][354411843620692][603 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDExODQzNjIwNjkyIiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMVZQMUZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg4MCJ9'" -e "main()" -q"
[2025-08-21 10:45:39][354411843620692][3368 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDExODQzNjIwNjkyIiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMVZQMUZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODg4MCJ9"\r\n
[2025-08-21 10:45:41][354411843620692][5773 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67e9903e-4a6e-4100-8188-7577c7ba0df6","id":"QR_67e9903e-4a6e-4100-8188-7577c7ba0df6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:45:41][354411843620692][5773 ms][DEBUG] proc_open done in 5171 ms; code=0; res.len=3152
[2025-08-21 10:45:41][354411843620692][5773 ms][DEBUG] END   runCmdUntilRes#1 in 5171 ms
[2025-08-21 10:45:41][354411843620692][5773 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:46:10][351877474245855][1 ms][INFO] === Request start ===
[2025-08-21 10:46:10][351877474245855][2 ms][DEBUG] START check_frida
[2025-08-21 10:46:10][351877474245855][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:46:10][351877474245855][255 ms][DEBUG] SU: done in 254 ms; outroot          1313     1 2283564   4516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:46:10][351877474245855][256 ms][DEBUG] check_frida: running
[2025-08-21 10:46:10][351877474245855][256 ms][DEBUG] END   check_frida in 254 ms
[2025-08-21 10:46:10][351877474245855][256 ms][DEBUG] START check_internet
[2025-08-21 10:46:10][351877474245855][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:46:10][351877474245855][677 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.880/200.880/200.880/0.000 ms\n
[2025-08-21 10:46:10][351877474245855][677 ms][DEBUG] check_internet: online
[2025-08-21 10:46:10][351877474245855][677 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 10:46:10][351877474245855][677 ms][DEBUG] START check_scloud
[2025-08-21 10:46:10][351877474245855][677 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:46:11][351877474245855][958 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23505588 107484 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:46:11][351877474245855][958 ms][DEBUG] targetPkg: running
[2025-08-21 10:46:11][351877474245855][959 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:46:11][351877474245855][959 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:46:11][351877474245855][959 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc0MjQ1ODU1IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MERIQVJIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY5OCJ9'" -e "main()" -q"
[2025-08-21 10:46:11][351877474245855][959 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:46:11][351877474245855][959 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc0MjQ1ODU1IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MERIQVJIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY5OCJ9'" -e "main()" -q"
[2025-08-21 10:46:13][351877474245855][3801 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDc0MjQ1ODU1IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MERIQVJIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY5OCJ9"\r\n
[2025-08-21 10:46:15][351877474245855][5504 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43d4ccb6-e6b9-474f-8248-3985e4e240e1","id":"QR_43d4ccb6-e6b9-474f-8248-3985e4e240e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:46:15][351877474245855][5504 ms][DEBUG] proc_open done in 4545 ms; code=0; res.len=3152
[2025-08-21 10:46:15][351877474245855][5504 ms][DEBUG] END   runCmdUntilRes#1 in 4545 ms
[2025-08-21 10:46:15][351877474245855][5504 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:47:07][350482800115947][0 ms][INFO] === Request start ===
[2025-08-21 10:47:07][350482800115947][1 ms][DEBUG] START check_frida
[2025-08-21 10:47:07][350482800115947][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:47:07][350482800115947][295 ms][DEBUG] SU: done in 294 ms; outroot          1313     1 2283564   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:47:07][350482800115947][295 ms][DEBUG] check_frida: running
[2025-08-21 10:47:07][350482800115947][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 10:47:07][350482800115947][295 ms][DEBUG] START check_scloud
[2025-08-21 10:47:07][350482800115947][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:47:07][350482800115947][592 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23505620 107964 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:47:07][350482800115947][592 ms][DEBUG] targetPkg: running
[2025-08-21 10:47:07][350482800115947][592 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:47:07][350482800115947][592 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:47:07][350482800115947][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDgyODAwMTE1OTQ3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgyMDMyWUtIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk3MSJ9'" -e "main()" -q"
[2025-08-21 10:47:07][350482800115947][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:47:07][350482800115947][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDgyODAwMTE1OTQ3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgyMDMyWUtIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk3MSJ9'" -e "main()" -q"
[2025-08-21 10:47:10][350482800115947][3404 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDgyODAwMTE1OTQ3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgyMDMyWUtIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk3MSJ9"\r\n
[2025-08-21 10:47:12][350482800115947][5575 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99c10dd5-dadb-4b54-9e4d-80f6ba6b9a37","id":"QR_99c10dd5-dadb-4b54-9e4d-80f6ba6b9a37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:47:12][350482800115947][5575 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 10:47:12][350482800115947][5575 ms][DEBUG] END   runCmdUntilRes#1 in 4984 ms
[2025-08-21 10:47:12][350482800115947][5576 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:49:08][350287316706000][1 ms][INFO] === Request start ===
[2025-08-21 10:49:08][350287316706000][2 ms][DEBUG] START check_frida
[2025-08-21 10:49:08][350287316706000][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:49:08][350287316706000][295 ms][DEBUG] SU: done in 294 ms; outroot          1313     1 2283564   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:49:08][350287316706000][295 ms][DEBUG] check_frida: running
[2025-08-21 10:49:08][350287316706000][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 10:49:08][350287316706000][295 ms][DEBUG] START check_scloud
[2025-08-21 10:49:08][350287316706000][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:49:09][350287316706000][577 ms][DEBUG] SU: done in 282 ms; outu0_a118       7399 30745 23505652 108284 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:49:09][350287316706000][577 ms][DEBUG] targetPkg: running
[2025-08-21 10:49:09][350287316706000][577 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 10:49:09][350287316706000][577 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:49:09][350287316706000][577 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE2NzA2MDAwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgxMDZZVDFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwNSJ9'" -e "main()" -q"
[2025-08-21 10:49:09][350287316706000][577 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:49:09][350287316706000][578 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE2NzA2MDAwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgxMDZZVDFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwNSJ9'" -e "main()" -q"
[2025-08-21 10:49:11][350287316706000][3373 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjg3MzE2NzA2MDAwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgxMDZZVDFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwNSJ9"\r\n
[2025-08-21 10:49:14][350287316706000][5575 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e6f8889-441e-47e3-b97c-96f2a2dd9870","id":"QR_2e6f8889-441e-47e3-b97c-96f2a2dd9870","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:49:14][350287316706000][5575 ms][DEBUG] proc_open done in 4998 ms; code=0; res.len=3152
[2025-08-21 10:49:14][350287316706000][5575 ms][DEBUG] END   runCmdUntilRes#1 in 4998 ms
[2025-08-21 10:49:14][350287316706000][5575 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:50:05][352375458184850][0 ms][INFO] === Request start ===
[2025-08-21 10:50:05][352375458184850][1 ms][DEBUG] START check_frida
[2025-08-21 10:50:05][352375458184850][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:50:05][352375458184850][298 ms][DEBUG] SU: done in 296 ms; outroot          1313     1 2283564   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:50:05][352375458184850][298 ms][DEBUG] check_frida: running
[2025-08-21 10:50:05][352375458184850][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 10:50:05][352375458184850][298 ms][DEBUG] START check_internet
[2025-08-21 10:50:05][352375458184850][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:50:05][352375458184850][783 ms][DEBUG] SU: done in 485 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.985/202.985/202.985/0.000 ms\n
[2025-08-21 10:50:05][352375458184850][783 ms][DEBUG] check_internet: online
[2025-08-21 10:50:05][352375458184850][783 ms][DEBUG] END   check_internet in 485 ms
[2025-08-21 10:50:05][352375458184850][783 ms][DEBUG] START check_scloud
[2025-08-21 10:50:05][352375458184850][783 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:50:06][352375458184850][1016 ms][DEBUG] SU: done in 233 ms; outu0_a118       7399 30745 23505684 103424 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:50:06][352375458184850][1017 ms][DEBUG] targetPkg: running
[2025-08-21 10:50:06][352375458184850][1017 ms][DEBUG] END   check_scloud in 233 ms
[2025-08-21 10:50:06][352375458184850][1017 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:50:06][352375458184850][1017 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzc1NDU4MTg0ODUwIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MjlBSktQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODEwOSJ9'" -e "main()" -q"
[2025-08-21 10:50:06][352375458184850][1017 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:50:06][352375458184850][1017 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzc1NDU4MTg0ODUwIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MjlBSktQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODEwOSJ9'" -e "main()" -q"
[2025-08-21 10:50:08][352375458184850][3828 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzc1NDU4MTg0ODUwIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MjlBSktQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODEwOSJ9"\r\n
[2025-08-21 10:50:10][352375458184850][5765 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_813ba2e8-96db-4944-ba7a-1d6031610093","id":"QR_813ba2e8-96db-4944-ba7a-1d6031610093","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:50:10][352375458184850][5765 ms][DEBUG] proc_open done in 4748 ms; code=0; res.len=3152
[2025-08-21 10:50:10][352375458184850][5765 ms][DEBUG] END   runCmdUntilRes#1 in 4748 ms
[2025-08-21 10:50:10][352375458184850][5765 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:50:19][357066602417370][0 ms][INFO] === Request start ===
[2025-08-21 10:50:19][357066602417370][1 ms][DEBUG] START check_frida
[2025-08-21 10:50:19][357066602417370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:50:19][357066602417370][246 ms][DEBUG] SU: done in 245 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:50:19][357066602417370][246 ms][DEBUG] check_frida: running
[2025-08-21 10:50:19][357066602417370][246 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 10:50:19][357066602417370][246 ms][DEBUG] START check_internet
[2025-08-21 10:50:19][357066602417370][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:50:19][357066602417370][511 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.031/162.031/162.031/0.000 ms\n
[2025-08-21 10:50:19][357066602417370][511 ms][DEBUG] check_internet: online
[2025-08-21 10:50:19][357066602417370][511 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 10:50:19][357066602417370][511 ms][DEBUG] START check_scloud
[2025-08-21 10:50:19][357066602417370][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:50:20][357066602417370][730 ms][DEBUG] SU: done in 219 ms; outu0_a118       7399 30745 23505716 103948 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:50:20][357066602417370][730 ms][DEBUG] targetPkg: running
[2025-08-21 10:50:20][357066602417370][730 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 10:50:20][357066602417370][730 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:50:20][357066602417370][730 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDY2NjAyNDE3MzcwIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hCMVlNWVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjMwMiJ9'" -e "main()" -q"
[2025-08-21 10:50:20][357066602417370][730 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:50:20][357066602417370][730 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDY2NjAyNDE3MzcwIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hCMVlNWVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjMwMiJ9'" -e "main()" -q"
[2025-08-21 10:50:22][357066602417370][3526 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MDY2NjAyNDE3MzcwIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hCMVlNWVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjMwMiJ9"\r\n
[2025-08-21 10:50:25][357066602417370][5916 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b32b9337-967a-470f-8e78-50ec7ba47093","id":"QR_b32b9337-967a-470f-8e78-50ec7ba47093","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:50:25][357066602417370][5916 ms][DEBUG] proc_open done in 5186 ms; code=0; res.len=3152
[2025-08-21 10:50:25][357066602417370][5916 ms][DEBUG] END   runCmdUntilRes#1 in 5186 ms
[2025-08-21 10:50:25][357066602417370][5916 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:51:07][352923544670604][0 ms][INFO] === Request start ===
[2025-08-21 10:51:07][352923544670604][1 ms][DEBUG] START check_frida
[2025-08-21 10:51:07][352923544670604][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:51:07][352923544670604][310 ms][DEBUG] SU: done in 309 ms; outroot          1313     1 2283564   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:51:07][352923544670604][310 ms][DEBUG] check_frida: running
[2025-08-21 10:51:07][352923544670604][310 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 10:51:07][352923544670604][311 ms][DEBUG] START check_scloud
[2025-08-21 10:51:07][352923544670604][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:51:08][352923544670604][607 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23505748 104724 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:51:08][352923544670604][607 ms][DEBUG] targetPkg: running
[2025-08-21 10:51:08][352923544670604][607 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:51:08][352923544670604][607 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:51:08][352923544670604][607 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTIzNTQ0NjcwNjA0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g3MEpTQlhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY2OCJ9'" -e "main()" -q"
[2025-08-21 10:51:08][352923544670604][607 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:51:08][352923544670604][607 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTIzNTQ0NjcwNjA0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g3MEpTQlhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY2OCJ9'" -e "main()" -q"
[2025-08-21 10:51:10][352923544670604][3419 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTIzNTQ0NjcwNjA0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g3MEpTQlhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY2OCJ9"\r\n
[2025-08-21 10:51:12][352923544670604][5559 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d4bd1a4-6087-41e5-ba79-abf8116a69e3","id":"QR_5d4bd1a4-6087-41e5-ba79-abf8116a69e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:51:12][352923544670604][5559 ms][DEBUG] proc_open done in 4952 ms; code=0; res.len=3152
[2025-08-21 10:51:12][352923544670604][5559 ms][DEBUG] END   runCmdUntilRes#1 in 4952 ms
[2025-08-21 10:51:12][352923544670604][5559 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:51:24][353910112103679][1 ms][INFO] === Request start ===
[2025-08-21 10:51:24][353910112103679][1 ms][DEBUG] START check_frida
[2025-08-21 10:51:24][353910112103679][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:51:24][353910112103679][244 ms][DEBUG] SU: done in 242 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:51:24][353910112103679][244 ms][DEBUG] check_frida: running
[2025-08-21 10:51:24][353910112103679][244 ms][DEBUG] END   check_frida in 242 ms
[2025-08-21 10:51:24][353910112103679][244 ms][DEBUG] START check_scloud
[2025-08-21 10:51:24][353910112103679][244 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:51:24][353910112103679][525 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23505780 105280 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:51:24][353910112103679][525 ms][DEBUG] targetPkg: running
[2025-08-21 10:51:24][353910112103679][525 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:51:24][353910112103679][525 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:51:24][353910112103679][525 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTEwMTEyMTAzNjc5IiwibW9kZWwiOiJTTS1HOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4zMzBOSzlZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODczIn0='" -e "main()" -q"
[2025-08-21 10:51:24][353910112103679][525 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:51:24][353910112103679][525 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTEwMTEyMTAzNjc5IiwibW9kZWwiOiJTTS1HOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4zMzBOSzlZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODczIn0='" -e "main()" -q"
[2025-08-21 10:51:27][353910112103679][3321 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTEwMTEyMTAzNjc5IiwibW9kZWwiOiJTTS1HOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4zMzBOSzlZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODczIn0="\r\n
[2025-08-21 10:51:31][353910112103679][6758 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28d056e4-4c8c-4ad9-993b-5290e0eaabc3","id":"QR_28d056e4-4c8c-4ad9-993b-5290e0eaabc3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:51:31][353910112103679][6758 ms][DEBUG] proc_open done in 6233 ms; code=0; res.len=3152
[2025-08-21 10:51:31][353910112103679][6758 ms][DEBUG] END   runCmdUntilRes#1 in 6233 ms
[2025-08-21 10:51:31][353910112103679][6758 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:51:35][357967974908195][0 ms][INFO] === Request start ===
[2025-08-21 10:51:35][357967974908195][1 ms][DEBUG] START check_frida
[2025-08-21 10:51:35][357967974908195][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:51:35][357967974908195][260 ms][DEBUG] SU: done in 259 ms; outroot          1313     1 2299984   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:51:35][357967974908195][260 ms][DEBUG] check_frida: running
[2025-08-21 10:51:35][357967974908195][260 ms][DEBUG] END   check_frida in 259 ms
[2025-08-21 10:51:35][357967974908195][260 ms][DEBUG] START check_scloud
[2025-08-21 10:51:35][357967974908195][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:51:35][357967974908195][557 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23505812 105836 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:51:35][357967974908195][557 ms][DEBUG] targetPkg: running
[2025-08-21 10:51:35][357967974908195][557 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:51:35][357967974908195][557 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:51:35][357967974908195][557 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc0OTA4MTk1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMDhRVjBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY5MiJ9'" -e "main()" -q"
[2025-08-21 10:51:35][357967974908195][557 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:51:35][357967974908195][557 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc0OTA4MTk1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMDhRVjBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY5MiJ9'" -e "main()" -q"
[2025-08-21 10:51:38][357967974908195][3369 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTY3OTc0OTA4MTk1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMDhRVjBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY5MiJ9"\r\n
[2025-08-21 10:51:41][357967974908195][5665 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bab3d708-f4e3-48b8-8bcc-f29bca212507","id":"QR_bab3d708-f4e3-48b8-8bcc-f29bca212507","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:51:41][357967974908195][5666 ms][DEBUG] proc_open done in 5109 ms; code=0; res.len=3152
[2025-08-21 10:51:41][357967974908195][5666 ms][DEBUG] END   runCmdUntilRes#1 in 5109 ms
[2025-08-21 10:51:41][357967974908195][5666 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:51:41][358080740256185][0 ms][INFO] === Request start ===
[2025-08-21 10:51:41][358080740256185][1 ms][DEBUG] START check_frida
[2025-08-21 10:51:41][358080740256185][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:51:41][358080740256185][254 ms][DEBUG] SU: done in 253 ms; outroot          1313     1 2299984   4516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:51:41][358080740256185][254 ms][DEBUG] check_frida: running
[2025-08-21 10:51:41][358080740256185][254 ms][DEBUG] END   check_frida in 253 ms
[2025-08-21 10:51:41][358080740256185][254 ms][DEBUG] START check_scloud
[2025-08-21 10:51:41][358080740256185][254 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:51:42][358080740256185][551 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23505844 106664 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:51:42][358080740256185][551 ms][DEBUG] targetPkg: running
[2025-08-21 10:51:42][358080740256185][551 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:51:42][358080740256185][551 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:51:42][358080740256185][551 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MDgwNzQwMjU2MTg1IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFRBMDBFUjJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODExOCJ9'" -e "main()" -q"
[2025-08-21 10:51:42][358080740256185][551 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:51:42][358080740256185][551 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MDgwNzQwMjU2MTg1IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFRBMDBFUjJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODExOCJ9'" -e "main()" -q"
[2025-08-21 10:51:44][358080740256185][3362 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MDgwNzQwMjU2MTg1IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFRBMDBFUjJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODExOCJ9"\r\n
[2025-08-21 10:51:46][358080740256185][5127 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f399abd-a263-410b-a8b5-7e991a87e330","id":"QR_8f399abd-a263-410b-a8b5-7e991a87e330","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:51:46][358080740256185][5128 ms][DEBUG] proc_open done in 4577 ms; code=0; res.len=3152
[2025-08-21 10:51:46][358080740256185][5128 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 10:51:46][358080740256185][5128 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:51:54][351494692277296][0 ms][INFO] === Request start ===
[2025-08-21 10:51:54][351494692277296][1 ms][DEBUG] START check_frida
[2025-08-21 10:51:54][351494692277296][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:51:54][351494692277296][296 ms][DEBUG] SU: done in 294 ms; outroot          1313     1 2299984   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:51:54][351494692277296][296 ms][DEBUG] check_frida: running
[2025-08-21 10:51:54][351494692277296][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 10:51:54][351494692277296][296 ms][DEBUG] START check_scloud
[2025-08-21 10:51:54][351494692277296][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:51:54][351494692277296][593 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23505876 107208 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:51:54][351494692277296][593 ms][DEBUG] targetPkg: running
[2025-08-21 10:51:54][351494692277296][593 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:51:54][351494692277296][593 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:51:54][351494692277296][593 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDk0NjkyMjc3Mjk2IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RCMThFNDBEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY0OCJ9'" -e "main()" -q"
[2025-08-21 10:51:54][351494692277296][593 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:51:54][351494692277296][593 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDk0NjkyMjc3Mjk2IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RCMThFNDBEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY0OCJ9'" -e "main()" -q"
[2025-08-21 10:51:57][351494692277296][3389 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDk0NjkyMjc3Mjk2IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RCMThFNDBEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY0OCJ9"\r\n
[2025-08-21 10:51:59][351494692277296][5248 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8aedd578-a59b-4626-9a62-d029e8006b44","id":"QR_8aedd578-a59b-4626-9a62-d029e8006b44","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:51:59][351494692277296][5248 ms][DEBUG] proc_open done in 4655 ms; code=0; res.len=3152
[2025-08-21 10:51:59][351494692277296][5249 ms][DEBUG] END   runCmdUntilRes#1 in 4656 ms
[2025-08-21 10:51:59][351494692277296][5249 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:52:07][351684400789695][0 ms][INFO] === Request start ===
[2025-08-21 10:52:07][351684400789695][1 ms][DEBUG] START check_frida
[2025-08-21 10:52:07][351684400789695][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:52:08][351684400789695][303 ms][DEBUG] SU: done in 302 ms; outroot          1313     1 2299984   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:52:08][351684400789695][303 ms][DEBUG] check_frida: running
[2025-08-21 10:52:08][351684400789695][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 10:52:08][351684400789695][303 ms][DEBUG] START check_internet
[2025-08-21 10:52:08][351684400789695][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:52:08][351684400789695][569 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=161 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 161.479/161.479/161.479/0.000 ms\n
[2025-08-21 10:52:08][351684400789695][569 ms][DEBUG] check_internet: online
[2025-08-21 10:52:08][351684400789695][569 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 10:52:08][351684400789695][569 ms][DEBUG] START check_scloud
[2025-08-21 10:52:08][351684400789695][569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:52:08][351684400789695][852 ms][DEBUG] SU: done in 283 ms; outu0_a118       7399 30745 23505908 107864 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:52:08][351684400789695][852 ms][DEBUG] targetPkg: running
[2025-08-21 10:52:08][351684400789695][852 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 10:52:08][351684400789695][852 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:52:08][351684400789695][852 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjg0NDAwNzg5Njk1IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJDMTdBUTBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg5MSJ9'" -e "main()" -q"
[2025-08-21 10:52:08][351684400789695][853 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:52:08][351684400789695][853 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjg0NDAwNzg5Njk1IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJDMTdBUTBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg5MSJ9'" -e "main()" -q"
[2025-08-21 10:52:11][351684400789695][3662 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjg0NDAwNzg5Njk1IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJDMTdBUTBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg5MSJ9"\r\n
[2025-08-21 10:52:13][351684400789695][5833 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c25c68a6-09ce-4680-8236-0c8fe172dac8","id":"QR_c25c68a6-09ce-4680-8236-0c8fe172dac8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:52:13][351684400789695][5833 ms][DEBUG] proc_open done in 4980 ms; code=0; res.len=3152
[2025-08-21 10:52:13][351684400789695][5833 ms][DEBUG] END   runCmdUntilRes#1 in 4980 ms
[2025-08-21 10:52:13][351684400789695][5833 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:55:07][353079703380425][1 ms][INFO] === Request start ===
[2025-08-21 10:55:07][353079703380425][2 ms][DEBUG] START check_frida
[2025-08-21 10:55:07][353079703380425][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:55:08][353079703380425][311 ms][DEBUG] SU: done in 309 ms; outroot          1313     1 2283564   4520 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:55:08][353079703380425][311 ms][DEBUG] check_frida: running
[2025-08-21 10:55:08][353079703380425][311 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 10:55:08][353079703380425][311 ms][DEBUG] START check_scloud
[2025-08-21 10:55:08][353079703380425][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:55:08][353079703380425][592 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23505940 108412 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:55:08][353079703380425][592 ms][DEBUG] targetPkg: running
[2025-08-21 10:55:08][353079703380425][592 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:55:08][353079703380425][592 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:55:08][353079703380425][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDc5NzAzMzgwNDI1IiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMDZMUzJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc0OCJ9'" -e "main()" -q"
[2025-08-21 10:55:08][353079703380425][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:55:08][353079703380425][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDc5NzAzMzgwNDI1IiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMDZMUzJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc0OCJ9'" -e "main()" -q"
[2025-08-21 10:55:11][353079703380425][3404 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDc5NzAzMzgwNDI1IiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMDZMUzJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc0OCJ9"\r\n
[2025-08-21 10:55:13][353079703380425][5544 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c37b1fa-4676-4d53-8c03-47abbadcd4b5","id":"QR_1c37b1fa-4676-4d53-8c03-47abbadcd4b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:55:13][353079703380425][5544 ms][DEBUG] proc_open done in 4952 ms; code=0; res.len=3152
[2025-08-21 10:55:13][353079703380425][5544 ms][DEBUG] END   runCmdUntilRes#1 in 4952 ms
[2025-08-21 10:55:13][353079703380425][5544 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:56:08][354255814323053][0 ms][INFO] === Request start ===
[2025-08-21 10:56:08][354255814323053][1 ms][DEBUG] START check_frida
[2025-08-21 10:56:08][354255814323053][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:56:08][354255814323053][244 ms][DEBUG] SU: done in 243 ms; outroot          1313     1 2283564   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:56:08][354255814323053][245 ms][DEBUG] check_frida: running
[2025-08-21 10:56:08][354255814323053][245 ms][DEBUG] END   check_frida in 244 ms
[2025-08-21 10:56:08][354255814323053][245 ms][DEBUG] START check_internet
[2025-08-21 10:56:08][354255814323053][245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:56:09][354255814323053][713 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.301/202.301/202.301/0.000 ms\n
[2025-08-21 10:56:09][354255814323053][713 ms][DEBUG] check_internet: online
[2025-08-21 10:56:09][354255814323053][713 ms][DEBUG] END   check_internet in 468 ms
[2025-08-21 10:56:09][354255814323053][713 ms][DEBUG] START check_scloud
[2025-08-21 10:56:09][354255814323053][713 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:56:09][354255814323053][963 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23505972 104628 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:56:09][354255814323053][963 ms][DEBUG] targetPkg: running
[2025-08-21 10:56:09][354255814323053][963 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 10:56:09][354255814323053][963 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:56:09][354255814323053][963 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODE0MzIzMDUzIiwibW9kZWwiOiJTTS1OOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QzMTA4UjZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0ciLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA3MyJ9'" -e "main()" -q"
[2025-08-21 10:56:09][354255814323053][963 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:56:09][354255814323053][963 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODE0MzIzMDUzIiwibW9kZWwiOiJTTS1OOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QzMTA4UjZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0ciLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA3MyJ9'" -e "main()" -q"
[2025-08-21 10:56:12][354255814323053][3759 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjU1ODE0MzIzMDUzIiwibW9kZWwiOiJTTS1OOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QzMTA4UjZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU0ciLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA3MyJ9"\r\n
[2025-08-21 10:56:14][354255814323053][5759 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db2fa0be-88d2-42df-b672-d680e7dd7156","id":"QR_db2fa0be-88d2-42df-b672-d680e7dd7156","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:56:14][354255814323053][5759 ms][DEBUG] proc_open done in 4795 ms; code=0; res.len=3152
[2025-08-21 10:56:14][354255814323053][5759 ms][DEBUG] END   runCmdUntilRes#1 in 4796 ms
[2025-08-21 10:56:14][354255814323053][5759 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:57:05][352501917320716][1 ms][INFO] === Request start ===
[2025-08-21 10:57:05][352501917320716][1 ms][DEBUG] START check_frida
[2025-08-21 10:57:05][352501917320716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:57:05][352501917320716][277 ms][DEBUG] SU: done in 276 ms; outroot          1313     1 2283564   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:57:05][352501917320716][277 ms][DEBUG] check_frida: running
[2025-08-21 10:57:05][352501917320716][277 ms][DEBUG] END   check_frida in 276 ms
[2025-08-21 10:57:05][352501917320716][277 ms][DEBUG] START check_scloud
[2025-08-21 10:57:05][352501917320716][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:57:05][352501917320716][575 ms][DEBUG] SU: done in 298 ms; outu0_a118       7399 30745 23506004 105136 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:57:05][352501917320716][575 ms][DEBUG] targetPkg: running
[2025-08-21 10:57:05][352501917320716][575 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 10:57:05][352501917320716][576 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:57:05][352501917320716][576 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTAxOTE3MzIwNzE2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MEpWODFOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDM5MCJ9'" -e "main()" -q"
[2025-08-21 10:57:05][352501917320716][576 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:57:05][352501917320716][576 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTAxOTE3MzIwNzE2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MEpWODFOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDM5MCJ9'" -e "main()" -q"
[2025-08-21 10:57:08][352501917320716][3386 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTAxOTE3MzIwNzE2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MEpWODFOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDM5MCJ9"\r\n
[2025-08-21 10:57:10][352501917320716][5463 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ecdad41f-1fa5-4803-9f71-37fe2eebc0f6","id":"QR_ecdad41f-1fa5-4803-9f71-37fe2eebc0f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:57:10][352501917320716][5464 ms][DEBUG] proc_open done in 4888 ms; code=0; res.len=3152
[2025-08-21 10:57:10][352501917320716][5464 ms][DEBUG] END   runCmdUntilRes#1 in 4888 ms
[2025-08-21 10:57:10][352501917320716][5464 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:58:16][352058608715134][1 ms][INFO] === Request start ===
[2025-08-21 10:58:16][352058608715134][2 ms][DEBUG] START check_frida
[2025-08-21 10:58:16][352058608715134][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:58:16][352058608715134][256 ms][DEBUG] SU: done in 255 ms; outroot          1313     1 2283564   4512 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:58:16][352058608715134][256 ms][DEBUG] check_frida: running
[2025-08-21 10:58:16][352058608715134][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 10:58:16][352058608715134][256 ms][DEBUG] START check_internet
[2025-08-21 10:58:16][352058608715134][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 10:58:17][352058608715134][522 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.917/179.917/179.917/0.000 ms\n
[2025-08-21 10:58:17][352058608715134][522 ms][DEBUG] check_internet: online
[2025-08-21 10:58:17][352058608715134][522 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 10:58:17][352058608715134][522 ms][DEBUG] START check_scloud
[2025-08-21 10:58:17][352058608715134][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:58:17][352058608715134][803 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23506036 105456 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:58:17][352058608715134][803 ms][DEBUG] targetPkg: running
[2025-08-21 10:58:17][352058608715134][803 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 10:58:17][352058608715134][803 ms][DEBUG] rawBody.length=1160
[2025-08-21 10:58:17][352058608715134][803 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDU4NjA4NzE1MTM0IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5UVkxMDNaMURUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjMyIn0='" -e "main()" -q"
[2025-08-21 10:58:17][352058608715134][803 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:58:17][352058608715134][803 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDU4NjA4NzE1MTM0IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5UVkxMDNaMURUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjMyIn0='" -e "main()" -q"
[2025-08-21 10:58:20][352058608715134][3615 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDU4NjA4NzE1MTM0IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5UVkxMDNaMURUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjMyIn0="\r\n
[2025-08-21 10:58:26][352058608715134][10238 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42cd4f5a-c506-49ca-bfa7-e871e329d7aa","id":"QR_42cd4f5a-c506-49ca-bfa7-e871e329d7aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:58:26][352058608715134][10238 ms][DEBUG] proc_open done in 9435 ms; code=0; res.len=3152
[2025-08-21 10:58:26][352058608715134][10238 ms][DEBUG] END   runCmdUntilRes#1 in 9435 ms
[2025-08-21 10:58:26][352058608715134][10238 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 10:59:05][355450532117841][1 ms][INFO] === Request start ===
[2025-08-21 10:59:05][355450532117841][2 ms][DEBUG] START check_frida
[2025-08-21 10:59:05][355450532117841][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 10:59:05][355450532117841][281 ms][DEBUG] SU: done in 280 ms; outroot          1313     1 2283564   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 10:59:05][355450532117841][281 ms][DEBUG] check_frida: running
[2025-08-21 10:59:05][355450532117841][281 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 10:59:05][355450532117841][281 ms][DEBUG] START check_scloud
[2025-08-21 10:59:05][355450532117841][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 10:59:06][355450532117841][578 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23506068 105924 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 10:59:06][355450532117841][578 ms][DEBUG] targetPkg: running
[2025-08-21 10:59:06][355450532117841][578 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 10:59:06][355450532117841][578 ms][DEBUG] rawBody.length=1161
[2025-08-21 10:59:06][355450532117841][578 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDUwNTMyMTE3ODQxIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMENEQ0hKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU4MiJ9'" -e "main()" -q"
[2025-08-21 10:59:06][355450532117841][579 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 10:59:06][355450532117841][579 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDUwNTMyMTE3ODQxIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMENEQ0hKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU4MiJ9'" -e "main()" -q"
[2025-08-21 10:59:08][355450532117841][3374 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NDUwNTMyMTE3ODQxIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMENEQ0hKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU4MiJ9"\r\n
[2025-08-21 10:59:11][355450532117841][5608 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_188aaafd-80da-4f99-a6bd-a1b3871f7d50","id":"QR_188aaafd-80da-4f99-a6bd-a1b3871f7d50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 10:59:11][355450532117841][5608 ms][DEBUG] proc_open done in 5030 ms; code=0; res.len=3152
[2025-08-21 10:59:11][355450532117841][5608 ms][DEBUG] END   runCmdUntilRes#1 in 5030 ms
[2025-08-21 10:59:11][355450532117841][5608 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:00:11][352192665096136][1 ms][INFO] === Request start ===
[2025-08-21 11:00:11][352192665096136][2 ms][DEBUG] START check_frida
[2025-08-21 11:00:11][352192665096136][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:00:11][352192665096136][295 ms][DEBUG] SU: done in 293 ms; outroot          1313     1 2283564   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:00:11][352192665096136][295 ms][DEBUG] check_frida: running
[2025-08-21 11:00:11][352192665096136][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 11:00:11][352192665096136][295 ms][DEBUG] START check_internet
[2025-08-21 11:00:11][352192665096136][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:00:11][352192665096136][810 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.587/202.587/202.587/0.000 ms\n
[2025-08-21 11:00:11][352192665096136][811 ms][DEBUG] check_internet: online
[2025-08-21 11:00:11][352192665096136][811 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 11:00:11][352192665096136][811 ms][DEBUG] START check_scloud
[2025-08-21 11:00:11][352192665096136][811 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:00:12][352192665096136][1107 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23506100 106748 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:00:12][352192665096136][1107 ms][DEBUG] targetPkg: running
[2025-08-21 11:00:12][352192665096136][1107 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 11:00:12][352192665096136][1107 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:00:12][352192665096136][1107 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTkyNjY1MDk2MTM2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MUFRTUpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEwNCJ9'" -e "main()" -q"
[2025-08-21 11:00:12][352192665096136][1107 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:00:12][352192665096136][1107 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTkyNjY1MDk2MTM2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MUFRTUpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEwNCJ9'" -e "main()" -q"
[2025-08-21 11:00:14][352192665096136][3919 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMTkyNjY1MDk2MTM2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MUFRTUpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEwNCJ9"\r\n
[2025-08-21 11:00:16][352192665096136][5840 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cff9ce98-c901-4847-ae62-f54a8849ea00","id":"QR_cff9ce98-c901-4847-ae62-f54a8849ea00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:00:16][352192665096136][5841 ms][DEBUG] proc_open done in 4733 ms; code=0; res.len=3152
[2025-08-21 11:00:16][352192665096136][5841 ms][DEBUG] END   runCmdUntilRes#1 in 4733 ms
[2025-08-21 11:00:16][352192665096136][5841 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:03:08][354775290435816][1 ms][INFO] === Request start ===
[2025-08-21 11:03:08][354775290435816][2 ms][DEBUG] START check_frida
[2025-08-21 11:03:08][354775290435816][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:03:09][354775290435816][252 ms][DEBUG] SU: done in 251 ms; outroot          1313     1 2283564   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:03:09][354775290435816][252 ms][DEBUG] check_frida: running
[2025-08-21 11:03:09][354775290435816][253 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 11:03:09][354775290435816][253 ms][DEBUG] START check_scloud
[2025-08-21 11:03:09][354775290435816][253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:03:09][354775290435816][534 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23506132 107340 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:03:09][354775290435816][534 ms][DEBUG] targetPkg: running
[2025-08-21 11:03:09][354775290435816][534 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 11:03:09][354775290435816][534 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:03:09][354775290435816][534 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0Nzc1MjkwNDM1ODE2IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMjhHRFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzkxIn0='" -e "main()" -q"
[2025-08-21 11:03:09][354775290435816][534 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:03:09][354775290435816][534 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0Nzc1MjkwNDM1ODE2IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMjhHRFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzkxIn0='" -e "main()" -q"
[2025-08-21 11:03:12][354775290435816][3330 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0Nzc1MjkwNDM1ODE2IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMjhHRFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzkxIn0="\r\n
[2025-08-21 11:03:15][354775290435816][6923 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e990f63-8b40-4e23-8dc2-df442d5b9c98","id":"QR_0e990f63-8b40-4e23-8dc2-df442d5b9c98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:03:15][354775290435816][6923 ms][DEBUG] proc_open done in 6389 ms; code=0; res.len=3152
[2025-08-21 11:03:15][354775290435816][6923 ms][DEBUG] END   runCmdUntilRes#1 in 6389 ms
[2025-08-21 11:03:15][354775290435816][6923 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:03:27][351978521738809][0 ms][INFO] === Request start ===
[2025-08-21 11:03:27][351978521738809][0 ms][DEBUG] START check_frida
[2025-08-21 11:03:27][351978521738809][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:03:27][351978521738809][291 ms][DEBUG] SU: done in 290 ms; outroot          1313     1 2283564   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:03:27][351978521738809][291 ms][DEBUG] check_frida: running
[2025-08-21 11:03:27][351978521738809][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 11:03:27][351978521738809][291 ms][DEBUG] START check_scloud
[2025-08-21 11:03:27][351978521738809][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:03:28][351978521738809][587 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23506164 107888 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:03:28][351978521738809][587 ms][DEBUG] targetPkg: running
[2025-08-21 11:03:28][351978521738809][587 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:03:28][351978521738809][587 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:03:28][351978521738809][587 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIxNzM4ODA5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ5MFowVEhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk4MCJ9'" -e "main()" -q"
[2025-08-21 11:03:28][351978521738809][587 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:03:28][351978521738809][587 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIxNzM4ODA5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ5MFowVEhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk4MCJ9'" -e "main()" -q"
[2025-08-21 11:03:31][351978521738809][3368 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxOTc4NTIxNzM4ODA5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ5MFowVEhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk4MCJ9"\r\n
[2025-08-21 11:03:33][351978521738809][5820 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54972b7a-ff23-494e-82c7-fc5923b2b355","id":"QR_54972b7a-ff23-494e-82c7-fc5923b2b355","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:03:33][351978521738809][5821 ms][DEBUG] proc_open done in 5233 ms; code=0; res.len=3152
[2025-08-21 11:03:33][351978521738809][5821 ms][DEBUG] END   runCmdUntilRes#1 in 5233 ms
[2025-08-21 11:03:33][351978521738809][5821 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:04:07][351521281920645][0 ms][INFO] === Request start ===
[2025-08-21 11:04:07][351521281920645][1 ms][DEBUG] START check_frida
[2025-08-21 11:04:07][351521281920645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:04:08][351521281920645][245 ms][DEBUG] SU: done in 244 ms; outroot          1313     1 2283564   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:04:08][351521281920645][246 ms][DEBUG] check_frida: running
[2025-08-21 11:04:08][351521281920645][246 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 11:04:08][351521281920645][246 ms][DEBUG] START check_internet
[2025-08-21 11:04:08][351521281920645][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:04:08][351521281920645][603 ms][DEBUG] SU: done in 357 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.913/248.913/248.913/0.000 ms\n
[2025-08-21 11:04:08][351521281920645][603 ms][DEBUG] check_internet: online
[2025-08-21 11:04:08][351521281920645][603 ms][DEBUG] END   check_internet in 357 ms
[2025-08-21 11:04:08][351521281920645][603 ms][DEBUG] START check_scloud
[2025-08-21 11:04:08][351521281920645][603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:04:08][351521281920645][884 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23506196 104600 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:04:08][351521281920645][884 ms][DEBUG] targetPkg: running
[2025-08-21 11:04:08][351521281920645][884 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 11:04:08][351521281920645][884 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:04:08][351521281920645][884 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjgxOTIwNjQ1IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMzVaTjVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY2MyJ9'" -e "main()" -q"
[2025-08-21 11:04:08][351521281920645][884 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:04:08][351521281920645][884 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjgxOTIwNjQ1IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMzVaTjVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY2MyJ9'" -e "main()" -q"
[2025-08-21 11:04:11][351521281920645][3680 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTIxMjgxOTIwNjQ1IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMzVaTjVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY2MyJ9"\r\n
[2025-08-21 11:04:13][351521281920645][5789 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9590c188-4cc5-475c-acb3-723861417592","id":"QR_9590c188-4cc5-475c-acb3-723861417592","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:04:13][351521281920645][5789 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 11:04:13][351521281920645][5789 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 11:04:13][351521281920645][5789 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:04:18][355235300790188][0 ms][INFO] === Request start ===
[2025-08-21 11:04:18][355235300790188][1 ms][DEBUG] START check_frida
[2025-08-21 11:04:18][355235300790188][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:04:19][355235300790188][249 ms][DEBUG] SU: done in 248 ms; outroot          1313     1 2299984   4516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:04:19][355235300790188][249 ms][DEBUG] check_frida: running
[2025-08-21 11:04:19][355235300790188][249 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 11:04:19][355235300790188][249 ms][DEBUG] START check_internet
[2025-08-21 11:04:19][355235300790188][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:04:19][355235300790188][515 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.233/170.233/170.233/0.000 ms\n
[2025-08-21 11:04:19][355235300790188][515 ms][DEBUG] check_internet: online
[2025-08-21 11:04:19][355235300790188][515 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 11:04:19][355235300790188][515 ms][DEBUG] START check_scloud
[2025-08-21 11:04:19][355235300790188][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:04:19][355235300790188][749 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23506228 105120 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:04:19][355235300790188][749 ms][DEBUG] targetPkg: running
[2025-08-21 11:04:19][355235300790188][749 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 11:04:19][355235300790188][749 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:04:19][355235300790188][749 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MjM1MzAwNzkwMTg4IiwibW9kZWwiOiJTTS1GOTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c3MFBaMU1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEwMyJ9'" -e "main()" -q"
[2025-08-21 11:04:19][355235300790188][749 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:04:19][355235300790188][749 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MjM1MzAwNzkwMTg4IiwibW9kZWwiOiJTTS1GOTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c3MFBaMU1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEwMyJ9'" -e "main()" -q"
[2025-08-21 11:04:22][355235300790188][3545 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MjM1MzAwNzkwMTg4IiwibW9kZWwiOiJTTS1GOTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c3MFBaMU1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEwMyJ9"\r\n
[2025-08-21 11:04:24][355235300790188][5342 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04f5e32a-2f33-4d24-a59e-f48fabb51bee","id":"QR_04f5e32a-2f33-4d24-a59e-f48fabb51bee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:04:24][355235300790188][5342 ms][DEBUG] proc_open done in 4593 ms; code=0; res.len=3152
[2025-08-21 11:04:24][355235300790188][5342 ms][DEBUG] END   runCmdUntilRes#1 in 4593 ms
[2025-08-21 11:04:24][355235300790188][5342 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:05:07][352967410062040][0 ms][INFO] === Request start ===
[2025-08-21 11:05:07][352967410062040][1 ms][DEBUG] START check_frida
[2025-08-21 11:05:07][352967410062040][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:05:07][352967410062040][294 ms][DEBUG] SU: done in 293 ms; outroot          1313     1 2283564   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:05:07][352967410062040][294 ms][DEBUG] check_frida: running
[2025-08-21 11:05:07][352967410062040][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 11:05:07][352967410062040][294 ms][DEBUG] START check_scloud
[2025-08-21 11:05:07][352967410062040][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:05:07][352967410062040][591 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23506260 105628 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:05:07][352967410062040][591 ms][DEBUG] targetPkg: running
[2025-08-21 11:05:07][352967410062040][591 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:05:07][352967410062040][591 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:05:07][352967410062040][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3NDEwMDYyMDQwIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI2OFgzMDNLNzlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY2NiJ9'" -e "main()" -q"
[2025-08-21 11:05:07][352967410062040][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:05:07][352967410062040][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3NDEwMDYyMDQwIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI2OFgzMDNLNzlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY2NiJ9'" -e "main()" -q"
[2025-08-21 11:05:10][352967410062040][3387 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTY3NDEwMDYyMDQwIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI2OFgzMDNLNzlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY2NiJ9"\r\n
[2025-08-21 11:05:12][352967410062040][5605 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26db567e-cb95-4b14-ad45-6cb5e9723e53","id":"QR_26db567e-cb95-4b14-ad45-6cb5e9723e53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:05:12][352967410062040][5606 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 11:05:12][352967410062040][5606 ms][DEBUG] END   runCmdUntilRes#1 in 5015 ms
[2025-08-21 11:05:12][352967410062040][5606 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:09:10][351684402651646][1 ms][INFO] === Request start ===
[2025-08-21 11:09:10][351684402651646][2 ms][DEBUG] START check_frida
[2025-08-21 11:09:10][351684402651646][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:09:10][351684402651646][289 ms][DEBUG] SU: done in 287 ms; outroot          1313     1 2283564   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:09:10][351684402651646][289 ms][DEBUG] check_frida: running
[2025-08-21 11:09:10][351684402651646][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 11:09:10][351684402651646][289 ms][DEBUG] START check_scloud
[2025-08-21 11:09:10][351684402651646][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:09:10][351684402651646][586 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23506292 106464 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:09:10][351684402651646][586 ms][DEBUG] targetPkg: running
[2025-08-21 11:09:10][351684402651646][586 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:09:10][351684402651646][586 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:09:10][351684402651646][586 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjg0NDAyNjUxNjQ2IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJDNDBKWUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzMiJ9'" -e "main()" -q"
[2025-08-21 11:09:10][351684402651646][586 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:09:10][351684402651646][586 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjg0NDAyNjUxNjQ2IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJDNDBKWUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzMiJ9'" -e "main()" -q"
[2025-08-21 11:09:13][351684402651646][3382 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjg0NDAyNjUxNjQ2IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJDNDBKWUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzMiJ9"\r\n
[2025-08-21 11:09:15][351684402651646][5725 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c26b346e-a7e2-49ca-80ba-7fd97305751e","id":"QR_c26b346e-a7e2-49ca-80ba-7fd97305751e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:09:15][351684402651646][5726 ms][DEBUG] proc_open done in 5139 ms; code=0; res.len=3152
[2025-08-21 11:09:15][351684402651646][5726 ms][DEBUG] END   runCmdUntilRes#1 in 5140 ms
[2025-08-21 11:09:15][351684402651646][5726 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:11:08][355464111157938][1 ms][INFO] === Request start ===
[2025-08-21 11:11:08][355464111157938][2 ms][DEBUG] START check_frida
[2025-08-21 11:11:08][355464111157938][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:11:08][355464111157938][307 ms][DEBUG] SU: done in 305 ms; outroot          1313     1 2283564   4516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:11:08][355464111157938][307 ms][DEBUG] check_frida: running
[2025-08-21 11:11:08][355464111157938][307 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 11:11:08][355464111157938][307 ms][DEBUG] START check_scloud
[2025-08-21 11:11:08][355464111157938][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:11:08][355464111157938][588 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23506324 106876 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:11:08][355464111157938][588 ms][DEBUG] targetPkg: running
[2025-08-21 11:11:08][355464111157938][588 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 11:11:08][355464111157938][588 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:11:08][355464111157938][588 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDY0MTExMTU3OTM4IiwibW9kZWwiOiJTTS1HOTg2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q04yMTZERFJMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlVTQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDkzIn0='" -e "main()" -q"
[2025-08-21 11:11:08][355464111157938][588 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:11:08][355464111157938][588 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDY0MTExMTU3OTM4IiwibW9kZWwiOiJTTS1HOTg2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q04yMTZERFJMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlVTQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDkzIn0='" -e "main()" -q"
[2025-08-21 11:11:11][355464111157938][3400 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NDY0MTExMTU3OTM4IiwibW9kZWwiOiJTTS1HOTg2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q04yMTZERFJMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlVTQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDkzIn0="\r\n
[2025-08-21 11:11:14][355464111157938][6399 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d0859f9-4722-4de6-acf0-0bb083b0efc0","id":"QR_4d0859f9-4722-4de6-acf0-0bb083b0efc0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:11:14][355464111157938][6399 ms][DEBUG] proc_open done in 5811 ms; code=0; res.len=3152
[2025-08-21 11:11:14][355464111157938][6399 ms][DEBUG] END   runCmdUntilRes#1 in 5811 ms
[2025-08-21 11:11:14][355464111157938][6399 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:15:08][352469856945614][1 ms][INFO] === Request start ===
[2025-08-21 11:15:08][352469856945614][2 ms][DEBUG] START check_frida
[2025-08-21 11:15:08][352469856945614][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:15:08][352469856945614][278 ms][DEBUG] SU: done in 277 ms; outroot          1313     1 2283564   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:15:08][352469856945614][278 ms][DEBUG] check_frida: running
[2025-08-21 11:15:08][352469856945614][278 ms][DEBUG] END   check_frida in 277 ms
[2025-08-21 11:15:08][352469856945614][278 ms][DEBUG] START check_scloud
[2025-08-21 11:15:08][352469856945614][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:15:09][352469856945614][575 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23506356 107384 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:15:09][352469856945614][575 ms][DEBUG] targetPkg: running
[2025-08-21 11:15:09][352469856945614][575 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:15:09][352469856945614][575 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:15:09][352469856945614][575 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU2OTQ1NjE0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ1MVZYVzRIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg4NSJ9'" -e "main()" -q"
[2025-08-21 11:15:09][352469856945614][575 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:15:09][352469856945614][575 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU2OTQ1NjE0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ1MVZYVzRIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg4NSJ9'" -e "main()" -q"
[2025-08-21 11:15:11][352469856945614][3371 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDY5ODU2OTQ1NjE0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ1MVZYVzRIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg4NSJ9"\r\n
[2025-08-21 11:15:14][352469856945614][5543 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe0554e6-bb80-4f6e-8e1d-961d04479d66","id":"QR_fe0554e6-bb80-4f6e-8e1d-961d04479d66","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:15:14][352469856945614][5543 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 11:15:14][352469856945614][5543 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-21 11:15:14][352469856945614][5543 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:16:06][352809854088174][0 ms][INFO] === Request start ===
[2025-08-21 11:16:06][352809854088174][1 ms][DEBUG] START check_frida
[2025-08-21 11:16:06][352809854088174][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:16:07][352809854088174][300 ms][DEBUG] SU: done in 299 ms; outroot          1313     1 2283564   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:16:07][352809854088174][300 ms][DEBUG] check_frida: running
[2025-08-21 11:16:07][352809854088174][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 11:16:07][352809854088174][300 ms][DEBUG] START check_internet
[2025-08-21 11:16:07][352809854088174][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:16:07][352809854088174][815 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.357/202.357/202.357/0.000 ms\n
[2025-08-21 11:16:07][352809854088174][815 ms][DEBUG] check_internet: online
[2025-08-21 11:16:07][352809854088174][815 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 11:16:07][352809854088174][815 ms][DEBUG] START check_scloud
[2025-08-21 11:16:07][352809854088174][815 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:16:08][352809854088174][1050 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23506388 104596 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:16:08][352809854088174][1050 ms][DEBUG] targetPkg: running
[2025-08-21 11:16:08][352809854088174][1050 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 11:16:08][352809854088174][1050 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:16:08][352809854088174][1050 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODA5ODU0MDg4MTc0IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k0MUgyR0ZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU4NiJ9'" -e "main()" -q"
[2025-08-21 11:16:08][352809854088174][1050 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:16:08][352809854088174][1050 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODA5ODU0MDg4MTc0IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k0MUgyR0ZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU4NiJ9'" -e "main()" -q"
[2025-08-21 11:16:10][352809854088174][3893 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyODA5ODU0MDg4MTc0IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k0MUgyR0ZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU4NiJ9"\r\n
[2025-08-21 11:16:13][352809854088174][6267 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47cf6b15-50c5-4783-a97f-b9b6be6282df","id":"QR_47cf6b15-50c5-4783-a97f-b9b6be6282df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:16:13][352809854088174][6267 ms][DEBUG] proc_open done in 5217 ms; code=0; res.len=3152
[2025-08-21 11:16:13][352809854088174][6267 ms][DEBUG] END   runCmdUntilRes#1 in 5217 ms
[2025-08-21 11:16:13][352809854088174][6267 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:16:20][356921441858344][0 ms][INFO] === Request start ===
[2025-08-21 11:16:20][356921441858344][1 ms][DEBUG] START check_frida
[2025-08-21 11:16:20][356921441858344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:16:20][356921441858344][295 ms][DEBUG] SU: done in 294 ms; outroot          1313     1 2299984   4516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:16:20][356921441858344][295 ms][DEBUG] check_frida: running
[2025-08-21 11:16:20][356921441858344][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 11:16:20][356921441858344][295 ms][DEBUG] START check_internet
[2025-08-21 11:16:20][356921441858344][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:16:20][356921441858344][608 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.617/186.617/186.617/0.000 ms\n
[2025-08-21 11:16:20][356921441858344][608 ms][DEBUG] check_internet: online
[2025-08-21 11:16:20][356921441858344][608 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 11:16:20][356921441858344][608 ms][DEBUG] START check_scloud
[2025-08-21 11:16:20][356921441858344][608 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:16:21][356921441858344][920 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23506420 105404 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:16:21][356921441858344][920 ms][DEBUG] targetPkg: running
[2025-08-21 11:16:21][356921441858344][920 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 11:16:21][356921441858344][920 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:16:21][356921441858344][920 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTIxNDQxODU4MzQ0IiwibW9kZWwiOiJTTS1NMTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MDFOMkhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NSJ9'" -e "main()" -q"
[2025-08-21 11:16:21][356921441858344][920 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:16:21][356921441858344][920 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTIxNDQxODU4MzQ0IiwibW9kZWwiOiJTTS1NMTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MDFOMkhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NSJ9'" -e "main()" -q"
[2025-08-21 11:16:23][356921441858344][3732 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTIxNDQxODU4MzQ0IiwibW9kZWwiOiJTTS1NMTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MDFOMkhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NSJ9"\r\n
[2025-08-21 11:16:25][356921441858344][5591 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b417fe9-eccf-4e0f-a00d-96d14d3fc0cc","id":"QR_7b417fe9-eccf-4e0f-a00d-96d14d3fc0cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:16:25][356921441858344][5591 ms][DEBUG] proc_open done in 4671 ms; code=0; res.len=3152
[2025-08-21 11:16:25][356921441858344][5592 ms][DEBUG] END   runCmdUntilRes#1 in 4671 ms
[2025-08-21 11:16:25][356921441858344][5592 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:16:33][352749386406751][0 ms][INFO] === Request start ===
[2025-08-21 11:16:33][352749386406751][1 ms][DEBUG] START check_frida
[2025-08-21 11:16:33][352749386406751][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:16:33][352749386406751][256 ms][DEBUG] SU: done in 255 ms; outroot          1313     1 2299984   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:16:33][352749386406751][256 ms][DEBUG] check_frida: running
[2025-08-21 11:16:33][352749386406751][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 11:16:33][352749386406751][256 ms][DEBUG] START check_internet
[2025-08-21 11:16:33][352749386406751][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:16:34][352749386406751][537 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.373/184.373/184.373/0.000 ms\n
[2025-08-21 11:16:34][352749386406751][538 ms][DEBUG] check_internet: online
[2025-08-21 11:16:34][352749386406751][538 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 11:16:34][352749386406751][538 ms][DEBUG] START check_scloud
[2025-08-21 11:16:34][352749386406751][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:16:34][352749386406751][834 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23506452 106036 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:16:34][352749386406751][834 ms][DEBUG] targetPkg: running
[2025-08-21 11:16:34][352749386406751][834 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:16:34][352749386406751][834 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:16:34][352749386406751][834 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzQ5Mzg2NDA2NzUxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MTc4V0dUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzQ2In0='" -e "main()" -q"
[2025-08-21 11:16:34][352749386406751][834 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:16:34][352749386406751][834 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzQ5Mzg2NDA2NzUxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MTc4V0dUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzQ2In0='" -e "main()" -q"
[2025-08-21 11:16:37][352749386406751][3615 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzQ5Mzg2NDA2NzUxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MTc4V0dUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzQ2In0="\r\n
[2025-08-21 11:16:41][352749386406751][7567 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3486bcab-2860-4667-9201-c30cdd1415d3","id":"QR_3486bcab-2860-4667-9201-c30cdd1415d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:16:41][352749386406751][7567 ms][DEBUG] proc_open done in 6733 ms; code=0; res.len=3152
[2025-08-21 11:16:41][352749386406751][7567 ms][DEBUG] END   runCmdUntilRes#1 in 6733 ms
[2025-08-21 11:16:41][352749386406751][7567 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:16:52][350824194463575][0 ms][INFO] === Request start ===
[2025-08-21 11:16:52][350824194463575][1 ms][DEBUG] START check_frida
[2025-08-21 11:16:52][350824194463575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:16:52][350824194463575][288 ms][DEBUG] SU: done in 287 ms; outroot          1313     1 2283564   4512 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:16:52][350824194463575][288 ms][DEBUG] check_frida: running
[2025-08-21 11:16:52][350824194463575][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 11:16:52][350824194463575][288 ms][DEBUG] START check_internet
[2025-08-21 11:16:52][350824194463575][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:16:53][350824194463575][679 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.264/261.264/261.264/0.000 ms\n
[2025-08-21 11:16:53][350824194463575][679 ms][DEBUG] check_internet: online
[2025-08-21 11:16:53][350824194463575][679 ms][DEBUG] END   check_internet in 390 ms
[2025-08-21 11:16:53][350824194463575][679 ms][DEBUG] START check_scloud
[2025-08-21 11:16:53][350824194463575][679 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:16:53][350824194463575][913 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23506484 106536 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:16:53][350824194463575][913 ms][DEBUG] targetPkg: running
[2025-08-21 11:16:53][350824194463575][913 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 11:16:53][350824194463575][913 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:16:53][350824194463575][913 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTk0NDYzNTc1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMDFFOTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDIzIn0='" -e "main()" -q"
[2025-08-21 11:16:53][350824194463575][913 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:16:53][350824194463575][913 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTk0NDYzNTc1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMDFFOTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDIzIn0='" -e "main()" -q"
[2025-08-21 11:16:56][350824194463575][3678 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODI0MTk0NDYzNTc1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMDFFOTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDIzIn0="\r\n
[2025-08-21 11:16:59][350824194463575][7099 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e04247f6-f098-4d10-b0e3-4c99aba4adf4","id":"QR_e04247f6-f098-4d10-b0e3-4c99aba4adf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:16:59][350824194463575][7099 ms][DEBUG] proc_open done in 6186 ms; code=0; res.len=3152
[2025-08-21 11:16:59][350824194463575][7099 ms][DEBUG] END   runCmdUntilRes#1 in 6186 ms
[2025-08-21 11:16:59][350824194463575][7099 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:21:11][350356670693011][1 ms][INFO] === Request start ===
[2025-08-21 11:21:11][350356670693011][2 ms][DEBUG] START check_frida
[2025-08-21 11:21:11][350356670693011][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:21:11][350356670693011][298 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2298972   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:21:11][350356670693011][298 ms][DEBUG] check_frida: running
[2025-08-21 11:21:11][350356670693011][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 11:21:11][350356670693011][298 ms][DEBUG] START check_scloud
[2025-08-21 11:21:11][350356670693011][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:21:11][350356670693011][610 ms][DEBUG] SU: done in 311 ms; outu0_a118       7399 30745 23506516 107140 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:21:11][350356670693011][610 ms][DEBUG] targetPkg: running
[2025-08-21 11:21:11][350356670693011][610 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 11:21:11][350356670693011][610 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:21:11][350356670693011][610 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzU2NjcwNjkzMDExIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c5MkZHSkNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMSJ9'" -e "main()" -q"
[2025-08-21 11:21:11][350356670693011][610 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:21:11][350356670693011][610 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzU2NjcwNjkzMDExIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c5MkZHSkNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMSJ9'" -e "main()" -q"
[2025-08-21 11:21:14][350356670693011][3406 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzU2NjcwNjkzMDExIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c5MkZHSkNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMSJ9"\r\n
[2025-08-21 11:21:16][350356670693011][5734 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_983ddecf-849e-4eb8-9049-97330f854c91","id":"QR_983ddecf-849e-4eb8-9049-97330f854c91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:21:16][350356670693011][5734 ms][DEBUG] proc_open done in 5123 ms; code=0; res.len=3152
[2025-08-21 11:21:16][350356670693011][5734 ms][DEBUG] END   runCmdUntilRes#1 in 5124 ms
[2025-08-21 11:21:16][350356670693011][5734 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:22:08][352397453739686][0 ms][INFO] === Request start ===
[2025-08-21 11:22:08][352397453739686][1 ms][DEBUG] START check_frida
[2025-08-21 11:22:08][352397453739686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:22:09][352397453739686][264 ms][DEBUG] SU: done in 263 ms; outroot          1313     1 2283564   4512 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:22:09][352397453739686][265 ms][DEBUG] check_frida: running
[2025-08-21 11:22:09][352397453739686][265 ms][DEBUG] END   check_frida in 264 ms
[2025-08-21 11:22:09][352397453739686][265 ms][DEBUG] START check_internet
[2025-08-21 11:22:09][352397453739686][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:22:09][352397453739686][748 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.409/202.409/202.409/0.000 ms\n
[2025-08-21 11:22:09][352397453739686][748 ms][DEBUG] check_internet: online
[2025-08-21 11:22:09][352397453739686][748 ms][DEBUG] END   check_internet in 483 ms
[2025-08-21 11:22:09][352397453739686][748 ms][DEBUG] START check_scloud
[2025-08-21 11:22:09][352397453739686][748 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:22:09][352397453739686][982 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23506548 104800 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:22:09][352397453739686][982 ms][DEBUG] targetPkg: running
[2025-08-21 11:22:09][352397453739686][982 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 11:22:09][352397453739686][982 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:22:09][352397453739686][983 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUzNzM5Njg2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcyMDdCVkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk0NyJ9'" -e "main()" -q"
[2025-08-21 11:22:09][352397453739686][983 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:22:09][352397453739686][983 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUzNzM5Njg2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcyMDdCVkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk0NyJ9'" -e "main()" -q"
[2025-08-21 11:22:12][352397453739686][3794 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzk3NDUzNzM5Njg2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcyMDdCVkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk0NyJ9"\r\n
[2025-08-21 11:22:14][352397453739686][5747 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a52e9b5-46e9-43c7-b511-fdd5be008da7","id":"QR_4a52e9b5-46e9-43c7-b511-fdd5be008da7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:22:14][352397453739686][5747 ms][DEBUG] proc_open done in 4765 ms; code=0; res.len=3152
[2025-08-21 11:22:14][352397453739686][5747 ms][DEBUG] END   runCmdUntilRes#1 in 4765 ms
[2025-08-21 11:22:14][352397453739686][5748 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:23:12][353330111412999][1 ms][INFO] === Request start ===
[2025-08-21 11:23:12][353330111412999][2 ms][DEBUG] START check_frida
[2025-08-21 11:23:12][353330111412999][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:23:12][353330111412999][287 ms][DEBUG] SU: done in 285 ms; outroot          1313     1 2283564   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:23:12][353330111412999][287 ms][DEBUG] check_frida: running
[2025-08-21 11:23:12][353330111412999][287 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 11:23:12][353330111412999][287 ms][DEBUG] START check_scloud
[2025-08-21 11:23:12][353330111412999][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:23:12][353330111412999][568 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23506580 105356 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:23:12][353330111412999][568 ms][DEBUG] targetPkg: running
[2025-08-21 11:23:12][353330111412999][568 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 11:23:12][353330111412999][568 ms][DEBUG] rawBody.length=1159
[2025-08-21 11:23:12][353330111412999][568 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzMwMTExNDEyOTk5IiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVDUwOEpYTU0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzU4MDcifQ=='" -e "main()" -q"
[2025-08-21 11:23:12][353330111412999][568 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:23:12][353330111412999][568 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzMwMTExNDEyOTk5IiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVDUwOEpYTU0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzU4MDcifQ=='" -e "main()" -q"
[2025-08-21 11:23:15][353330111412999][3333 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzMwMTExNDEyOTk5IiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVDUwOEpYTU0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzU4MDcifQ=="\r\n
[2025-08-21 11:23:19][353330111412999][7738 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0adb5969-f989-4b5d-966d-2fa55d287e52","id":"QR_0adb5969-f989-4b5d-966d-2fa55d287e52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:23:19][353330111412999][7738 ms][DEBUG] proc_open done in 7170 ms; code=0; res.len=3152
[2025-08-21 11:23:19][353330111412999][7738 ms][DEBUG] END   runCmdUntilRes#1 in 7170 ms
[2025-08-21 11:23:19][353330111412999][7738 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:23:27][351240640047855][0 ms][INFO] === Request start ===
[2025-08-21 11:23:27][351240640047855][1 ms][DEBUG] START check_frida
[2025-08-21 11:23:27][351240640047855][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:23:28][351240640047855][247 ms][DEBUG] SU: done in 246 ms; outroot          1313     1 2299984   4524 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:23:28][351240640047855][247 ms][DEBUG] check_frida: running
[2025-08-21 11:23:28][351240640047855][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 11:23:28][351240640047855][247 ms][DEBUG] START check_scloud
[2025-08-21 11:23:28][351240640047855][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:23:28][351240640047855][529 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23506612 105932 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:23:28][351240640047855][529 ms][DEBUG] targetPkg: running
[2025-08-21 11:23:28][351240640047855][529 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 11:23:28][351240640047855][529 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:23:28][351240640047855][529 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQwMDQ3ODU1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDRXUDFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzNyJ9'" -e "main()" -q"
[2025-08-21 11:23:28][351240640047855][529 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:23:28][351240640047855][529 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQwMDQ3ODU1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDRXUDFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzNyJ9'" -e "main()" -q"
[2025-08-21 11:23:31][351240640047855][3340 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQwMDQ3ODU1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDRXUDFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzNyJ9"\r\n
[2025-08-21 11:23:33][351240640047855][5496 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2ee9779-5adf-4e6e-bbe2-57e6c44617a9","id":"QR_a2ee9779-5adf-4e6e-bbe2-57e6c44617a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:23:33][351240640047855][5496 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 11:23:33][351240640047855][5496 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-21 11:23:33][351240640047855][5496 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:23:40][357582385465907][0 ms][INFO] === Request start ===
[2025-08-21 11:23:40][357582385465907][1 ms][DEBUG] START check_frida
[2025-08-21 11:23:40][357582385465907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:23:40][357582385465907][313 ms][DEBUG] SU: done in 312 ms; outroot          1313     1 2299984   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:23:40][357582385465907][313 ms][DEBUG] check_frida: running
[2025-08-21 11:23:40][357582385465907][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 11:23:40][357582385465907][313 ms][DEBUG] START check_scloud
[2025-08-21 11:23:40][357582385465907][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:23:40][357582385465907][625 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23506644 106496 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:23:40][357582385465907][625 ms][DEBUG] targetPkg: running
[2025-08-21 11:23:40][357582385465907][625 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 11:23:40][357582385465907][625 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:23:40][357582385465907][626 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTgyMzg1NDY1OTA3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMDk0QjlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY4NyJ9'" -e "main()" -q"
[2025-08-21 11:23:40][357582385465907][626 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:23:40][357582385465907][626 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTgyMzg1NDY1OTA3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMDk0QjlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY4NyJ9'" -e "main()" -q"
[2025-08-21 11:23:43][357582385465907][3421 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTgyMzg1NDY1OTA3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMDk0QjlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY4NyJ9"\r\n
[2025-08-21 11:23:45][357582385465907][5436 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3700b1be-b05d-486f-ba25-c172a926a4af","id":"QR_3700b1be-b05d-486f-ba25-c172a926a4af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:23:45][357582385465907][5437 ms][DEBUG] proc_open done in 4811 ms; code=0; res.len=3152
[2025-08-21 11:23:45][357582385465907][5437 ms][DEBUG] END   runCmdUntilRes#1 in 4811 ms
[2025-08-21 11:23:45][357582385465907][5437 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:27:05][350146812425954][1 ms][INFO] === Request start ===
[2025-08-21 11:27:05][350146812425954][1 ms][DEBUG] START check_frida
[2025-08-21 11:27:05][350146812425954][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:27:05][350146812425954][296 ms][DEBUG] SU: done in 294 ms; outroot          1313     1 2283564   4516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:27:05][350146812425954][296 ms][DEBUG] check_frida: running
[2025-08-21 11:27:05][350146812425954][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 11:27:05][350146812425954][296 ms][DEBUG] START check_scloud
[2025-08-21 11:27:05][350146812425954][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:27:05][350146812425954][592 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23506676 107624 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:27:05][350146812425954][592 ms][DEBUG] targetPkg: running
[2025-08-21 11:27:05][350146812425954][592 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 11:27:05][350146812425954][592 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:27:05][350146812425954][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTQ2ODEyNDI1OTU0IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMEhNRlNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQzNSJ9'" -e "main()" -q"
[2025-08-21 11:27:05][350146812425954][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:27:05][350146812425954][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTQ2ODEyNDI1OTU0IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMEhNRlNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQzNSJ9'" -e "main()" -q"
[2025-08-21 11:27:08][350146812425954][3388 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTQ2ODEyNDI1OTU0IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMEhNRlNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQzNSJ9"\r\n
[2025-08-21 11:27:10][350146812425954][5685 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_539e1734-f161-45ca-8792-def075a30747","id":"QR_539e1734-f161-45ca-8792-def075a30747","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:27:10][350146812425954][5685 ms][DEBUG] proc_open done in 5092 ms; code=0; res.len=3152
[2025-08-21 11:27:10][350146812425954][5685 ms][DEBUG] END   runCmdUntilRes#1 in 5092 ms
[2025-08-21 11:27:10][350146812425954][5685 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:27:20][351351024920755][0 ms][INFO] === Request start ===
[2025-08-21 11:27:20][351351024920755][0 ms][DEBUG] START check_frida
[2025-08-21 11:27:20][351351024920755][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:27:20][351351024920755][239 ms][DEBUG] SU: done in 238 ms; outroot          1313     1 2299984   4524 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:27:20][351351024920755][239 ms][DEBUG] check_frida: running
[2025-08-21 11:27:20][351351024920755][239 ms][DEBUG] END   check_frida in 238 ms
[2025-08-21 11:27:20][351351024920755][239 ms][DEBUG] START check_scloud
[2025-08-21 11:27:20][351351024920755][239 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:27:20][351351024920755][520 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23506708 105716 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:27:20][351351024920755][520 ms][DEBUG] targetPkg: running
[2025-08-21 11:27:20][351351024920755][520 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 11:27:20][351351024920755][520 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:27:20][351351024920755][520 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzUxMDI0OTIwNzU1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MVFKOExBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU4MCJ9'" -e "main()" -q"
[2025-08-21 11:27:20][351351024920755][520 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:27:20][351351024920755][520 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzUxMDI0OTIwNzU1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MVFKOExBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU4MCJ9'" -e "main()" -q"
[2025-08-21 11:27:23][351351024920755][3347 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzUxMDI0OTIwNzU1IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MVFKOExBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU4MCJ9"\r\n
[2025-08-21 11:27:25][351351024920755][5534 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c13379c-3e28-4558-81e1-4cec230d3eca","id":"QR_1c13379c-3e28-4558-81e1-4cec230d3eca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:27:25][351351024920755][5535 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 11:27:25][351351024920755][5535 ms][DEBUG] END   runCmdUntilRes#1 in 5015 ms
[2025-08-21 11:27:25][351351024920755][5535 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:32:07][350471511040064][1 ms][INFO] === Request start ===
[2025-08-21 11:32:07][350471511040064][2 ms][DEBUG] START check_frida
[2025-08-21 11:32:07][350471511040064][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:32:07][350471511040064][288 ms][DEBUG] SU: done in 286 ms; outroot          1313     1 2283564   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:32:07][350471511040064][288 ms][DEBUG] check_frida: running
[2025-08-21 11:32:07][350471511040064][288 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 11:32:07][350471511040064][288 ms][DEBUG] START check_internet
[2025-08-21 11:32:07][350471511040064][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:32:08][350471511040064][771 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.430/202.430/202.430/0.000 ms\n
[2025-08-21 11:32:08][350471511040064][771 ms][DEBUG] check_internet: online
[2025-08-21 11:32:08][350471511040064][772 ms][DEBUG] END   check_internet in 483 ms
[2025-08-21 11:32:08][350471511040064][772 ms][DEBUG] START check_scloud
[2025-08-21 11:32:08][350471511040064][772 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:32:08][350471511040064][1006 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23506740 105988 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:32:08][350471511040064][1006 ms][DEBUG] targetPkg: running
[2025-08-21 11:32:08][350471511040064][1006 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 11:32:08][350471511040064][1006 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:32:08][350471511040064][1006 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDcxNTExMDQwMDY0IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI4MTBMN0RXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM0OSJ9'" -e "main()" -q"
[2025-08-21 11:32:08][350471511040064][1006 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:32:08][350471511040064][1006 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDcxNTExMDQwMDY0IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI4MTBMN0RXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM0OSJ9'" -e "main()" -q"
[2025-08-21 11:32:11][350471511040064][3817 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDcxNTExMDQwMDY0IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI4MTBMN0RXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM0OSJ9"\r\n
[2025-08-21 11:32:13][350471511040064][5989 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c51edb8d-4b7d-46cf-a9ca-7f50c6679039","id":"QR_c51edb8d-4b7d-46cf-a9ca-7f50c6679039","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:32:13][350471511040064][5989 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 11:32:13][350471511040064][5989 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 11:32:13][350471511040064][5989 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:32:19][357435844291242][1 ms][INFO] === Request start ===
[2025-08-21 11:32:19][357435844291242][2 ms][DEBUG] START check_frida
[2025-08-21 11:32:19][357435844291242][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:32:19][357435844291242][240 ms][DEBUG] SU: done in 239 ms; outroot          1313     1 2299984   4520 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:32:19][357435844291242][241 ms][DEBUG] check_frida: running
[2025-08-21 11:32:19][357435844291242][241 ms][DEBUG] END   check_frida in 239 ms
[2025-08-21 11:32:19][357435844291242][241 ms][DEBUG] START check_internet
[2025-08-21 11:32:19][357435844291242][241 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:32:19][357435844291242][537 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.886/192.886/192.886/0.000 ms\n
[2025-08-21 11:32:19][357435844291242][537 ms][DEBUG] check_internet: online
[2025-08-21 11:32:19][357435844291242][537 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 11:32:19][357435844291242][537 ms][DEBUG] START check_scloud
[2025-08-21 11:32:19][357435844291242][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:32:20][357435844291242][773 ms][DEBUG] SU: done in 236 ms; outu0_a118       7399 30745 23506772 106660 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:32:20][357435844291242][773 ms][DEBUG] targetPkg: running
[2025-08-21 11:32:20][357435844291242][774 ms][DEBUG] END   check_scloud in 237 ms
[2025-08-21 11:32:20][357435844291242][774 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:32:20][357435844291242][774 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0MjkxMjQyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MDhWNEFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzQ4In0='" -e "main()" -q"
[2025-08-21 11:32:20][357435844291242][774 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:32:20][357435844291242][774 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0MjkxMjQyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MDhWNEFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzQ4In0='" -e "main()" -q"
[2025-08-21 11:32:22][357435844291242][3583 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDM1ODQ0MjkxMjQyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MDhWNEFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzQ4In0="\r\n
[2025-08-21 11:32:26][357435844291242][7473 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85368866-b547-4039-9d8c-8c8ea4960992","id":"QR_85368866-b547-4039-9d8c-8c8ea4960992","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:32:26][357435844291242][7473 ms][DEBUG] proc_open done in 6699 ms; code=0; res.len=3152
[2025-08-21 11:32:26][357435844291242][7473 ms][DEBUG] END   runCmdUntilRes#1 in 6699 ms
[2025-08-21 11:32:26][357435844291242][7473 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:34:07][356019743203234][0 ms][INFO] === Request start ===
[2025-08-21 11:34:07][356019743203234][1 ms][DEBUG] START check_frida
[2025-08-21 11:34:07][356019743203234][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:34:07][356019743203234][315 ms][DEBUG] SU: done in 313 ms; outroot          1313     1 2283564   4532 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:34:07][356019743203234][315 ms][DEBUG] check_frida: running
[2025-08-21 11:34:07][356019743203234][315 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 11:34:07][356019743203234][315 ms][DEBUG] START check_internet
[2025-08-21 11:34:07][356019743203234][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:34:08][356019743203234][643 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.423/221.423/221.423/0.000 ms\n
[2025-08-21 11:34:08][356019743203234][643 ms][DEBUG] check_internet: online
[2025-08-21 11:34:08][356019743203234][643 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 11:34:08][356019743203234][643 ms][DEBUG] START check_scloud
[2025-08-21 11:34:08][356019743203234][643 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:34:08][356019743203234][908 ms][DEBUG] SU: done in 265 ms; outu0_a118       7399 30745 23506804 105300 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:34:08][356019743203234][908 ms][DEBUG] targetPkg: running
[2025-08-21 11:34:08][356019743203234][908 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 11:34:08][356019743203234][908 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:34:08][356019743203234][908 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MDE5NzQzMjAzMjM0IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI3MldQMEdIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE0NiJ9'" -e "main()" -q"
[2025-08-21 11:34:08][356019743203234][908 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:34:08][356019743203234][909 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MDE5NzQzMjAzMjM0IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI3MldQMEdIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE0NiJ9'" -e "main()" -q"
[2025-08-21 11:34:11][356019743203234][3704 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MDE5NzQzMjAzMjM0IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI3MldQMEdIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE0NiJ9"\r\n
[2025-08-21 11:34:13][356019743203234][5579 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f89ea79f-d910-4e2a-9d95-c4b5fad81ce3","id":"QR_f89ea79f-d910-4e2a-9d95-c4b5fad81ce3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:34:13][356019743203234][5579 ms][DEBUG] proc_open done in 4670 ms; code=0; res.len=3152
[2025-08-21 11:34:13][356019743203234][5579 ms][DEBUG] END   runCmdUntilRes#1 in 4670 ms
[2025-08-21 11:34:13][356019743203234][5579 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:35:05][350938286345365][1 ms][INFO] === Request start ===
[2025-08-21 11:35:05][350938286345365][1 ms][DEBUG] START check_frida
[2025-08-21 11:35:05][350938286345365][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:35:05][350938286345365][250 ms][DEBUG] SU: done in 248 ms; outroot          1313     1 2298972   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:35:05][350938286345365][250 ms][DEBUG] check_frida: running
[2025-08-21 11:35:05][350938286345365][250 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 11:35:05][350938286345365][250 ms][DEBUG] START check_scloud
[2025-08-21 11:35:05][350938286345365][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:35:05][350938286345365][547 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23506836 105928 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:35:05][350938286345365][547 ms][DEBUG] targetPkg: running
[2025-08-21 11:35:05][350938286345365][547 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:35:05][350938286345365][547 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:35:05][350938286345365][547 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA0NyJ9'" -e "main()" -q"
[2025-08-21 11:35:05][350938286345365][547 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:35:05][350938286345365][547 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA0NyJ9'" -e "main()" -q"
[2025-08-21 11:35:08][350938286345365][3358 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA0NyJ9"\r\n
[2025-08-21 11:35:10][350938286345365][5092 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 11:35:10][350938286345365][5093 ms][DEBUG] proc_open done in 4546 ms; code=0; res.len=93
[2025-08-21 11:35:10][350938286345365][5093 ms][DEBUG] END   runCmdUntilRes#1 in 4546 ms
[2025-08-21 11:35:10][350938286345365][5093 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 11:35:10][][0 ms][INFO] === Request start ===
[2025-08-21 11:35:10][][1 ms][DEBUG] START check_frida
[2025-08-21 11:35:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:35:10][][258 ms][DEBUG] SU: done in 257 ms; outroot          1313     1 2299984   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:35:10][][258 ms][DEBUG] check_frida: running
[2025-08-21 11:35:10][][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 11:35:10][][258 ms][DEBUG] START check_scloud
[2025-08-21 11:35:10][][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:35:10][][492 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23506868 106516 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:35:10][][492 ms][DEBUG] targetPkg: running
[2025-08-21 11:35:10][][492 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 11:35:10][][492 ms][DEBUG] rawBody.length=1131
[2025-08-21 11:35:10][][493 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI1NSJ9'" -e "main()" -q"
[2025-08-21 11:35:10][][493 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:35:10][][493 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI1NSJ9'" -e "main()" -q"
[2025-08-21 11:35:13][][3257 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI1NSJ9"\r\n
[2025-08-21 11:35:15][][5054 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 11:35:15][][5054 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=107
[2025-08-21 11:35:15][][5054 ms][DEBUG] END   runCmdUntilRes#1 in 4562 ms
[2025-08-21 11:35:15][][5054 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 11:35:15][][0 ms][INFO] === Request start ===
[2025-08-21 11:35:15][][1 ms][DEBUG] START check_frida
[2025-08-21 11:35:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:35:16][][248 ms][DEBUG] SU: done in 247 ms; outroot          1313     1 2299984   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:35:16][][249 ms][DEBUG] check_frida: running
[2025-08-21 11:35:16][][249 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 11:35:16][][249 ms][DEBUG] START check_scloud
[2025-08-21 11:35:16][][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:35:16][][545 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23506900 107116 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:35:16][][546 ms][DEBUG] targetPkg: running
[2025-08-21 11:35:16][][546 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:35:16][][546 ms][DEBUG] rawBody.length=1131
[2025-08-21 11:35:16][][546 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc4NCJ9'" -e "main()" -q"
[2025-08-21 11:35:16][][546 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:35:16][][546 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc4NCJ9'" -e "main()" -q"
[2025-08-21 11:35:19][][3341 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc4NCJ9"\r\n
[2025-08-21 11:35:20][][5060 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 11:35:20][][5060 ms][DEBUG] proc_open done in 4514 ms; code=0; res.len=107
[2025-08-21 11:35:20][][5060 ms][DEBUG] END   runCmdUntilRes#1 in 4514 ms
[2025-08-21 11:35:20][][5060 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 11:35:23][350938286345365][0 ms][INFO] === Request start ===
[2025-08-21 11:35:23][350938286345365][1 ms][DEBUG] START check_frida
[2025-08-21 11:35:23][350938286345365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:35:23][350938286345365][242 ms][DEBUG] SU: done in 241 ms; outroot          1313     1 2299984   4520 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:35:23][350938286345365][242 ms][DEBUG] check_frida: running
[2025-08-21 11:35:23][350938286345365][242 ms][DEBUG] END   check_frida in 241 ms
[2025-08-21 11:35:23][350938286345365][242 ms][DEBUG] START check_scloud
[2025-08-21 11:35:23][350938286345365][243 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:35:23][350938286345365][539 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23506932 105940 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:35:23][350938286345365][539 ms][DEBUG] targetPkg: running
[2025-08-21 11:35:23][350938286345365][539 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:35:23][350938286345365][539 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:35:23][350938286345365][539 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzYzIn0='" -e "main()" -q"
[2025-08-21 11:35:23][350938286345365][539 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:35:23][350938286345365][539 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzYzIn0='" -e "main()" -q"
[2025-08-21 11:35:26][350938286345365][3366 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzYzIn0="\r\n
[2025-08-21 11:35:29][350938286345365][6366 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 11:35:29][350938286345365][6366 ms][DEBUG] proc_open done in 5827 ms; code=0; res.len=93
[2025-08-21 11:35:29][350938286345365][6366 ms][DEBUG] END   runCmdUntilRes#1 in 5827 ms
[2025-08-21 11:35:29][350938286345365][6366 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 11:35:30][][0 ms][INFO] === Request start ===
[2025-08-21 11:35:30][][1 ms][DEBUG] START check_frida
[2025-08-21 11:35:30][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:35:30][][274 ms][DEBUG] SU: done in 273 ms; outroot          1313     1 2299984   4524 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:35:30][][274 ms][DEBUG] check_frida: running
[2025-08-21 11:35:30][][274 ms][DEBUG] END   check_frida in 273 ms
[2025-08-21 11:35:30][][274 ms][DEBUG] START check_scloud
[2025-08-21 11:35:30][][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:35:30][][570 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23506964 106512 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:35:30][][571 ms][DEBUG] targetPkg: running
[2025-08-21 11:35:30][][571 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:35:30][][571 ms][DEBUG] rawBody.length=1130
[2025-08-21 11:35:30][][571 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTQ2In0='" -e "main()" -q"
[2025-08-21 11:35:30][][571 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:35:30][][571 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTQ2In0='" -e "main()" -q"
[2025-08-21 11:35:33][][3382 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTQ2In0="\r\n
[2025-08-21 11:35:37][][7256 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 11:35:37][][7257 ms][DEBUG] proc_open done in 6686 ms; code=0; res.len=107
[2025-08-21 11:35:37][][7257 ms][DEBUG] END   runCmdUntilRes#1 in 6686 ms
[2025-08-21 11:35:37][][7257 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 11:35:37][][0 ms][INFO] === Request start ===
[2025-08-21 11:35:37][][1 ms][DEBUG] START check_frida
[2025-08-21 11:35:37][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:35:37][][299 ms][DEBUG] SU: done in 298 ms; outroot          1313     1 2299984   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:35:37][][299 ms][DEBUG] check_frida: running
[2025-08-21 11:35:37][][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 11:35:37][][299 ms][DEBUG] START check_scloud
[2025-08-21 11:35:37][][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:35:38][][597 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23506996 107096 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:35:38][][597 ms][DEBUG] targetPkg: running
[2025-08-21 11:35:38][][597 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 11:35:38][][597 ms][DEBUG] rawBody.length=1130
[2025-08-21 11:35:38][][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTYzIn0='" -e "main()" -q"
[2025-08-21 11:35:38][][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:35:38][][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTYzIn0='" -e "main()" -q"
[2025-08-21 11:35:41][][3407 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTYzIn0="\r\n
[2025-08-21 11:35:42][][5251 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 11:35:42][][5251 ms][DEBUG] proc_open done in 4653 ms; code=0; res.len=107
[2025-08-21 11:35:42][][5251 ms][DEBUG] END   runCmdUntilRes#1 in 4654 ms
[2025-08-21 11:35:42][][5251 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 11:35:48][354068195433163][0 ms][INFO] === Request start ===
[2025-08-21 11:35:48][354068195433163][1 ms][DEBUG] START check_frida
[2025-08-21 11:35:48][354068195433163][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:35:49][354068195433163][299 ms][DEBUG] SU: done in 298 ms; outroot          1313     1 2299984   4516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:35:49][354068195433163][299 ms][DEBUG] check_frida: running
[2025-08-21 11:35:49][354068195433163][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 11:35:49][354068195433163][299 ms][DEBUG] START check_scloud
[2025-08-21 11:35:49][354068195433163][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:35:49][354068195433163][533 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23507028 106240 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:35:49][354068195433163][533 ms][DEBUG] targetPkg: running
[2025-08-21 11:35:49][354068195433163][533 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 11:35:49][354068195433163][533 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:35:49][354068195433163][533 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDY4MTk1NDMzMTYzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFJTVlRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQwNiJ9'" -e "main()" -q"
[2025-08-21 11:35:49][354068195433163][533 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:35:49][354068195433163][533 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDY4MTk1NDMzMTYzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFJTVlRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQwNiJ9'" -e "main()" -q"
[2025-08-21 11:35:52][354068195433163][3345 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDY4MTk1NDMzMTYzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFJTVlRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQwNiJ9"\r\n
[2025-08-21 11:35:54][354068195433163][5516 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f79c3516-1bb0-4721-b047-25cfae4a48ac","id":"QR_f79c3516-1bb0-4721-b047-25cfae4a48ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:35:54][354068195433163][5517 ms][DEBUG] proc_open done in 4984 ms; code=0; res.len=3152
[2025-08-21 11:35:54][354068195433163][5517 ms][DEBUG] END   runCmdUntilRes#1 in 4984 ms
[2025-08-21 11:35:54][354068195433163][5517 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:36:01][352623855492842][0 ms][INFO] === Request start ===
[2025-08-21 11:36:01][352623855492842][1 ms][DEBUG] START check_frida
[2025-08-21 11:36:01][352623855492842][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:36:02][352623855492842][302 ms][DEBUG] SU: done in 301 ms; outroot          1313     1 2299984   4520 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:36:02][352623855492842][302 ms][DEBUG] check_frida: running
[2025-08-21 11:36:02][352623855492842][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 11:36:02][352623855492842][302 ms][DEBUG] START check_internet
[2025-08-21 11:36:02][352623855492842][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:36:02][352623855492842][802 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.302/202.302/202.302/0.000 ms\n
[2025-08-21 11:36:02][352623855492842][802 ms][DEBUG] check_internet: online
[2025-08-21 11:36:02][352623855492842][802 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 11:36:02][352623855492842][802 ms][DEBUG] START check_scloud
[2025-08-21 11:36:02][352623855492842][802 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:36:02][352623855492842][1067 ms][DEBUG] SU: done in 266 ms; outu0_a118       7399 30745 23507060 106860 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:36:02][352623855492842][1067 ms][DEBUG] targetPkg: running
[2025-08-21 11:36:02][352623855492842][1067 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 11:36:02][352623855492842][1067 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:36:02][352623855492842][1067 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjIzODU1NDkyODQyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1g3MFE4MzJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk3NSJ9'" -e "main()" -q"
[2025-08-21 11:36:02][352623855492842][1067 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:36:02][352623855492842][1067 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjIzODU1NDkyODQyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1g3MFE4MzJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk3NSJ9'" -e "main()" -q"
[2025-08-21 11:36:03][352623175334401][1 ms][INFO] === Request start ===
[2025-08-21 11:36:05][352623855492842][3863 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjIzODU1NDkyODQyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1g3MFE4MzJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk3NSJ9"\r\n
[2025-08-21 11:36:07][352623855492842][5660 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43d6a7ca-8260-4c48-adca-ffa1a13339f9","id":"QR_43d6a7ca-8260-4c48-adca-ffa1a13339f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:36:07][352623855492842][5660 ms][DEBUG] proc_open done in 4593 ms; code=0; res.len=3152
[2025-08-21 11:36:07][352623855492842][5660 ms][DEBUG] END   runCmdUntilRes#1 in 4593 ms
[2025-08-21 11:36:07][352623855492842][5660 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:36:07][352623175334401][4049 ms][DEBUG] START check_frida
[2025-08-21 11:36:07][352623175334401][4049 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:36:08][352623175334401][4346 ms][DEBUG] SU: done in 297 ms; outroot          1313     1 2299984   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:36:08][352623175334401][4346 ms][DEBUG] check_frida: running
[2025-08-21 11:36:08][352623175334401][4346 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 11:36:08][352623175334401][4346 ms][DEBUG] START check_internet
[2025-08-21 11:36:08][352623175334401][4346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:36:08][352623175334401][4596 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.648/136.648/136.648/0.000 ms\n
[2025-08-21 11:36:08][352623175334401][4596 ms][DEBUG] check_internet: online
[2025-08-21 11:36:08][352623175334401][4596 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 11:36:08][352623175334401][4596 ms][DEBUG] START check_scloud
[2025-08-21 11:36:08][352623175334401][4596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:36:08][352623175334401][4877 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23507092 107452 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:36:08][352623175334401][4877 ms][DEBUG] targetPkg: running
[2025-08-21 11:36:08][352623175334401][4877 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 11:36:08][352623175334401][4877 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:36:08][352623175334401][4877 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjIzMTc1MzM0NDAxIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBNDBNUFpBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTcxMyJ9'" -e "main()" -q"
[2025-08-21 11:36:08][352623175334401][4877 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:36:08][352623175334401][4877 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjIzMTc1MzM0NDAxIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBNDBNUFpBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTcxMyJ9'" -e "main()" -q"
[2025-08-21 11:36:11][352623175334401][7673 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjIzMTc1MzM0NDAxIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBNDBNUFpBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTcxMyJ9"\r\n
[2025-08-21 11:36:13][352623175334401][9547 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_188e3ebb-4d54-4084-acbc-bc614667ee57","id":"QR_188e3ebb-4d54-4084-acbc-bc614667ee57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:36:13][352623175334401][9547 ms][DEBUG] proc_open done in 4670 ms; code=0; res.len=3152
[2025-08-21 11:36:13][352623175334401][9547 ms][DEBUG] END   runCmdUntilRes#1 in 4670 ms
[2025-08-21 11:36:13][352623175334401][9547 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:37:08][351786691656135][1 ms][INFO] === Request start ===
[2025-08-21 11:37:08][351786691656135][2 ms][DEBUG] START check_frida
[2025-08-21 11:37:08][351786691656135][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:37:08][351786691656135][296 ms][DEBUG] SU: done in 294 ms; outroot          1313     1 2282552   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:37:08][351786691656135][296 ms][DEBUG] check_frida: running
[2025-08-21 11:37:08][351786691656135][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 11:37:08][351786691656135][296 ms][DEBUG] START check_scloud
[2025-08-21 11:37:08][351786691656135][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:37:09][351786691656135][609 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23507124 104244 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:37:09][351786691656135][609 ms][DEBUG] targetPkg: running
[2025-08-21 11:37:09][351786691656135][609 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 11:37:09][351786691656135][609 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:37:09][351786691656135][609 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzg2NjkxNjU2MTM1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMTFQQVhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE4MyJ9'" -e "main()" -q"
[2025-08-21 11:37:09][351786691656135][609 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:37:09][351786691656135][609 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzg2NjkxNjU2MTM1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMTFQQVhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE4MyJ9'" -e "main()" -q"
[2025-08-21 11:37:11][351786691656135][3436 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzg2NjkxNjU2MTM1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMTFQQVhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE4MyJ9"\r\n
[2025-08-21 11:37:14][351786691656135][5591 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec6f83ef-35c8-4aca-a329-1273046970e7","id":"QR_ec6f83ef-35c8-4aca-a329-1273046970e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:37:14][351786691656135][5592 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 11:37:14][351786691656135][5592 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 11:37:14][351786691656135][5592 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:37:19][357435843795078][0 ms][INFO] === Request start ===
[2025-08-21 11:37:19][357435843795078][1 ms][DEBUG] START check_frida
[2025-08-21 11:37:19][357435843795078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:37:19][357435843795078][303 ms][DEBUG] SU: done in 301 ms; outroot          1313     1 2299984   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:37:19][357435843795078][303 ms][DEBUG] check_frida: running
[2025-08-21 11:37:19][357435843795078][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 11:37:19][357435843795078][303 ms][DEBUG] START check_scloud
[2025-08-21 11:37:19][357435843795078][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:37:20][357435843795078][599 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23507156 104788 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:37:20][357435843795078][599 ms][DEBUG] targetPkg: running
[2025-08-21 11:37:20][357435843795078][599 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:37:20][357435843795078][599 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:37:20][357435843795078][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQzNzk1MDc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MTFFNkpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY2NSJ9'" -e "main()" -q"
[2025-08-21 11:37:20][357435843795078][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:37:20][357435843795078][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQzNzk1MDc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MTFFNkpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY2NSJ9'" -e "main()" -q"
[2025-08-21 11:37:23][357435843795078][3395 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDM1ODQzNzk1MDc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MTFFNkpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY2NSJ9"\r\n
[2025-08-21 11:37:24][357435843795078][5098 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11f570f7-7f12-45d8-b8d0-1393c0680550","id":"QR_11f570f7-7f12-45d8-b8d0-1393c0680550","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:37:24][357435843795078][5099 ms][DEBUG] proc_open done in 4499 ms; code=0; res.len=3152
[2025-08-21 11:37:24][357435843795078][5099 ms][DEBUG] END   runCmdUntilRes#1 in 4500 ms
[2025-08-21 11:37:24][357435843795078][5099 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:37:31][352397456157662][0 ms][INFO] === Request start ===
[2025-08-21 11:37:31][352397456157662][1 ms][DEBUG] START check_frida
[2025-08-21 11:37:31][352397456157662][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:37:31][352397456157662][316 ms][DEBUG] SU: done in 315 ms; outroot          1313     1 2299984   4512 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:37:31][352397456157662][316 ms][DEBUG] check_frida: running
[2025-08-21 11:37:31][352397456157662][316 ms][DEBUG] END   check_frida in 315 ms
[2025-08-21 11:37:31][352397456157662][316 ms][DEBUG] START check_scloud
[2025-08-21 11:37:31][352397456157662][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:37:31][352397456157662][613 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23507188 105332 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:37:31][352397456157662][613 ms][DEBUG] targetPkg: running
[2025-08-21 11:37:31][352397456157662][613 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:37:31][352397456157662][613 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:37:31][352397456157662][614 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDU2MTU3NjYyIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MEo2VkxWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMwMiJ9'" -e "main()" -q"
[2025-08-21 11:37:31][352397456157662][614 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:37:31][352397456157662][614 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDU2MTU3NjYyIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MEo2VkxWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMwMiJ9'" -e "main()" -q"
[2025-08-21 11:37:34][352397456157662][3425 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzk3NDU2MTU3NjYyIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MEo2VkxWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMwMiJ9"\r\n
[2025-08-21 11:37:36][352397456157662][5252 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b170d01-3802-4b67-b4cd-a7cb72ad2e6e","id":"QR_9b170d01-3802-4b67-b4cd-a7cb72ad2e6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:37:36][352397456157662][5253 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 11:37:36][352397456157662][5253 ms][DEBUG] END   runCmdUntilRes#1 in 4639 ms
[2025-08-21 11:37:36][352397456157662][5253 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:37:44][358762980804077][0 ms][INFO] === Request start ===
[2025-08-21 11:37:44][358762980804077][1 ms][DEBUG] START check_frida
[2025-08-21 11:37:44][358762980804077][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:37:44][358762980804077][305 ms][DEBUG] SU: done in 304 ms; outroot          1313     1 2299984   4524 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:37:44][358762980804077][305 ms][DEBUG] check_frida: running
[2025-08-21 11:37:44][358762980804077][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 11:37:44][358762980804077][305 ms][DEBUG] START check_scloud
[2025-08-21 11:37:44][358762980804077][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:37:45][358762980804077][602 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23507220 105876 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:37:45][358762980804077][602 ms][DEBUG] targetPkg: running
[2025-08-21 11:37:45][358762980804077][602 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:37:45][358762980804077][602 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:37:45][358762980804077][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NzYyOTgwODA0MDc3IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzIwQ0MzMkIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODg3In0='" -e "main()" -q"
[2025-08-21 11:37:45][358762980804077][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:37:45][358762980804077][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NzYyOTgwODA0MDc3IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzIwQ0MzMkIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODg3In0='" -e "main()" -q"
[2025-08-21 11:37:47][358762980804077][3413 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NzYyOTgwODA0MDc3IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzIwQ0MzMkIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODg3In0="\r\n
[2025-08-21 11:37:49][358762980804077][5272 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b839e9f7-a7e6-4e1a-b032-1c37b50a78d8","id":"QR_b839e9f7-a7e6-4e1a-b032-1c37b50a78d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:37:49][358762980804077][5273 ms][DEBUG] proc_open done in 4671 ms; code=0; res.len=3152
[2025-08-21 11:37:49][358762980804077][5273 ms][DEBUG] END   runCmdUntilRes#1 in 4671 ms
[2025-08-21 11:37:49][358762980804077][5273 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:38:06][350013882321622][0 ms][INFO] === Request start ===
[2025-08-21 11:38:06][350013882321622][1 ms][DEBUG] START check_frida
[2025-08-21 11:38:06][350013882321622][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:38:06][350013882321622][291 ms][DEBUG] SU: done in 290 ms; outroot          1313     1 2283564   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:38:06][350013882321622][291 ms][DEBUG] check_frida: running
[2025-08-21 11:38:06][350013882321622][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 11:38:06][350013882321622][291 ms][DEBUG] START check_internet
[2025-08-21 11:38:06][350013882321622][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:38:06][350013882321622][588 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.409/178.409/178.409/0.000 ms\n
[2025-08-21 11:38:06][350013882321622][588 ms][DEBUG] check_internet: online
[2025-08-21 11:38:06][350013882321622][588 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 11:38:06][350013882321622][588 ms][DEBUG] START check_scloud
[2025-08-21 11:38:06][350013882321622][588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:38:07][350013882321622][824 ms][DEBUG] SU: done in 236 ms; outu0_a118       7399 30745 23507252 106420 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:38:07][350013882321622][824 ms][DEBUG] targetPkg: running
[2025-08-21 11:38:07][350013882321622][824 ms][DEBUG] END   check_scloud in 237 ms
[2025-08-21 11:38:07][350013882321622][824 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:38:07][350013882321622][824 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgyMzIxNjIyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMkIxOUdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg4OSJ9'" -e "main()" -q"
[2025-08-21 11:38:07][350013882321622][825 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:38:07][350013882321622][825 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgyMzIxNjIyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMkIxOUdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg4OSJ9'" -e "main()" -q"
[2025-08-21 11:38:09][350013882321622][3587 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODgyMzIxNjIyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMkIxOUdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg4OSJ9"\r\n
[2025-08-21 11:38:11][350013882321622][5633 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6cfb9f6b-a225-4b1b-837a-fc80f38341be","id":"QR_6cfb9f6b-a225-4b1b-837a-fc80f38341be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:38:11][350013882321622][5633 ms][DEBUG] proc_open done in 4809 ms; code=0; res.len=3152
[2025-08-21 11:38:11][350013882321622][5633 ms][DEBUG] END   runCmdUntilRes#1 in 4809 ms
[2025-08-21 11:38:11][350013882321622][5633 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:38:20][351864717342269][0 ms][INFO] === Request start ===
[2025-08-21 11:38:20][351864717342269][1 ms][DEBUG] START check_frida
[2025-08-21 11:38:20][351864717342269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:38:21][351864717342269][299 ms][DEBUG] SU: done in 298 ms; outroot          1313     1 2299984   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:38:21][351864717342269][299 ms][DEBUG] check_frida: running
[2025-08-21 11:38:21][351864717342269][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 11:38:21][351864717342269][299 ms][DEBUG] START check_internet
[2025-08-21 11:38:21][351864717342269][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:38:21][351864717342269][643 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.952/234.952/234.952/0.000 ms\n
[2025-08-21 11:38:21][351864717342269][643 ms][DEBUG] check_internet: online
[2025-08-21 11:38:21][351864717342269][643 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 11:38:21][351864717342269][643 ms][DEBUG] START check_scloud
[2025-08-21 11:38:21][351864717342269][643 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:38:21][351864717342269][940 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23507284 106968 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:38:21][351864717342269][940 ms][DEBUG] targetPkg: running
[2025-08-21 11:38:21][351864717342269][940 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:38:21][351864717342269][940 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:38:21][351864717342269][940 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODY0NzE3MzQyMjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDZMVjNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDI4In0='" -e "main()" -q"
[2025-08-21 11:38:21][351864717342269][940 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:38:21][351864717342269][940 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODY0NzE3MzQyMjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDZMVjNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDI4In0='" -e "main()" -q"
[2025-08-21 11:38:24][351864717342269][3736 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODY0NzE3MzQyMjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDZMVjNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDI4In0="\r\n
[2025-08-21 11:38:29][351864717342269][8719 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a3315ba-fa94-4f90-b866-7fdf63784429","id":"QR_3a3315ba-fa94-4f90-b866-7fdf63784429","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:38:29][351864717342269][8720 ms][DEBUG] proc_open done in 7780 ms; code=0; res.len=3152
[2025-08-21 11:38:29][351864717342269][8720 ms][DEBUG] END   runCmdUntilRes#1 in 7780 ms
[2025-08-21 11:38:29][351864717342269][8720 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:39:09][353418793729432][1 ms][INFO] === Request start ===
[2025-08-21 11:39:09][353418793729432][2 ms][DEBUG] START check_frida
[2025-08-21 11:39:09][353418793729432][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:39:10][353418793729432][293 ms][DEBUG] SU: done in 292 ms; outroot          1313     1 2283564   4528 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:39:10][353418793729432][293 ms][DEBUG] check_frida: running
[2025-08-21 11:39:10][353418793729432][294 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 11:39:10][353418793729432][294 ms][DEBUG] START check_scloud
[2025-08-21 11:39:10][353418793729432][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:39:10][353418793729432][589 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23507316 107528 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:39:10][353418793729432][589 ms][DEBUG] targetPkg: running
[2025-08-21 11:39:10][353418793729432][589 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 11:39:10][353418793729432][589 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:39:10][353418793729432][590 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDE4NzkzNzI5NDMyIiwibW9kZWwiOiJTTS1BNTM2MCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QzNDhSWlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCUkkiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwNSJ9'" -e "main()" -q"
[2025-08-21 11:39:10][353418793729432][590 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:39:10][353418793729432][590 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDE4NzkzNzI5NDMyIiwibW9kZWwiOiJTTS1BNTM2MCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QzNDhSWlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCUkkiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwNSJ9'" -e "main()" -q"
[2025-08-21 11:39:13][353418793729432][3369 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDE4NzkzNzI5NDMyIiwibW9kZWwiOiJTTS1BNTM2MCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QzNDhSWlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCUkkiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwNSJ9"\r\n
[2025-08-21 11:39:15][353418793729432][5759 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_550125d1-a8e9-4f36-868f-448b0026f263","id":"QR_550125d1-a8e9-4f36-868f-448b0026f263","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:39:15][353418793729432][5759 ms][DEBUG] proc_open done in 5169 ms; code=0; res.len=3152
[2025-08-21 11:39:15][353418793729432][5759 ms][DEBUG] END   runCmdUntilRes#1 in 5170 ms
[2025-08-21 11:39:15][353418793729432][5759 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:39:22][350011603607014][0 ms][INFO] === Request start ===
[2025-08-21 11:39:22][350011603607014][1 ms][DEBUG] START check_frida
[2025-08-21 11:39:22][350011603607014][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:39:22][350011603607014][256 ms][DEBUG] SU: done in 255 ms; outroot          1313     1 2299984   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:39:22][350011603607014][256 ms][DEBUG] check_frida: running
[2025-08-21 11:39:22][350011603607014][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 11:39:22][350011603607014][256 ms][DEBUG] START check_scloud
[2025-08-21 11:39:22][350011603607014][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:39:22][350011603607014][537 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23507348 108076 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:39:22][350011603607014][537 ms][DEBUG] targetPkg: running
[2025-08-21 11:39:22][350011603607014][537 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 11:39:22][350011603607014][537 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:39:22][350011603607014][537 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDExNjAzNjA3MDE0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMU1MQjdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY5OCJ9'" -e "main()" -q"
[2025-08-21 11:39:22][350011603607014][537 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:39:22][350011603607014][537 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDExNjAzNjA3MDE0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMU1MQjdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY5OCJ9'" -e "main()" -q"
[2025-08-21 11:39:25][350011603607014][3349 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDExNjAzNjA3MDE0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMU1MQjdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY5OCJ9"\r\n
[2025-08-21 11:39:27][350011603607014][5098 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_055b102a-4462-46c5-8fdb-9ba1d3686f98","id":"QR_055b102a-4462-46c5-8fdb-9ba1d3686f98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:39:27][350011603607014][5099 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-21 11:39:27][350011603607014][5099 ms][DEBUG] END   runCmdUntilRes#1 in 4561 ms
[2025-08-21 11:39:27][350011603607014][5099 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:44:07][352590523896250][1 ms][INFO] === Request start ===
[2025-08-21 11:44:07][352590523896250][1 ms][DEBUG] START check_frida
[2025-08-21 11:44:07][352590523896250][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:44:08][352590523896250][301 ms][DEBUG] SU: done in 300 ms; outroot          1313     1 2282552   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:44:08][352590523896250][301 ms][DEBUG] check_frida: running
[2025-08-21 11:44:08][352590523896250][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 11:44:08][352590523896250][302 ms][DEBUG] START check_internet
[2025-08-21 11:44:08][352590523896250][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:44:08][352590523896250][817 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.823/202.823/202.823/0.000 ms\n
[2025-08-21 11:44:08][352590523896250][817 ms][DEBUG] check_internet: online
[2025-08-21 11:44:08][352590523896250][817 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 11:44:08][352590523896250][817 ms][DEBUG] START check_scloud
[2025-08-21 11:44:08][352590523896250][817 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:44:08][352590523896250][1035 ms][DEBUG] SU: done in 218 ms; outu0_a118       7399 30745 23507380 108872 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:44:08][352590523896250][1035 ms][DEBUG] targetPkg: running
[2025-08-21 11:44:08][352590523896250][1035 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 11:44:08][352590523896250][1035 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:44:08][352590523896250][1035 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTkwNTIzODk2MjUwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MTNBQVdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMSJ9'" -e "main()" -q"
[2025-08-21 11:44:08][352590523896250][1035 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:44:08][352590523896250][1035 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTkwNTIzODk2MjUwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MTNBQVdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMSJ9'" -e "main()" -q"
[2025-08-21 11:44:11][352590523896250][3863 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTkwNTIzODk2MjUwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MTNBQVdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEwMSJ9"\r\n
[2025-08-21 11:44:13][352590523896250][6112 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4db0ab8-863f-4537-be14-de9598f1cb56","id":"QR_e4db0ab8-863f-4537-be14-de9598f1cb56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:44:13][352590523896250][6113 ms][DEBUG] proc_open done in 5077 ms; code=0; res.len=3152
[2025-08-21 11:44:13][352590523896250][6113 ms][DEBUG] END   runCmdUntilRes#1 in 5077 ms
[2025-08-21 11:44:13][352590523896250][6113 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:45:14][356616530890196][0 ms][INFO] === Request start ===
[2025-08-21 11:45:14][356616530890196][1 ms][DEBUG] START check_frida
[2025-08-21 11:45:14][356616530890196][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:45:14][356616530890196][289 ms][DEBUG] SU: done in 288 ms; outroot          1313     1 2283564   4524 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:45:14][356616530890196][289 ms][DEBUG] check_frida: running
[2025-08-21 11:45:14][356616530890196][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 11:45:14][356616530890196][289 ms][DEBUG] START check_scloud
[2025-08-21 11:45:14][356616530890196][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:45:14][356616530890196][584 ms][DEBUG] SU: done in 295 ms; outu0_a118       7399 30745 23507412 109424 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:45:14][356616530890196][584 ms][DEBUG] targetPkg: running
[2025-08-21 11:45:14][356616530890196][584 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 11:45:14][356616530890196][584 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:45:14][356616530890196][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjE2NTMwODkwMTk2IiwibW9kZWwiOiJTTS1FMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Wlk0MDRXRzVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ1NSJ9'" -e "main()" -q"
[2025-08-21 11:45:14][356616530890196][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:45:14][356616530890196][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjE2NTMwODkwMTk2IiwibW9kZWwiOiJTTS1FMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Wlk0MDRXRzVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ1NSJ9'" -e "main()" -q"
[2025-08-21 11:45:17][356616530890196][3411 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NjE2NTMwODkwMTk2IiwibW9kZWwiOiJTTS1FMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Wlk0MDRXRzVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ1NSJ9"\r\n
[2025-08-21 11:45:19][356616530890196][5598 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ee29189-7e12-4195-aa9d-30ce8c577940","id":"QR_2ee29189-7e12-4195-aa9d-30ce8c577940","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:45:19][356616530890196][5598 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 11:45:19][356616530890196][5598 ms][DEBUG] END   runCmdUntilRes#1 in 5014 ms
[2025-08-21 11:45:19][356616530890196][5598 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:45:34][351877472990783][1 ms][INFO] === Request start ===
[2025-08-21 11:45:34][351877472990783][2 ms][DEBUG] START check_frida
[2025-08-21 11:45:34][351877472990783][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:45:34][351877472990783][287 ms][DEBUG] SU: done in 286 ms; outroot          1313     1 2283564   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:45:34][351877472990783][287 ms][DEBUG] check_frida: running
[2025-08-21 11:45:34][351877472990783][287 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 11:45:34][351877472990783][287 ms][DEBUG] START check_scloud
[2025-08-21 11:45:34][351877472990783][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:45:34][351877472990783][584 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23507444 110008 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:45:34][351877472990783][584 ms][DEBUG] targetPkg: running
[2025-08-21 11:45:34][351877472990783][584 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:45:34][351877472990783][584 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:45:34][351877472990783][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDcyOTkwNzgzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MEhMN1haIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM5OSJ9'" -e "main()" -q"
[2025-08-21 11:45:34][351877472990783][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:45:34][351877472990783][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDcyOTkwNzgzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MEhMN1haIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM5OSJ9'" -e "main()" -q"
[2025-08-21 11:45:37][351877472990783][3396 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDcyOTkwNzgzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MEhMN1haIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM5OSJ9"\r\n
[2025-08-21 11:45:39][353718680820347][1 ms][INFO] === Request start ===
[2025-08-21 11:45:39][351877472990783][5208 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad0fbb98-3e42-46a3-8085-7ae17e0366fb","id":"QR_ad0fbb98-3e42-46a3-8085-7ae17e0366fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:45:39][351877472990783][5208 ms][DEBUG] proc_open done in 4624 ms; code=0; res.len=3152
[2025-08-21 11:45:39][351877472990783][5208 ms][DEBUG] END   runCmdUntilRes#1 in 4624 ms
[2025-08-21 11:45:39][351877472990783][5208 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:45:40][353718680820347][1004 ms][DEBUG] START check_frida
[2025-08-21 11:45:40][353718680820347][1004 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:45:40][353718680820347][1285 ms][DEBUG] SU: done in 282 ms; outroot          1313     1 2299984   4512 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:45:40][353718680820347][1285 ms][DEBUG] check_frida: running
[2025-08-21 11:45:40][353718680820347][1286 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 11:45:40][353718680820347][1286 ms][DEBUG] START check_scloud
[2025-08-21 11:45:40][353718680820347][1286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:45:40][353718680820347][1582 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23507476 110556 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:45:40][353718680820347][1582 ms][DEBUG] targetPkg: running
[2025-08-21 11:45:40][353718680820347][1582 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 11:45:40][353718680820347][1582 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:45:40][353718680820347][1582 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzE4NjgwODIwMzQ3IiwibW9kZWwiOiJTTS1HOTkwQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1JDMUc2V1pUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk2MiJ9'" -e "main()" -q"
[2025-08-21 11:45:40][353718680820347][1582 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:45:40][353718680820347][1582 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzE4NjgwODIwMzQ3IiwibW9kZWwiOiJTTS1HOTkwQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1JDMUc2V1pUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk2MiJ9'" -e "main()" -q"
[2025-08-21 11:45:43][353718680820347][4393 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNzE4NjgwODIwMzQ3IiwibW9kZWwiOiJTTS1HOTkwQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1JDMUc2V1pUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk2MiJ9"\r\n
[2025-08-21 11:45:45][353718680820347][6143 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51240521-b670-474d-9637-bd014878b69f","id":"QR_51240521-b670-474d-9637-bd014878b69f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:45:45][353718680820347][6143 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-21 11:45:45][353718680820347][6144 ms][DEBUG] END   runCmdUntilRes#1 in 4562 ms
[2025-08-21 11:45:45][353718680820347][6144 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:47:11][350938289344951][0 ms][INFO] === Request start ===
[2025-08-21 11:47:11][350938289344951][1 ms][DEBUG] START check_frida
[2025-08-21 11:47:11][350938289344951][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:47:12][350938289344951][307 ms][DEBUG] SU: done in 306 ms; outroot          1313     1 2283564   4524 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:47:12][350938289344951][307 ms][DEBUG] check_frida: running
[2025-08-21 11:47:12][350938289344951][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 11:47:12][350938289344951][307 ms][DEBUG] START check_scloud
[2025-08-21 11:47:12][350938289344951][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:47:12][350938289344951][604 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23507508 104132 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:47:12][350938289344951][604 ms][DEBUG] targetPkg: running
[2025-08-21 11:47:12][350938289344951][604 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:47:12][350938289344951][604 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:47:12][350938289344951][604 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg5MzQ0OTUxIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFBFUDlZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI4MyJ9'" -e "main()" -q"
[2025-08-21 11:47:12][350938289344951][604 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:47:12][350938289344951][604 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg5MzQ0OTUxIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFBFUDlZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI4MyJ9'" -e "main()" -q"
[2025-08-21 11:47:15][350938289344951][3400 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg5MzQ0OTUxIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFBFUDlZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI4MyJ9"\r\n
[2025-08-21 11:47:17][350938289344951][5353 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4074ac5f-9cdc-4309-bf99-e7d2bb989562","id":"QR_4074ac5f-9cdc-4309-bf99-e7d2bb989562","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:47:17][350938289344951][5353 ms][DEBUG] proc_open done in 4749 ms; code=0; res.len=3152
[2025-08-21 11:47:17][350938289344951][5353 ms][DEBUG] END   runCmdUntilRes#1 in 4749 ms
[2025-08-21 11:47:17][350938289344951][5353 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:47:23][352600223009037][0 ms][INFO] === Request start ===
[2025-08-21 11:47:23][352600223009037][1 ms][DEBUG] START check_frida
[2025-08-21 11:47:23][352600223009037][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:47:23][352600223009037][302 ms][DEBUG] SU: done in 301 ms; outroot          1313     1 2299984   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:47:23][352600223009037][302 ms][DEBUG] check_frida: running
[2025-08-21 11:47:23][352600223009037][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 11:47:23][352600223009037][302 ms][DEBUG] START check_scloud
[2025-08-21 11:47:23][352600223009037][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:47:23][352600223009037][583 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23507540 104736 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:47:23][352600223009037][583 ms][DEBUG] targetPkg: running
[2025-08-21 11:47:23][352600223009037][583 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 11:47:23][352600223009037][584 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:47:23][352600223009037][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjIzMDA5MDM3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MDZRODhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjYzMCJ9'" -e "main()" -q"
[2025-08-21 11:47:23][352600223009037][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:47:23][352600223009037][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjIzMDA5MDM3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MDZRODhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjYzMCJ9'" -e "main()" -q"
[2025-08-21 11:47:26][352600223009037][3395 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjAwMjIzMDA5MDM3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MDZRODhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjYzMCJ9"\r\n
[2025-08-21 11:47:28][352600223009037][5394 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4271097-4269-48d9-88f8-d4937ede34bf","id":"QR_d4271097-4269-48d9-88f8-d4937ede34bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:47:28][352600223009037][5395 ms][DEBUG] proc_open done in 4811 ms; code=0; res.len=3152
[2025-08-21 11:47:28][352600223009037][5395 ms][DEBUG] END   runCmdUntilRes#1 in 4811 ms
[2025-08-21 11:47:28][352600223009037][5395 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:48:05][350042737082501][1 ms][INFO] === Request start ===
[2025-08-21 11:48:05][350042737082501][2 ms][DEBUG] START check_frida
[2025-08-21 11:48:05][350042737082501][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:48:05][350042737082501][244 ms][DEBUG] SU: done in 242 ms; outroot          1313     1 2283564   4520 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:48:05][350042737082501][244 ms][DEBUG] check_frida: running
[2025-08-21 11:48:05][350042737082501][244 ms][DEBUG] END   check_frida in 242 ms
[2025-08-21 11:48:05][350042737082501][244 ms][DEBUG] START check_internet
[2025-08-21 11:48:05][350042737082501][244 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:48:06][350042737082501][744 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.505/203.505/203.505/0.000 ms\n
[2025-08-21 11:48:06][350042737082501][744 ms][DEBUG] check_internet: online
[2025-08-21 11:48:06][350042737082501][744 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 11:48:06][350042737082501][744 ms][DEBUG] START check_scloud
[2025-08-21 11:48:06][350042737082501][744 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:48:06][350042737082501][1009 ms][DEBUG] SU: done in 266 ms; outu0_a118       7399 30745 23507572 105216 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:48:06][350042737082501][1009 ms][DEBUG] targetPkg: running
[2025-08-21 11:48:06][350042737082501][1009 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 11:48:06][350042737082501][1009 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:48:06][350042737082501][1010 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDQyNzM3MDgyNTAxIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjgxRzhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjAzNSJ9'" -e "main()" -q"
[2025-08-21 11:48:06][350042737082501][1010 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:48:06][350042737082501][1010 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDQyNzM3MDgyNTAxIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjgxRzhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjAzNSJ9'" -e "main()" -q"
[2025-08-21 11:48:09][350042737082501][3836 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDQyNzM3MDgyNTAxIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjgxRzhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjAzNSJ9"\r\n
[2025-08-21 11:48:11][350042737082501][5680 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7a46711-0bd6-455e-9219-860e81e63f99","id":"QR_b7a46711-0bd6-455e-9219-860e81e63f99","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:48:11][350042737082501][5680 ms][DEBUG] proc_open done in 4670 ms; code=0; res.len=3152
[2025-08-21 11:48:11][350042737082501][5680 ms][DEBUG] END   runCmdUntilRes#1 in 4670 ms
[2025-08-21 11:48:11][350042737082501][5680 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:48:17][351241483934423][0 ms][INFO] === Request start ===
[2025-08-21 11:48:17][351241483934423][1 ms][DEBUG] START check_frida
[2025-08-21 11:48:17][351241483934423][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:48:17][351241483934423][303 ms][DEBUG] SU: done in 302 ms; outroot          1313     1 2299984   4524 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:48:17][351241483934423][303 ms][DEBUG] check_frida: running
[2025-08-21 11:48:17][351241483934423][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 11:48:17][351241483934423][303 ms][DEBUG] START check_internet
[2025-08-21 11:48:17][351241483934423][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:48:17][351241483934423][600 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.614/196.614/196.614/0.000 ms\n
[2025-08-21 11:48:17][351241483934423][600 ms][DEBUG] check_internet: online
[2025-08-21 11:48:17][351241483934423][600 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 11:48:17][351241483934423][600 ms][DEBUG] START check_scloud
[2025-08-21 11:48:17][351241483934423][600 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:48:18][351241483934423][897 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23507604 105776 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:48:18][351241483934423][897 ms][DEBUG] targetPkg: running
[2025-08-21 11:48:18][351241483934423][897 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 11:48:18][351241483934423][897 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:48:18][351241483934423][897 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQxNDgzOTM0NDIzIiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MUQxMTdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ0OSJ9'" -e "main()" -q"
[2025-08-21 11:48:18][351241483934423][897 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:48:18][351241483934423][897 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQxNDgzOTM0NDIzIiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MUQxMTdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ0OSJ9'" -e "main()" -q"
[2025-08-21 11:48:20][351241483934423][3693 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQxNDgzOTM0NDIzIiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MUQxMTdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ0OSJ9"\r\n
[2025-08-21 11:48:23][351241483934423][6130 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f810cd5b-d716-48ec-8be5-95e9ef8aef81","id":"QR_f810cd5b-d716-48ec-8be5-95e9ef8aef81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:48:23][351241483934423][6130 ms][DEBUG] proc_open done in 5233 ms; code=0; res.len=3152
[2025-08-21 11:48:23][351241483934423][6130 ms][DEBUG] END   runCmdUntilRes#1 in 5233 ms
[2025-08-21 11:48:23][351241483934423][6130 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:51:04][356414811959983][1 ms][INFO] === Request start ===
[2025-08-21 11:51:04][356414811959983][2 ms][DEBUG] START check_frida
[2025-08-21 11:51:04][356414811959983][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:51:04][356414811959983][306 ms][DEBUG] SU: done in 305 ms; out
[2025-08-21 11:51:04][356414811959983][307 ms][WARN] check_frida: not running, restarting
[2025-08-21 11:51:04][356414811959983][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 11:51:05][356414811959983][431 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 11:51:05][356414811959983][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 11:51:05][356414811959983][509 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 11:51:07][356414811959983][2524 ms][DEBUG] END   check_frida in 2523 ms
[2025-08-21 11:51:07][356414811959983][2525 ms][DEBUG] START check_scloud
[2025-08-21 11:51:07][356414811959983][2525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:51:07][356414811959983][2821 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23507636 106648 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:51:07][356414811959983][2821 ms][DEBUG] targetPkg: running
[2025-08-21 11:51:07][356414811959983][2821 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:51:07][356414811959983][2821 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:51:07][356414811959983][2821 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODExOTU5OTgzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MUo5VkxKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc3NiJ9'" -e "main()" -q"
[2025-08-21 11:51:07][356414811959983][2821 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:51:07][356414811959983][2821 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODExOTU5OTgzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MUo5VkxKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc3NiJ9'" -e "main()" -q"
[2025-08-21 11:51:11][356414811959983][7086 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE0ODExOTU5OTgzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MUo5VkxKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc3NiJ9"\r\n
[2025-08-21 11:51:14][356414811959983][9492 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab320d45-c9c0-457f-bdd4-f367955ff94b","id":"QR_ab320d45-c9c0-457f-bdd4-f367955ff94b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:51:14][356414811959983][9492 ms][DEBUG] proc_open done in 6670 ms; code=0; res.len=3152
[2025-08-21 11:51:14][356414811959983][9492 ms][DEBUG] END   runCmdUntilRes#1 in 6670 ms
[2025-08-21 11:51:14][356414811959983][9492 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:53:06][351240644182096][1 ms][INFO] === Request start ===
[2025-08-21 11:53:06][351240644182096][2 ms][DEBUG] START check_frida
[2025-08-21 11:53:06][351240644182096][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:53:06][351240644182096][243 ms][DEBUG] SU: done in 242 ms; outroot          4632     1 2332716  49944 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:53:06][351240644182096][244 ms][DEBUG] check_frida: running
[2025-08-21 11:53:06][351240644182096][244 ms][DEBUG] END   check_frida in 242 ms
[2025-08-21 11:53:06][351240644182096][244 ms][DEBUG] START check_scloud
[2025-08-21 11:53:06][351240644182096][244 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:53:07][351240644182096][540 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23507668 107472 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:53:07][351240644182096][540 ms][DEBUG] targetPkg: running
[2025-08-21 11:53:07][351240644182096][540 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 11:53:07][351240644182096][540 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:53:07][351240644182096][540 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQ0MTgyMDk2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDlUVDZFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAxOSJ9'" -e "main()" -q"
[2025-08-21 11:53:07][351240644182096][540 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:53:07][351240644182096][540 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQ0MTgyMDk2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDlUVDZFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAxOSJ9'" -e "main()" -q"
[2025-08-21 11:53:09][351240644182096][3383 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQ0MTgyMDk2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDlUVDZFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAxOSJ9"\r\n
[2025-08-21 11:53:12][351240644182096][5554 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50e3c352-a844-4099-9f49-b075d16e49c4","id":"QR_50e3c352-a844-4099-9f49-b075d16e49c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:53:12][351240644182096][5554 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 11:53:12][351240644182096][5554 ms][DEBUG] END   runCmdUntilRes#1 in 5014 ms
[2025-08-21 11:53:12][351240644182096][5554 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:53:19][357959101795769][0 ms][INFO] === Request start ===
[2025-08-21 11:53:19][357959101795769][1 ms][DEBUG] START check_frida
[2025-08-21 11:53:19][357959101795769][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:53:19][357959101795769][271 ms][DEBUG] SU: done in 270 ms; outroot          4632     1 2349136  49992 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:53:19][357959101795769][271 ms][DEBUG] check_frida: running
[2025-08-21 11:53:19][357959101795769][271 ms][DEBUG] END   check_frida in 270 ms
[2025-08-21 11:53:19][357959101795769][271 ms][DEBUG] START check_scloud
[2025-08-21 11:53:19][357959101795769][271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:53:20][357959101795769][584 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23507700 107796 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:53:20][357959101795769][584 ms][DEBUG] targetPkg: running
[2025-08-21 11:53:20][357959101795769][584 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 11:53:20][357959101795769][584 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:53:20][357959101795769][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTU5MTAxNzk1NzY5IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZV0IwNkxDSFoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTU1In0='" -e "main()" -q"
[2025-08-21 11:53:20][357959101795769][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:53:20][357959101795769][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTU5MTAxNzk1NzY5IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZV0IwNkxDSFoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTU1In0='" -e "main()" -q"
[2025-08-21 11:53:23][357959101795769][3411 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTU5MTAxNzk1NzY5IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZV0IwNkxDSFoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTU1In0="\r\n
[2025-08-21 11:53:24][357959101795769][5223 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_530bbce7-6067-4d27-bee6-9044f8b70032","id":"QR_530bbce7-6067-4d27-bee6-9044f8b70032","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:53:24][357959101795769][5224 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 11:53:24][357959101795769][5224 ms][DEBUG] END   runCmdUntilRes#1 in 4639 ms
[2025-08-21 11:53:24][357959101795769][5224 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:54:08][350545461097404][0 ms][INFO] === Request start ===
[2025-08-21 11:54:08][350545461097404][0 ms][DEBUG] START check_frida
[2025-08-21 11:54:08][350545461097404][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:54:08][350545461097404][282 ms][DEBUG] SU: done in 282 ms; outroot          4632     1 2332716  50004 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:54:08][350545461097404][282 ms][DEBUG] check_frida: running
[2025-08-21 11:54:08][350545461097404][282 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 11:54:08][350545461097404][282 ms][DEBUG] START check_internet
[2025-08-21 11:54:08][350545461097404][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:54:08][350545461097404][767 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.115/202.115/202.115/0.000 ms\n
[2025-08-21 11:54:08][350545461097404][767 ms][DEBUG] check_internet: online
[2025-08-21 11:54:08][350545461097404][767 ms][DEBUG] END   check_internet in 485 ms
[2025-08-21 11:54:08][350545461097404][767 ms][DEBUG] START check_scloud
[2025-08-21 11:54:08][350545461097404][767 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:54:09][350545461097404][1016 ms][DEBUG] SU: done in 249 ms; outu0_a118       7399 30745 23507732 107968 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:54:09][350545461097404][1016 ms][DEBUG] targetPkg: running
[2025-08-21 11:54:09][350545461097404][1016 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 11:54:09][350545461097404][1016 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:54:09][350545461097404][1016 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYxMDk3NDA0IiwibW9kZWwiOiJTTS1UODcwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTkMwS0pYNkYiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjkxIn0='" -e "main()" -q"
[2025-08-21 11:54:09][350545461097404][1016 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:54:09][350545461097404][1016 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYxMDk3NDA0IiwibW9kZWwiOiJTTS1UODcwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTkMwS0pYNkYiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjkxIn0='" -e "main()" -q"
[2025-08-21 11:54:11][350545461097404][3891 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTQ1NDYxMDk3NDA0IiwibW9kZWwiOiJTTS1UODcwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTkMwS0pYNkYiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjkxIn0="\r\n
[2025-08-21 11:54:14][350545461097404][6374 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a5f125c-1305-4b15-ac7e-0681555d551e","id":"QR_3a5f125c-1305-4b15-ac7e-0681555d551e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:54:14][350545461097404][6375 ms][DEBUG] proc_open done in 5358 ms; code=0; res.len=3152
[2025-08-21 11:54:14][350545461097404][6375 ms][DEBUG] END   runCmdUntilRes#1 in 5358 ms
[2025-08-21 11:54:14][350545461097404][6375 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:55:07][356356732736513][1 ms][INFO] === Request start ===
[2025-08-21 11:55:07][356356732736513][2 ms][DEBUG] START check_frida
[2025-08-21 11:55:07][356356732736513][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:55:08][356356732736513][298 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716  50052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:55:08][356356732736513][298 ms][DEBUG] check_frida: running
[2025-08-21 11:55:08][356356732736513][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 11:55:08][356356732736513][298 ms][DEBUG] START check_scloud
[2025-08-21 11:55:08][356356732736513][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:55:08][356356732736513][579 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23507764 108284 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:55:08][356356732736513][579 ms][DEBUG] targetPkg: running
[2025-08-21 11:55:08][356356732736513][579 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 11:55:08][356356732736513][579 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:55:08][356356732736513][579 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzU2NzMyNzM2NTEzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q2MDNLUVFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI0MSJ9'" -e "main()" -q"
[2025-08-21 11:55:08][356356732736513][579 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:55:08][356356732736513][579 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzU2NzMyNzM2NTEzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q2MDNLUVFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI0MSJ9'" -e "main()" -q"
[2025-08-21 11:55:11][356356732736513][3422 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MzU2NzMyNzM2NTEzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q2MDNLUVFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI0MSJ9"\r\n
[2025-08-21 11:55:13][356356732736513][5172 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff54fbd2-c677-4ff6-a0a2-02098b985d09","id":"QR_ff54fbd2-c677-4ff6-a0a2-02098b985d09","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:55:13][356356732736513][5172 ms][DEBUG] proc_open done in 4593 ms; code=0; res.len=3152
[2025-08-21 11:55:13][356356732736513][5172 ms][DEBUG] END   runCmdUntilRes#1 in 4593 ms
[2025-08-21 11:55:13][356356732736513][5172 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:57:07][353310801989894][0 ms][INFO] === Request start ===
[2025-08-21 11:57:07][353310801989894][1 ms][DEBUG] START check_frida
[2025-08-21 11:57:07][353310801989894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:57:07][353310801989894][237 ms][DEBUG] SU: done in 236 ms; outroot          4632     1 2332716  50036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:57:07][353310801989894][237 ms][DEBUG] check_frida: running
[2025-08-21 11:57:07][353310801989894][238 ms][DEBUG] END   check_frida in 237 ms
[2025-08-21 11:57:07][353310801989894][238 ms][DEBUG] START check_scloud
[2025-08-21 11:57:07][353310801989894][238 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:57:08][353310801989894][534 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23507796 109104 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:57:08][353310801989894][534 ms][DEBUG] targetPkg: running
[2025-08-21 11:57:08][353310801989894][534 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 11:57:08][353310801989894][534 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:57:08][353310801989894][534 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEwODAxOTg5ODk0IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MVhWVlZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzk0OCJ9'" -e "main()" -q"
[2025-08-21 11:57:08][353310801989894][534 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:57:08][353310801989894][534 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEwODAxOTg5ODk0IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MVhWVlZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzk0OCJ9'" -e "main()" -q"
[2025-08-21 11:57:10][353310801989894][3392 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEwODAxOTg5ODk0IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MVhWVlZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzk0OCJ9"\r\n
[2025-08-21 11:57:12][353310801989894][5423 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d25d186-4953-497d-9930-5b7f190869a3","id":"QR_5d25d186-4953-497d-9930-5b7f190869a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:57:12][353310801989894][5423 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 11:57:12][353310801989894][5423 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 11:57:12][353310801989894][5423 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:58:10][350823460203087][1 ms][INFO] === Request start ===
[2025-08-21 11:58:10][350823460203087][2 ms][DEBUG] START check_frida
[2025-08-21 11:58:10][350823460203087][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:58:10][350823460203087][242 ms][DEBUG] SU: done in 240 ms; outroot          4632     1 2332716  50040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:58:10][350823460203087][242 ms][DEBUG] check_frida: running
[2025-08-21 11:58:10][350823460203087][242 ms][DEBUG] END   check_frida in 240 ms
[2025-08-21 11:58:10][350823460203087][242 ms][DEBUG] START check_internet
[2025-08-21 11:58:10][350823460203087][242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 11:58:11][350823460203087][788 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.159/203.159/203.159/0.000 ms\n
[2025-08-21 11:58:11][350823460203087][788 ms][DEBUG] check_internet: online
[2025-08-21 11:58:11][350823460203087][788 ms][DEBUG] END   check_internet in 546 ms
[2025-08-21 11:58:11][350823460203087][788 ms][DEBUG] START check_scloud
[2025-08-21 11:58:11][350823460203087][788 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:58:11][350823460203087][1054 ms][DEBUG] SU: done in 266 ms; outu0_a118       7399 30745 23507828 103808 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:58:11][350823460203087][1054 ms][DEBUG] targetPkg: running
[2025-08-21 11:58:11][350823460203087][1054 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 11:58:11][350823460203087][1054 ms][DEBUG] rawBody.length=1160
[2025-08-21 11:58:11][350823460203087][1054 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODIzNDYwMjAzMDg3IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c1MDBaSjVIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTA0In0='" -e "main()" -q"
[2025-08-21 11:58:11][350823460203087][1054 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:58:11][350823460203087][1054 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODIzNDYwMjAzMDg3IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c1MDBaSjVIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTA0In0='" -e "main()" -q"
[2025-08-21 11:58:14][350823460203087][3897 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODIzNDYwMjAzMDg3IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c1MDBaSjVIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTA0In0="\r\n
[2025-08-21 11:58:17][350823460203087][6896 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_965b4478-dfd1-40e4-b37e-4ede390e6cf7","id":"QR_965b4478-dfd1-40e4-b37e-4ede390e6cf7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:58:17][350823460203087][6896 ms][DEBUG] proc_open done in 5842 ms; code=0; res.len=3152
[2025-08-21 11:58:17][350823460203087][6896 ms][DEBUG] END   runCmdUntilRes#1 in 5842 ms
[2025-08-21 11:58:17][350823460203087][6896 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:59:07][357962509398608][0 ms][INFO] === Request start ===
[2025-08-21 11:59:07][357962509398608][1 ms][DEBUG] START check_frida
[2025-08-21 11:59:07][357962509398608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:59:07][357962509398608][295 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2332716  50040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:59:07][357962509398608][295 ms][DEBUG] check_frida: running
[2025-08-21 11:59:07][357962509398608][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 11:59:07][357962509398608][295 ms][DEBUG] START check_scloud
[2025-08-21 11:59:07][357962509398608][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:59:07][357962509398608][592 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23507860 104400 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:59:07][357962509398608][592 ms][DEBUG] targetPkg: running
[2025-08-21 11:59:07][357962509398608][592 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 11:59:07][357962509398608][592 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:59:07][357962509398608][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA5Mzk4NjA4IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFIwWlBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk5MiJ9'" -e "main()" -q"
[2025-08-21 11:59:07][357962509398608][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:59:07][357962509398608][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA5Mzk4NjA4IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFIwWlBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk5MiJ9'" -e "main()" -q"
[2025-08-21 11:59:10][357962509398608][3419 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTYyNTA5Mzk4NjA4IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFIwWlBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk5MiJ9"\r\n
[2025-08-21 11:59:12][357962509398608][5544 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7abc81a1-3f6b-431c-a2fe-6f82f28ad4f9","id":"QR_7abc81a1-3f6b-431c-a2fe-6f82f28ad4f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:59:12][357962509398608][5544 ms][DEBUG] proc_open done in 4952 ms; code=0; res.len=3152
[2025-08-21 11:59:12][357962509398608][5544 ms][DEBUG] END   runCmdUntilRes#1 in 4952 ms
[2025-08-21 11:59:12][357962509398608][5544 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 11:59:19][356729405185707][0 ms][INFO] === Request start ===
[2025-08-21 11:59:19][356729405185707][1 ms][DEBUG] START check_frida
[2025-08-21 11:59:19][356729405185707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 11:59:20][356729405185707][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2349136  50028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 11:59:20][356729405185707][290 ms][DEBUG] check_frida: running
[2025-08-21 11:59:20][356729405185707][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 11:59:20][356729405185707][290 ms][DEBUG] START check_scloud
[2025-08-21 11:59:20][356729405185707][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 11:59:20][356729405185707][587 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23507892 104960 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 11:59:20][356729405185707][587 ms][DEBUG] targetPkg: running
[2025-08-21 11:59:20][356729405185707][587 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 11:59:20][356729405185707][587 ms][DEBUG] rawBody.length=1161
[2025-08-21 11:59:20][356729405185707][587 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzI5NDA1MTg1NzA3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFRUQ1FZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMzOSJ9'" -e "main()" -q"
[2025-08-21 11:59:20][356729405185707][588 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 11:59:20][356729405185707][588 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzI5NDA1MTg1NzA3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFRUQ1FZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMzOSJ9'" -e "main()" -q"
[2025-08-21 11:59:23][356729405185707][3414 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NzI5NDA1MTg1NzA3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFRUQ1FZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMzOSJ9"\r\n
[2025-08-21 11:59:24][356729405185707][5101 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6896a16f-b045-4286-86b9-d7717b47cc21","id":"QR_6896a16f-b045-4286-86b9-d7717b47cc21","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 11:59:24][356729405185707][5102 ms][DEBUG] proc_open done in 4514 ms; code=0; res.len=3152
[2025-08-21 11:59:24][356729405185707][5102 ms][DEBUG] END   runCmdUntilRes#1 in 4514 ms
[2025-08-21 11:59:24][356729405185707][5102 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:00:10][357450475728131][0 ms][INFO] === Request start ===
[2025-08-21 12:00:10][357450475728131][1 ms][DEBUG] START check_frida
[2025-08-21 12:00:10][357450475728131][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:00:10][357450475728131][266 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2332716  50048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:00:10][357450475728131][267 ms][DEBUG] check_frida: running
[2025-08-21 12:00:10][357450475728131][267 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 12:00:10][357450475728131][267 ms][DEBUG] START check_internet
[2025-08-21 12:00:10][357450475728131][267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:00:11][357450475728131][751 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.538/203.538/203.538/0.000 ms\n
[2025-08-21 12:00:11][357450475728131][751 ms][DEBUG] check_internet: online
[2025-08-21 12:00:11][357450475728131][751 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 12:00:11][357450475728131][751 ms][DEBUG] START check_scloud
[2025-08-21 12:00:11][357450475728131][751 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:00:11][357450475728131][1032 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23507924 105524 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:00:11][357450475728131][1032 ms][DEBUG] targetPkg: running
[2025-08-21 12:00:11][357450475728131][1032 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:00:11][357450475728131][1032 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:00:11][357450475728131][1032 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDc1NzI4MTMxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MDUwQk5KIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTcxMCJ9'" -e "main()" -q"
[2025-08-21 12:00:11][357450475728131][1032 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:00:11][357450475728131][1032 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDc1NzI4MTMxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MDUwQk5KIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTcxMCJ9'" -e "main()" -q"
[2025-08-21 12:00:14][357450475728131][3859 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDUwNDc1NzI4MTMxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MDUwQk5KIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTcxMCJ9"\r\n
[2025-08-21 12:00:17][357450475728131][6452 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aacb5b3f-4f08-439e-a54d-e8adc520f2c7","id":"QR_aacb5b3f-4f08-439e-a54d-e8adc520f2c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:00:17][357450475728131][6452 ms][DEBUG] proc_open done in 5420 ms; code=0; res.len=3152
[2025-08-21 12:00:17][357450475728131][6452 ms][DEBUG] END   runCmdUntilRes#1 in 5421 ms
[2025-08-21 12:00:17][357450475728131][6452 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:00:58][350784349153390][1 ms][INFO] === Request start ===
[2025-08-21 12:00:58][350784349153390][2 ms][DEBUG] START check_frida
[2025-08-21 12:00:58][350784349153390][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:00:59][350784349153390][295 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2332716  50048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:00:59][350784349153390][295 ms][DEBUG] check_frida: running
[2025-08-21 12:00:59][350784349153390][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 12:00:59][350784349153390][295 ms][DEBUG] START check_internet
[2025-08-21 12:00:59][350784349153390][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:00:59][350784349153390][670 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.645/241.645/241.645/0.000 ms\n
[2025-08-21 12:00:59][350784349153390][670 ms][DEBUG] check_internet: online
[2025-08-21 12:00:59][350784349153390][670 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 12:00:59][350784349153390][670 ms][DEBUG] START check_scloud
[2025-08-21 12:00:59][350784349153390][670 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:00:59][350784349153390][967 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23507956 106084 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:00:59][350784349153390][967 ms][DEBUG] targetPkg: running
[2025-08-21 12:00:59][350784349153390][967 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:00:59][350784349153390][967 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:00:59][350784349153390][967 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzg0MzQ5MTUzMzkwIiwibW9kZWwiOiJTTS1BMzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ0MDNZRExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTIyIn0='" -e "main()" -q"
[2025-08-21 12:00:59][350784349153390][967 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:00:59][350784349153390][967 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzg0MzQ5MTUzMzkwIiwibW9kZWwiOiJTTS1BMzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ0MDNZRExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTIyIn0='" -e "main()" -q"
[2025-08-21 12:01:02][350784349153390][3778 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzg0MzQ5MTUzMzkwIiwibW9kZWwiOiJTTS1BMzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ0MDNZRExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTIyIn0="\r\n
[2025-08-21 12:01:05][350784349153390][7200 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a7f6223-36ce-486f-ba13-b92841ab90eb","id":"QR_1a7f6223-36ce-486f-ba13-b92841ab90eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:01:05][350784349153390][7200 ms][DEBUG] proc_open done in 6233 ms; code=0; res.len=3152
[2025-08-21 12:01:05][350784349153390][7200 ms][DEBUG] END   runCmdUntilRes#1 in 6233 ms
[2025-08-21 12:01:05][350784349153390][7200 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:01:08][352060485145005][0 ms][INFO] === Request start ===
[2025-08-21 12:01:08][352060485145005][0 ms][DEBUG] START check_frida
[2025-08-21 12:01:08][352060485145005][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:01:08][352060485145005][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2349136  50052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:01:08][352060485145005][290 ms][DEBUG] check_frida: running
[2025-08-21 12:01:08][352060485145005][290 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 12:01:08][352060485145005][290 ms][DEBUG] START check_scloud
[2025-08-21 12:01:08][352060485145005][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:01:08][352060485145005][571 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23507988 106628 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:01:08][352060485145005][571 ms][DEBUG] targetPkg: running
[2025-08-21 12:01:08][352060485145005][571 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:01:08][352060485145005][571 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:01:08][352060485145005][571 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDYwNDg1MTQ1MDA1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMEhWUkxMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA3OCJ9'" -e "main()" -q"
[2025-08-21 12:01:08][352060485145005][571 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:01:08][352060485145005][571 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDYwNDg1MTQ1MDA1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMEhWUkxMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA3OCJ9'" -e "main()" -q"
[2025-08-21 12:01:11][352060485145005][3398 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDYwNDg1MTQ1MDA1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMEhWUkxMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA3OCJ9"\r\n
[2025-08-21 12:01:13][352060485145005][5226 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c96fd43d-aefd-48b4-a12d-062d59c9e105","id":"QR_c96fd43d-aefd-48b4-a12d-062d59c9e105","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:01:13][352060485145005][5226 ms][DEBUG] proc_open done in 4655 ms; code=0; res.len=3152
[2025-08-21 12:01:13][352060485145005][5226 ms][DEBUG] END   runCmdUntilRes#1 in 4655 ms
[2025-08-21 12:01:13][352060485145005][5226 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:01:15][355978844291946][0 ms][INFO] === Request start ===
[2025-08-21 12:01:15][355978844291946][0 ms][DEBUG] START check_frida
[2025-08-21 12:01:15][355978844291946][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:01:16][355978844291946][243 ms][DEBUG] SU: done in 243 ms; outroot          4632     1 2349136  50048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:01:16][355978844291946][243 ms][DEBUG] check_frida: running
[2025-08-21 12:01:16][355978844291946][243 ms][DEBUG] END   check_frida in 243 ms
[2025-08-21 12:01:16][355978844291946][243 ms][DEBUG] START check_scloud
[2025-08-21 12:01:16][355978844291946][243 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:01:16][355978844291946][539 ms][DEBUG] SU: done in 295 ms; outu0_a118       7399 30745 23508020 107184 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:01:16][355978844291946][539 ms][DEBUG] targetPkg: running
[2025-08-21 12:01:16][355978844291946][539 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 12:01:16][355978844291946][539 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:01:16][355978844291946][539 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1OTc4ODQ0MjkxOTQ2IiwibW9kZWwiOiJTTS1BMjM2ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNDhOWDBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzU0In0='" -e "main()" -q"
[2025-08-21 12:01:16][355978844291946][539 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:01:16][355978844291946][539 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1OTc4ODQ0MjkxOTQ2IiwibW9kZWwiOiJTTS1BMjM2ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNDhOWDBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzU0In0='" -e "main()" -q"
[2025-08-21 12:01:19][355978844291946][3366 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1OTc4ODQ0MjkxOTQ2IiwibW9kZWwiOiJTTS1BMjM2ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNDhOWDBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzU0In0="\r\n
[2025-08-21 12:01:22][355978844291946][6194 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86a00c5b-9c62-46a8-8782-3c691f42cc46","id":"QR_86a00c5b-9c62-46a8-8782-3c691f42cc46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:01:22][355978844291946][6194 ms][DEBUG] proc_open done in 5655 ms; code=0; res.len=3152
[2025-08-21 12:01:22][355978844291946][6194 ms][DEBUG] END   runCmdUntilRes#1 in 5655 ms
[2025-08-21 12:01:22][355978844291946][6194 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:04:09][350389912989194][1 ms][INFO] === Request start ===
[2025-08-21 12:04:09][350389912989194][2 ms][DEBUG] START check_frida
[2025-08-21 12:04:09][350389912989194][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:04:09][350389912989194][249 ms][DEBUG] SU: done in 248 ms; outroot          4632     1 2332716  50120 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:04:09][350389912989194][250 ms][DEBUG] check_frida: running
[2025-08-21 12:04:09][350389912989194][250 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 12:04:09][350389912989194][250 ms][DEBUG] START check_internet
[2025-08-21 12:04:09][350389912989194][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:04:09][350389912989194][577 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.375/227.375/227.375/0.000 ms\n
[2025-08-21 12:04:09][350389912989194][577 ms][DEBUG] check_internet: online
[2025-08-21 12:04:09][350389912989194][578 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 12:04:09][350389912989194][578 ms][DEBUG] START check_scloud
[2025-08-21 12:04:09][350389912989194][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:04:10][350389912989194][829 ms][DEBUG] SU: done in 251 ms; outu0_a118       7399 30745 23508052 107764 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:04:10][350389912989194][829 ms][DEBUG] targetPkg: running
[2025-08-21 12:04:10][350389912989194][829 ms][DEBUG] END   check_scloud in 252 ms
[2025-08-21 12:04:10][350389912989194][829 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:04:10][350389912989194][829 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzg5OTEyOTg5MTk0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0Mjc3MURFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTEzIn0='" -e "main()" -q"
[2025-08-21 12:04:10][350389912989194][829 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:04:10][350389912989194][829 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzg5OTEyOTg5MTk0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0Mjc3MURFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTEzIn0='" -e "main()" -q"
[2025-08-21 12:04:12][350389912989194][3686 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzg5OTEyOTg5MTk0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0Mjc3MURFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTEzIn0="\r\n
[2025-08-21 12:04:15][350389912989194][6482 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f4945c1-14dc-4e22-84a0-f9966ad914f0","id":"QR_9f4945c1-14dc-4e22-84a0-f9966ad914f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:04:15][350389912989194][6483 ms][DEBUG] proc_open done in 5653 ms; code=0; res.len=3152
[2025-08-21 12:04:15][350389912989194][6483 ms][DEBUG] END   runCmdUntilRes#1 in 5653 ms
[2025-08-21 12:04:15][350389912989194][6483 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:05:07][352600221503262][1 ms][INFO] === Request start ===
[2025-08-21 12:05:07][352600221503262][2 ms][DEBUG] START check_frida
[2025-08-21 12:05:07][352600221503262][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:05:07][352600221503262][263 ms][DEBUG] SU: done in 261 ms; outroot          4632     1 2332716  50088 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:05:07][352600221503262][263 ms][DEBUG] check_frida: running
[2025-08-21 12:05:07][352600221503262][263 ms][DEBUG] END   check_frida in 261 ms
[2025-08-21 12:05:07][352600221503262][263 ms][DEBUG] START check_scloud
[2025-08-21 12:05:07][352600221503262][263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:05:07][352600221503262][561 ms][DEBUG] SU: done in 299 ms; outu0_a118       7399 30745 23508084 108604 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:05:07][352600221503262][562 ms][DEBUG] targetPkg: running
[2025-08-21 12:05:07][352600221503262][562 ms][DEBUG] END   check_scloud in 299 ms
[2025-08-21 12:05:07][352600221503262][562 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:05:07][352600221503262][562 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjIxNTAzMjYyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEwwMFRYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNREEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTE3MiJ9'" -e "main()" -q"
[2025-08-21 12:05:07][352600221503262][562 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:05:07][352600221503262][562 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjIxNTAzMjYyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEwwMFRYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNREEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTE3MiJ9'" -e "main()" -q"
[2025-08-21 12:05:10][352600221503262][3387 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjAwMjIxNTAzMjYyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEwwMFRYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNREEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTE3MiJ9"\r\n
[2025-08-21 12:05:12][352600221503262][5511 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab93e7da-cc43-405e-bd65-911629ac31d4","id":"QR_ab93e7da-cc43-405e-bd65-911629ac31d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:05:12][352600221503262][5512 ms][DEBUG] proc_open done in 4950 ms; code=0; res.len=3152
[2025-08-21 12:05:12][352600221503262][5512 ms][DEBUG] END   runCmdUntilRes#1 in 4950 ms
[2025-08-21 12:05:12][352600221503262][5512 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:06:06][355195303595226][0 ms][INFO] === Request start ===
[2025-08-21 12:06:06][355195303595226][1 ms][DEBUG] START check_frida
[2025-08-21 12:06:06][355195303595226][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:06:06][355195303595226][285 ms][DEBUG] SU: done in 284 ms; outroot          4632     1 2331704  50028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:06:06][355195303595226][285 ms][DEBUG] check_frida: running
[2025-08-21 12:06:06][355195303595226][285 ms][DEBUG] END   check_frida in 284 ms
[2025-08-21 12:06:06][355195303595226][285 ms][DEBUG] START check_internet
[2025-08-21 12:06:06][355195303595226][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:06:07][355195303595226][738 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.455/207.455/207.455/0.000 ms\n
[2025-08-21 12:06:07][355195303595226][738 ms][DEBUG] check_internet: online
[2025-08-21 12:06:07][355195303595226][738 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 12:06:07][355195303595226][738 ms][DEBUG] START check_scloud
[2025-08-21 12:06:07][355195303595226][738 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:06:07][355195303595226][1019 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23508116 103572 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:06:07][355195303595226][1019 ms][DEBUG] targetPkg: running
[2025-08-21 12:06:07][355195303595226][1019 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:06:07][355195303595226][1019 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:06:07][355195303595226][1019 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTk1MzAzNTk1MjI2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlZRU0dWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk2NiJ9'" -e "main()" -q"
[2025-08-21 12:06:07][355195303595226][1019 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:06:07][355195303595226][1019 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTk1MzAzNTk1MjI2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlZRU0dWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk2NiJ9'" -e "main()" -q"
[2025-08-21 12:06:10][355195303595226][3862 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MTk1MzAzNTk1MjI2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlZRU0dWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk2NiJ9"\r\n
[2025-08-21 12:06:12][355195303595226][5955 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c091e142-81d8-4bd3-87b0-7502afa31819","id":"QR_c091e142-81d8-4bd3-87b0-7502afa31819","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:06:12][355195303595226][5955 ms][DEBUG] proc_open done in 4936 ms; code=0; res.len=3152
[2025-08-21 12:06:12][355195303595226][5955 ms][DEBUG] END   runCmdUntilRes#1 in 4936 ms
[2025-08-21 12:06:12][355195303595226][5955 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:07:06][356413252186999][0 ms][INFO] === Request start ===
[2025-08-21 12:07:06][356413252186999][1 ms][DEBUG] START check_frida
[2025-08-21 12:07:06][356413252186999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:07:07][356413252186999][265 ms][DEBUG] SU: done in 264 ms; outroot          4632     1 2332716  50056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:07:07][356413252186999][265 ms][DEBUG] check_frida: running
[2025-08-21 12:07:07][356413252186999][265 ms][DEBUG] END   check_frida in 264 ms
[2025-08-21 12:07:07][356413252186999][265 ms][DEBUG] START check_scloud
[2025-08-21 12:07:07][356413252186999][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:07:07][356413252186999][561 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23508148 103864 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:07:07][356413252186999][561 ms][DEBUG] targetPkg: running
[2025-08-21 12:07:07][356413252186999][562 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:07:07][356413252186999][562 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:07:07][356413252186999][562 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDEzMjUyMTg2OTk5IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJLOFcyMDUyQThEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU5MyJ9'" -e "main()" -q"
[2025-08-21 12:07:07][356413252186999][562 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:07:07][356413252186999][562 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDEzMjUyMTg2OTk5IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJLOFcyMDUyQThEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU5MyJ9'" -e "main()" -q"
[2025-08-21 12:07:10][356413252186999][3389 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDEzMjUyMTg2OTk5IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJLOFcyMDUyQThEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU5MyJ9"\r\n
[2025-08-21 12:07:12][356413252186999][5654 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71391139-ed78-4363-a20d-0bb5254e1128","id":"QR_71391139-ed78-4363-a20d-0bb5254e1128","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:07:12][356413252186999][5654 ms][DEBUG] proc_open done in 5092 ms; code=0; res.len=3152
[2025-08-21 12:07:12][356413252186999][5654 ms][DEBUG] END   runCmdUntilRes#1 in 5092 ms
[2025-08-21 12:07:12][356413252186999][5654 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:07:17][358141434744454][1 ms][INFO] === Request start ===
[2025-08-21 12:07:17][358141434744454][2 ms][DEBUG] START check_frida
[2025-08-21 12:07:17][358141434744454][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:07:17][358141434744454][276 ms][DEBUG] SU: done in 274 ms; outroot          4632     1 2349136  50072 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:07:17][358141434744454][276 ms][DEBUG] check_frida: running
[2025-08-21 12:07:17][358141434744454][276 ms][DEBUG] END   check_frida in 275 ms
[2025-08-21 12:07:17][358141434744454][276 ms][DEBUG] START check_scloud
[2025-08-21 12:07:17][358141434744454][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:07:18][358141434744454][573 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23508180 104416 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:07:18][358141434744454][573 ms][DEBUG] targetPkg: running
[2025-08-21 12:07:18][358141434744454][573 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:07:18][358141434744454][573 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:07:18][358141434744454][573 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTQxNDM0NzQ0NDU0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEhKTUxSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTMzMSJ9'" -e "main()" -q"
[2025-08-21 12:07:18][358141434744454][573 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:07:18][358141434744454][573 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTQxNDM0NzQ0NDU0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEhKTUxSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTMzMSJ9'" -e "main()" -q"
[2025-08-21 12:07:20][358141434744454][3416 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MTQxNDM0NzQ0NDU0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEhKTUxSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTMzMSJ9"\r\n
[2025-08-21 12:07:22][358141434744454][5150 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c351e02a-3946-43f1-b549-5e420cc723d8","id":"QR_c351e02a-3946-43f1-b549-5e420cc723d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:07:22][358141434744454][5150 ms][DEBUG] proc_open done in 4577 ms; code=0; res.len=3152
[2025-08-21 12:07:22][358141434744454][5150 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 12:07:22][358141434744454][5150 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:08:01][356430204392798][1 ms][INFO] === Request start ===
[2025-08-21 12:08:01][356430204392798][2 ms][DEBUG] START check_frida
[2025-08-21 12:08:01][356430204392798][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:08:01][356430204392798][302 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2332716  50116 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:08:01][356430204392798][302 ms][DEBUG] check_frida: running
[2025-08-21 12:08:01][356430204392798][302 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 12:08:01][356430204392798][302 ms][DEBUG] START check_internet
[2025-08-21 12:08:01][356430204392798][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:08:02][356430204392798][678 ms][DEBUG] SU: done in 376 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.243/258.243/258.243/0.000 ms\n
[2025-08-21 12:08:02][356430204392798][678 ms][DEBUG] check_internet: online
[2025-08-21 12:08:02][356430204392798][678 ms][DEBUG] END   check_internet in 376 ms
[2025-08-21 12:08:02][356430204392798][678 ms][DEBUG] START check_scloud
[2025-08-21 12:08:02][356430204392798][678 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:08:02][356430204392798][926 ms][DEBUG] SU: done in 248 ms; outu0_a118       7399 30745 23508212 104960 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:08:02][356430204392798][926 ms][DEBUG] targetPkg: running
[2025-08-21 12:08:02][356430204392798][926 ms][DEBUG] END   check_scloud in 248 ms
[2025-08-21 12:08:02][356430204392798][926 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:08:02][356430204392798][926 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDMwMjA0MzkyNzk4IiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMUVEU0JBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzE5In0='" -e "main()" -q"
[2025-08-21 12:08:02][356430204392798][926 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:08:02][356430204392798][926 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDMwMjA0MzkyNzk4IiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMUVEU0JBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzE5In0='" -e "main()" -q"
[2025-08-21 12:08:05][356430204392798][3738 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDMwMjA0MzkyNzk4IiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMUVEU0JBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzE5In0="
[2025-08-21 12:08:08][356430204392798][7409 ms][DEBUG] frida res:\r\nres:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96341cbd-85b0-4f7b-aee7-d7121b09af7e","id":"QR_96341cbd-85b0-4f7b-aee7-d7121b09af7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:08:08][356430204392798][7409 ms][DEBUG] proc_open done in 6483 ms; code=0; res.len=3152
[2025-08-21 12:08:08][356430204392798][7409 ms][DEBUG] END   runCmdUntilRes#1 in 6483 ms
[2025-08-21 12:08:08][356430204392798][7409 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:08:09][351069502358245][0 ms][INFO] === Request start ===
[2025-08-21 12:08:09][351069502358245][1 ms][DEBUG] START check_frida
[2025-08-21 12:08:09][351069502358245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:08:09][351069502358245][285 ms][DEBUG] SU: done in 284 ms; outroot          4632     1 2349136  50080 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:08:09][351069502358245][285 ms][DEBUG] check_frida: running
[2025-08-21 12:08:09][351069502358245][285 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 12:08:09][351069502358245][285 ms][DEBUG] START check_internet
[2025-08-21 12:08:09][351069502358245][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:08:10][351069502358245][582 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.940/175.940/175.940/0.000 ms\n
[2025-08-21 12:08:10][351069502358245][582 ms][DEBUG] check_internet: online
[2025-08-21 12:08:10][351069502358245][582 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 12:08:10][351069502358245][582 ms][DEBUG] START check_scloud
[2025-08-21 12:08:10][351069502358245][582 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:08:10][351069502358245][863 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23508244 105512 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:08:10][351069502358245][864 ms][DEBUG] targetPkg: running
[2025-08-21 12:08:10][351069502358245][864 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 12:08:10][351069502358245][864 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:08:10][351069502358245][864 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDY5NTAyMzU4MjQ1IiwibW9kZWwiOiJTTS1NNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1RDMDBIRUdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDcyIn0='" -e "main()" -q"
[2025-08-21 12:08:10][351069502358245][864 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:08:10][351069502358245][864 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDY5NTAyMzU4MjQ1IiwibW9kZWwiOiJTTS1NNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1RDMDBIRUdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDcyIn0='" -e "main()" -q"
[2025-08-21 12:08:13][351069502358245][3675 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDY5NTAyMzU4MjQ1IiwibW9kZWwiOiJTTS1NNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1RDMDBIRUdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDcyIn0="\r\n
[2025-08-21 12:08:16][351069502358245][6690 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ec6708a-84b7-4dc0-8eda-6aabc69140a6","id":"QR_5ec6708a-84b7-4dc0-8eda-6aabc69140a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:08:16][351069502358245][6690 ms][DEBUG] proc_open done in 5826 ms; code=0; res.len=3152
[2025-08-21 12:08:16][351069502358245][6690 ms][DEBUG] END   runCmdUntilRes#1 in 5826 ms
[2025-08-21 12:08:16][351069502358245][6690 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:09:07][355060830867003][1 ms][INFO] === Request start ===
[2025-08-21 12:09:07][355060830867003][1 ms][DEBUG] START check_frida
[2025-08-21 12:09:07][355060830867003][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:09:07][355060830867003][294 ms][DEBUG] SU: done in 292 ms; outroot          4632     1 2332716  50132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:09:07][355060830867003][294 ms][DEBUG] check_frida: running
[2025-08-21 12:09:07][355060830867003][294 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 12:09:07][355060830867003][294 ms][DEBUG] START check_scloud
[2025-08-21 12:09:07][355060830867003][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:09:07][355060830867003][591 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23508276 106064 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:09:07][355060830867003][591 ms][DEBUG] targetPkg: running
[2025-08-21 12:09:07][355060830867003][591 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:09:07][355060830867003][591 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:09:07][355060830867003][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDYwODMwODY3MDAzIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c5MVZGV0NQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk1NCJ9'" -e "main()" -q"
[2025-08-21 12:09:07][355060830867003][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:09:07][355060830867003][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDYwODMwODY3MDAzIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c5MVZGV0NQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk1NCJ9'" -e "main()" -q"
[2025-08-21 12:09:10][355060830867003][3418 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDYwODMwODY3MDAzIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c5MVZGV0NQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk1NCJ9"\r\n
[2025-08-21 12:09:12][355060830867003][5386 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e435ac12-6c3a-4ea9-8f95-45874902828c","id":"QR_e435ac12-6c3a-4ea9-8f95-45874902828c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:09:12][355060830867003][5386 ms][DEBUG] proc_open done in 4795 ms; code=0; res.len=3152
[2025-08-21 12:09:12][355060830867003][5386 ms][DEBUG] END   runCmdUntilRes#1 in 4795 ms
[2025-08-21 12:09:12][355060830867003][5386 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:09:18][350020273315352][0 ms][INFO] === Request start ===
[2025-08-21 12:09:18][350020273315352][1 ms][DEBUG] START check_frida
[2025-08-21 12:09:18][350020273315352][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:09:19][350020273315352][291 ms][DEBUG] SU: done in 290 ms; outroot          4632     1 2349136  50108 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:09:19][350020273315352][291 ms][DEBUG] check_frida: running
[2025-08-21 12:09:19][350020273315352][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 12:09:19][350020273315352][292 ms][DEBUG] START check_scloud
[2025-08-21 12:09:19][350020273315352][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:09:19][350020273315352][511 ms][DEBUG] SU: done in 219 ms; outu0_a118       7399 30745 23508308 106780 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:09:19][350020273315352][511 ms][DEBUG] targetPkg: running
[2025-08-21 12:09:19][350020273315352][511 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 12:09:19][350020273315352][511 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:09:19][350020273315352][511 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDIwMjczMzE1MzUyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMkpNOFZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgwMCJ9'" -e "main()" -q"
[2025-08-21 12:09:19][350020273315352][511 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:09:19][350020273315352][511 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDIwMjczMzE1MzUyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMkpNOFZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgwMCJ9'" -e "main()" -q"
[2025-08-21 12:09:22][350020273315352][3337 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDIwMjczMzE1MzUyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMkpNOFZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgwMCJ9"\r\n
[2025-08-21 12:09:24][350020273315352][5696 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb669778-0ebc-430e-b6c5-d3e2623059c1","id":"QR_fb669778-0ebc-430e-b6c5-d3e2623059c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:09:24][350020273315352][5696 ms][DEBUG] proc_open done in 5185 ms; code=0; res.len=3152
[2025-08-21 12:09:24][350020273315352][5696 ms][DEBUG] END   runCmdUntilRes#1 in 5185 ms
[2025-08-21 12:09:24][350020273315352][5696 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:09:26][350547661004057][0 ms][INFO] === Request start ===
[2025-08-21 12:09:26][350547661004057][1 ms][DEBUG] START check_frida
[2025-08-21 12:09:26][350547661004057][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:09:26][350547661004057][257 ms][DEBUG] SU: done in 256 ms; outroot          4632     1 2349136  50040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:09:26][350547661004057][257 ms][DEBUG] check_frida: running
[2025-08-21 12:09:26][350547661004057][257 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 12:09:26][350547661004057][257 ms][DEBUG] START check_scloud
[2025-08-21 12:09:26][350547661004057][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:09:27][350547661004057][554 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23508340 103204 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:09:27][350547661004057][554 ms][DEBUG] targetPkg: running
[2025-08-21 12:09:27][350547661004057][554 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:09:27][350547661004057][554 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:09:27][350547661004057][555 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ3NjYxMDA0MDU3IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFI4MEZMUlBGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTk1In0='" -e "main()" -q"
[2025-08-21 12:09:27][350547661004057][555 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:09:27][350547661004057][555 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ3NjYxMDA0MDU3IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFI4MEZMUlBGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTk1In0='" -e "main()" -q"
[2025-08-21 12:09:30][350547661004057][3365 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTQ3NjYxMDA0MDU3IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFI4MEZMUlBGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTk1In0="\r\n
[2025-08-21 12:09:30][352375458649068][1 ms][INFO] === Request start ===
[2025-08-21 12:09:33][350547661004057][6927 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7da4171f-b929-4c72-8112-dacb410d6f75","id":"QR_7da4171f-b929-4c72-8112-dacb410d6f75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:09:33][350547661004057][6928 ms][DEBUG] proc_open done in 6373 ms; code=0; res.len=3152
[2025-08-21 12:09:33][350547661004057][6928 ms][DEBUG] END   runCmdUntilRes#1 in 6373 ms
[2025-08-21 12:09:33][350547661004057][6928 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:09:33][352375458649068][3042 ms][DEBUG] START check_frida
[2025-08-21 12:09:33][352375458649068][3042 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:09:34][352375458649068][3323 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136  50052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:09:34][352375458649068][3323 ms][DEBUG] check_frida: running
[2025-08-21 12:09:34][352375458649068][3323 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 12:09:34][352375458649068][3323 ms][DEBUG] START check_scloud
[2025-08-21 12:09:34][352375458649068][3323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:09:34][352375458649068][3620 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23508372 103784 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:09:34][352375458649068][3620 ms][DEBUG] targetPkg: running
[2025-08-21 12:09:34][352375458649068][3620 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:09:34][352375458649068][3620 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:09:34][352375458649068][3620 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzc1NDU4NjQ5MDY4IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MEJLV1NBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk1OCJ9'" -e "main()" -q"
[2025-08-21 12:09:34][352375458649068][3620 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:09:34][352375458649068][3620 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzc1NDU4NjQ5MDY4IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MEJLV1NBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk1OCJ9'" -e "main()" -q"
[2025-08-21 12:09:37][352375458649068][6416 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzc1NDU4NjQ5MDY4IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MEJLV1NBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk1OCJ9"\r\n
[2025-08-21 12:09:39][352375458649068][8400 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_867b2344-30cb-4b44-8a18-366f21dc325f","id":"QR_867b2344-30cb-4b44-8a18-366f21dc325f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:09:39][352375458649068][8400 ms][DEBUG] proc_open done in 4780 ms; code=0; res.len=3152
[2025-08-21 12:09:39][352375458649068][8400 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-21 12:09:39][352375458649068][8400 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:12:09][353628422955345][1 ms][INFO] === Request start ===
[2025-08-21 12:12:09][353628422955345][2 ms][DEBUG] START check_frida
[2025-08-21 12:12:09][353628422955345][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:12:09][353628422955345][252 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2332716  50064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:12:09][353628422955345][252 ms][DEBUG] check_frida: running
[2025-08-21 12:12:09][353628422955345][252 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 12:12:09][353628422955345][252 ms][DEBUG] START check_internet
[2025-08-21 12:12:09][353628422955345][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:12:10][353628422955345][720 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.378/202.378/202.378/0.000 ms\n
[2025-08-21 12:12:10][353628422955345][720 ms][DEBUG] check_internet: online
[2025-08-21 12:12:10][353628422955345][720 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 12:12:10][353628422955345][720 ms][DEBUG] START check_scloud
[2025-08-21 12:12:10][353628422955345][720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:12:10][353628422955345][955 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23508404 104360 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:12:10][353628422955345][955 ms][DEBUG] targetPkg: running
[2025-08-21 12:12:10][353628422955345][955 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 12:12:10][353628422955345][955 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:12:10][353628422955345][955 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjI4NDIyOTU1MzQ1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTcyOCJ9'" -e "main()" -q"
[2025-08-21 12:12:10][353628422955345][955 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:12:10][353628422955345][955 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjI4NDIyOTU1MzQ1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTcyOCJ9'" -e "main()" -q"
[2025-08-21 12:12:13][353628422955345][3766 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjI4NDIyOTU1MzQ1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTcyOCJ9"\r\n
[2025-08-21 12:12:15][353628422955345][5625 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 12:12:15][353628422955345][5625 ms][DEBUG] proc_open done in 4671 ms; code=0; res.len=115
[2025-08-21 12:12:15][353628422955345][5625 ms][DEBUG] END   runCmdUntilRes#1 in 4671 ms
[2025-08-21 12:12:15][353628422955345][5625 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 12:12:15][][0 ms][INFO] === Request start ===
[2025-08-21 12:12:15][][1 ms][DEBUG] START check_frida
[2025-08-21 12:12:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:12:15][][295 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2349136  50068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:12:15][][295 ms][DEBUG] check_frida: running
[2025-08-21 12:12:15][][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 12:12:15][][295 ms][DEBUG] START check_internet
[2025-08-21 12:12:15][][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:12:15][][576 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.776/151.776/151.776/0.000 ms\n
[2025-08-21 12:12:15][][576 ms][DEBUG] check_internet: online
[2025-08-21 12:12:15][][576 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 12:12:15][][576 ms][DEBUG] START check_scloud
[2025-08-21 12:12:15][][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:12:16][][888 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23508436 104852 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:12:16][][888 ms][DEBUG] targetPkg: running
[2025-08-21 12:12:16][][888 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 12:12:16][][889 ms][DEBUG] rawBody.length=1131
[2025-08-21 12:12:16][][889 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc1OSJ9'" -e "main()" -q"
[2025-08-21 12:12:16][][889 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:12:16][][889 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc1OSJ9'" -e "main()" -q"
[2025-08-21 12:12:19][][3700 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc1OSJ9"\r\n
[2025-08-21 12:12:20][][5184 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 12:12:20][][5184 ms][DEBUG] proc_open done in 4295 ms; code=0; res.len=107
[2025-08-21 12:12:20][][5184 ms][DEBUG] END   runCmdUntilRes#1 in 4295 ms
[2025-08-21 12:12:20][][5184 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 12:12:20][][0 ms][INFO] === Request start ===
[2025-08-21 12:12:20][][1 ms][DEBUG] START check_frida
[2025-08-21 12:12:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:12:21][][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  50140 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:12:21][][297 ms][DEBUG] check_frida: running
[2025-08-21 12:12:21][][297 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 12:12:21][][297 ms][DEBUG] START check_internet
[2025-08-21 12:12:21][][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:12:21][][531 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.387/137.387/137.387/0.000 ms\n
[2025-08-21 12:12:21][][532 ms][DEBUG] check_internet: online
[2025-08-21 12:12:21][][532 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 12:12:21][][532 ms][DEBUG] START check_scloud
[2025-08-21 12:12:21][][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:12:21][][813 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23508468 105476 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:12:21][][813 ms][DEBUG] targetPkg: running
[2025-08-21 12:12:21][][813 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:12:21][][813 ms][DEBUG] rawBody.length=1131
[2025-08-21 12:12:21][][813 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgzMiJ9'" -e "main()" -q"
[2025-08-21 12:12:21][][813 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:12:21][][813 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgzMiJ9'" -e "main()" -q"
[2025-08-21 12:12:24][][3624 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgzMiJ9"\r\n
[2025-08-21 12:12:26][][5249 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 12:12:26][][5249 ms][DEBUG] proc_open done in 4437 ms; code=0; res.len=107
[2025-08-21 12:12:26][][5249 ms][DEBUG] END   runCmdUntilRes#1 in 4437 ms
[2025-08-21 12:12:26][][5250 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 12:12:28][353628422955345][0 ms][INFO] === Request start ===
[2025-08-21 12:12:28][353628422955345][1 ms][DEBUG] START check_frida
[2025-08-21 12:12:28][353628422955345][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:12:28][353628422955345][311 ms][DEBUG] SU: done in 310 ms; outroot          4632     1 2349136  50056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:12:28][353628422955345][311 ms][DEBUG] check_frida: running
[2025-08-21 12:12:28][353628422955345][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 12:12:28][353628422955345][311 ms][DEBUG] START check_internet
[2025-08-21 12:12:28][353628422955345][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:12:28][353628422955345][576 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.856/144.856/144.856/0.000 ms\n
[2025-08-21 12:12:28][353628422955345][577 ms][DEBUG] check_internet: online
[2025-08-21 12:12:28][353628422955345][577 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 12:12:28][353628422955345][577 ms][DEBUG] START check_scloud
[2025-08-21 12:12:28][353628422955345][577 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:12:28][353628422955345][873 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23508500 106052 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:12:28][353628422955345][874 ms][DEBUG] targetPkg: running
[2025-08-21 12:12:28][353628422955345][874 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:12:28][353628422955345][874 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:12:28][353628422955345][874 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjI4NDIyOTU1MzQ1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzE3In0='" -e "main()" -q"
[2025-08-21 12:12:28][353628422955345][874 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:12:28][353628422955345][874 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjI4NDIyOTU1MzQ1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzE3In0='" -e "main()" -q"
[2025-08-21 12:12:31][353628422955345][3701 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjI4NDIyOTU1MzQ1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgxMDhYRzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzE3In0="\r\n
[2025-08-21 12:12:36][353628422955345][8090 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba4e207f-e681-4036-a0c7-c8d22e551077","id":"QR_ba4e207f-e681-4036-a0c7-c8d22e551077","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:12:36][353628422955345][8090 ms][DEBUG] proc_open done in 7217 ms; code=0; res.len=3152
[2025-08-21 12:12:36][353628422955345][8090 ms][DEBUG] END   runCmdUntilRes#1 in 7217 ms
[2025-08-21 12:12:36][353628422955345][8090 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:12:48][357040738392567][0 ms][INFO] === Request start ===
[2025-08-21 12:12:48][357040738392567][1 ms][DEBUG] START check_frida
[2025-08-21 12:12:48][357040738392567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:12:48][357040738392567][249 ms][DEBUG] SU: done in 248 ms; outroot          4632     1 2332716  50056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:12:48][357040738392567][249 ms][DEBUG] check_frida: running
[2025-08-21 12:12:48][357040738392567][249 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 12:12:48][357040738392567][249 ms][DEBUG] START check_internet
[2025-08-21 12:12:48][357040738392567][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:12:48][357040738392567][561 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.826/203.826/203.826/0.000 ms\n
[2025-08-21 12:12:48][357040738392567][561 ms][DEBUG] check_internet: online
[2025-08-21 12:12:48][357040738392567][561 ms][DEBUG] END   check_internet in 313 ms
[2025-08-21 12:12:48][357040738392567][561 ms][DEBUG] START check_scloud
[2025-08-21 12:12:48][357040738392567][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:12:48][357040738392567][858 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23508532 106632 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:12:48][357040738392567][858 ms][DEBUG] targetPkg: running
[2025-08-21 12:12:48][357040738392567][858 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 12:12:48][357040738392567][858 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:12:48][357040738392567][858 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQwNzM4MzkyNTY3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ1MFEwRVdZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDAwOSJ9'" -e "main()" -q"
[2025-08-21 12:12:48][357040738392567][858 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:12:48][357040738392567][858 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQwNzM4MzkyNTY3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ1MFEwRVdZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDAwOSJ9'" -e "main()" -q"
[2025-08-21 12:12:51][357040738392567][3654 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MDQwNzM4MzkyNTY3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ1MFEwRVdZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDAwOSJ9"\r\n
[2025-08-21 12:12:53][357040738392567][5747 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e746d865-96d4-4301-a9c8-32d3250a5a3e","id":"QR_e746d865-96d4-4301-a9c8-32d3250a5a3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:12:53][357040738392567][5747 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 12:12:53][357040738392567][5747 ms][DEBUG] END   runCmdUntilRes#1 in 4890 ms
[2025-08-21 12:12:53][357040738392567][5747 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:14:07][350637542215590][1 ms][INFO] === Request start ===
[2025-08-21 12:14:07][350637542215590][1 ms][DEBUG] START check_frida
[2025-08-21 12:14:07][350637542215590][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:14:07][350637542215590][287 ms][DEBUG] SU: done in 285 ms; outroot          4632     1 2332716  50076 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:14:07][350637542215590][287 ms][DEBUG] check_frida: running
[2025-08-21 12:14:07][350637542215590][287 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 12:14:07][350637542215590][287 ms][DEBUG] START check_internet
[2025-08-21 12:14:07][350637542215590][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:14:08][350637542215590][661 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.022/265.022/265.022/0.000 ms\n
[2025-08-21 12:14:08][350637542215590][662 ms][DEBUG] check_internet: online
[2025-08-21 12:14:08][350637542215590][662 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 12:14:08][350637542215590][662 ms][DEBUG] START check_scloud
[2025-08-21 12:14:08][350637542215590][662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:14:08][350637542215590][911 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23508564 103852 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:14:08][350637542215590][911 ms][DEBUG] targetPkg: running
[2025-08-21 12:14:08][350637542215590][911 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 12:14:08][350637542215590][911 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:14:08][350637542215590][911 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQyMjE1NTkwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDVHRFZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYSUQiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgyNyJ9'" -e "main()" -q"
[2025-08-21 12:14:08][350637542215590][911 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:14:08][350637542215590][911 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQyMjE1NTkwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDVHRFZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYSUQiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgyNyJ9'" -e "main()" -q"
[2025-08-21 12:14:11][350637542215590][3723 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjM3NTQyMjE1NTkwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDVHRFZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYSUQiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgyNyJ9"\r\n
[2025-08-21 12:14:13][350637542215590][5973 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f4e9b1c-4cf4-4565-9aa9-c935574655b2","id":"QR_1f4e9b1c-4cf4-4565-9aa9-c935574655b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:14:13][350637542215590][5973 ms][DEBUG] proc_open done in 5062 ms; code=0; res.len=3152
[2025-08-21 12:14:13][350637542215590][5973 ms][DEBUG] END   runCmdUntilRes#1 in 5062 ms
[2025-08-21 12:14:13][350637542215590][5973 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:15:08][350753207714015][0 ms][INFO] === Request start ===
[2025-08-21 12:15:08][350753207714015][1 ms][DEBUG] START check_frida
[2025-08-21 12:15:08][350753207714015][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:15:08][350753207714015][242 ms][DEBUG] SU: done in 241 ms; outroot          4632     1 2332716  50080 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:15:08][350753207714015][242 ms][DEBUG] check_frida: running
[2025-08-21 12:15:08][350753207714015][242 ms][DEBUG] END   check_frida in 241 ms
[2025-08-21 12:15:08][350753207714015][242 ms][DEBUG] START check_scloud
[2025-08-21 12:15:08][350753207714015][242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:15:09][350753207714015][554 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23508596 104436 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:15:09][350753207714015][554 ms][DEBUG] targetPkg: running
[2025-08-21 12:15:09][350753207714015][554 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 12:15:09][350753207714015][554 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:15:09][350753207714015][554 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzUzMjA3NzE0MDE1IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMVYwOFFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY2NCJ9'" -e "main()" -q"
[2025-08-21 12:15:09][350753207714015][554 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:15:09][350753207714015][554 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzUzMjA3NzE0MDE1IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMVYwOFFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY2NCJ9'" -e "main()" -q"
[2025-08-21 12:15:11][350753207714015][3381 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzUzMjA3NzE0MDE1IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMVYwOFFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY2NCJ9"\r\n
[2025-08-21 12:15:13][350753207714015][5412 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f67739eb-a6b6-49f4-bd93-f5af99498bff","id":"QR_f67739eb-a6b6-49f4-bd93-f5af99498bff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:15:13][350753207714015][5412 ms][DEBUG] proc_open done in 4858 ms; code=0; res.len=3152
[2025-08-21 12:15:13][350753207714015][5412 ms][DEBUG] END   runCmdUntilRes#1 in 4858 ms
[2025-08-21 12:15:13][350753207714015][5412 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:15:20][350987613961584][1 ms][INFO] === Request start ===
[2025-08-21 12:15:20][350987613961584][1 ms][DEBUG] START check_frida
[2025-08-21 12:15:20][350987613961584][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:15:20][350987613961584][250 ms][DEBUG] SU: done in 248 ms; outroot          4632     1 2349136  50064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:15:20][350987613961584][250 ms][DEBUG] check_frida: running
[2025-08-21 12:15:20][350987613961584][250 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 12:15:20][350987613961584][250 ms][DEBUG] START check_scloud
[2025-08-21 12:15:20][350987613961584][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:15:20][350987613961584][531 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23508628 104988 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:15:20][350987613961584][531 ms][DEBUG] targetPkg: running
[2025-08-21 12:15:20][350987613961584][531 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:15:20][350987613961584][531 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:15:20][350987613961584][531 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjEzOTYxNTg0IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MVA4RUFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIzMCJ9'" -e "main()" -q"
[2025-08-21 12:15:20][350987613961584][531 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:15:20][350987613961584][531 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjEzOTYxNTg0IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MVA4RUFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIzMCJ9'" -e "main()" -q"
[2025-08-21 12:15:23][350987613961584][3343 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTg3NjEzOTYxNTg0IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MVA4RUFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIzMCJ9"\r\n
[2025-08-21 12:15:25][350987613961584][5514 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79a55fb3-af4b-415a-b83e-bfa9079045b8","id":"QR_79a55fb3-af4b-415a-b83e-bfa9079045b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:15:25][350987613961584][5514 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 12:15:25][350987613961584][5514 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 12:15:25][350987613961584][5514 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:15:47][353475122946574][0 ms][INFO] === Request start ===
[2025-08-21 12:15:47][353475122946574][1 ms][DEBUG] START check_frida
[2025-08-21 12:15:47][353475122946574][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:15:48][353475122946574][251 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2332716  50048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:15:48][353475122946574][251 ms][DEBUG] check_frida: running
[2025-08-21 12:15:48][353475122946574][251 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 12:15:48][353475122946574][251 ms][DEBUG] START check_scloud
[2025-08-21 12:15:48][353475122946574][251 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:15:48][353475122946574][532 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23508660 105556 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:15:48][353475122946574][532 ms][DEBUG] targetPkg: running
[2025-08-21 12:15:48][353475122946574][532 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:15:48][353475122946574][532 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:15:48][353475122946574][532 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDc1MTIyOTQ2NTc0IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MURFNjdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzcwNyJ9'" -e "main()" -q"
[2025-08-21 12:15:48][353475122946574][532 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:15:48][353475122946574][532 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDc1MTIyOTQ2NTc0IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MURFNjdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzcwNyJ9'" -e "main()" -q"
[2025-08-21 12:15:51][353475122946574][3375 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDc1MTIyOTQ2NTc0IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MURFNjdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzcwNyJ9"\r\n
[2025-08-21 12:15:53][353475122946574][5343 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b43339bd-05cf-4699-9b5d-83d9b7340b84","id":"QR_b43339bd-05cf-4699-9b5d-83d9b7340b84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:15:53][353475122946574][5344 ms][DEBUG] proc_open done in 4811 ms; code=0; res.len=3152
[2025-08-21 12:15:53][353475122946574][5344 ms][DEBUG] END   runCmdUntilRes#1 in 4811 ms
[2025-08-21 12:15:53][353475122946574][5344 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:17:07][351240643830349][0 ms][INFO] === Request start ===
[2025-08-21 12:17:07][351240643830349][1 ms][DEBUG] START check_frida
[2025-08-21 12:17:07][351240643830349][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:17:07][351240643830349][308 ms][DEBUG] SU: done in 307 ms; outroot          4632     1 2332716  50068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:17:07][351240643830349][308 ms][DEBUG] check_frida: running
[2025-08-21 12:17:07][351240643830349][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 12:17:07][351240643830349][308 ms][DEBUG] START check_scloud
[2025-08-21 12:17:07][351240643830349][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:17:07][351240643830349][604 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23508692 106364 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:17:07][351240643830349][605 ms][DEBUG] targetPkg: running
[2025-08-21 12:17:07][351240643830349][605 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:17:07][351240643830349][605 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:17:07][351240643830349][605 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQzODMwMzQ5IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDZHMlZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgwNSJ9'" -e "main()" -q"
[2025-08-21 12:17:07][351240643830349][605 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:17:07][351240643830349][605 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQzODMwMzQ5IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDZHMlZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgwNSJ9'" -e "main()" -q"
[2025-08-21 12:17:10][351240643830349][3432 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQzODMwMzQ5IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDZHMlZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgwNSJ9"\r\n
[2025-08-21 12:17:13][351240643830349][5900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76518c5c-91f5-49c0-bce3-b96871f0ba56","id":"QR_76518c5c-91f5-49c0-bce3-b96871f0ba56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:17:13][351240643830349][5900 ms][DEBUG] proc_open done in 5295 ms; code=0; res.len=3152
[2025-08-21 12:17:13][351240643830349][5900 ms][DEBUG] END   runCmdUntilRes#1 in 5295 ms
[2025-08-21 12:17:13][351240643830349][5900 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:17:17][358590481869079][0 ms][INFO] === Request start ===
[2025-08-21 12:17:17][358590481869079][0 ms][DEBUG] START check_frida
[2025-08-21 12:17:17][358590481869079][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:17:17][358590481869079][279 ms][DEBUG] SU: done in 279 ms; outroot          4632     1 2349136  50048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:17:17][358590481869079][279 ms][DEBUG] check_frida: running
[2025-08-21 12:17:17][358590481869079][279 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 12:17:17][358590481869079][279 ms][DEBUG] START check_scloud
[2025-08-21 12:17:17][358590481869079][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:17:17][358590481869079][576 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23508724 107092 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:17:17][358590481869079][576 ms][DEBUG] targetPkg: running
[2025-08-21 12:17:17][358590481869079][576 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:17:17][358590481869079][576 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:17:17][358590481869079][576 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTkwNDgxODY5MDc5IiwibW9kZWwiOiJTTS1BMjE3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MDJNQ1pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5OCJ9'" -e "main()" -q"
[2025-08-21 12:17:17][358590481869079][576 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:17:17][358590481869079][576 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTkwNDgxODY5MDc5IiwibW9kZWwiOiJTTS1BMjE3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MDJNQ1pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5OCJ9'" -e "main()" -q"
[2025-08-21 12:17:20][358590481869079][3403 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NTkwNDgxODY5MDc5IiwibW9kZWwiOiJTTS1BMjE3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MDJNQ1pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5OCJ9"\r\n
[2025-08-21 12:17:22][358590481869079][5184 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ba72974-7629-4fb4-a134-19580b382a6c","id":"QR_8ba72974-7629-4fb4-a134-19580b382a6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:17:22][358590481869079][5184 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 12:17:22][358590481869079][5184 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-21 12:17:22][358590481869079][5184 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:18:07][357718893052189][1 ms][INFO] === Request start ===
[2025-08-21 12:18:07][357718893052189][2 ms][DEBUG] START check_frida
[2025-08-21 12:18:07][357718893052189][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:18:07][357718893052189][284 ms][DEBUG] SU: done in 282 ms; outroot          4632     1 2332716  50052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:18:07][357718893052189][284 ms][DEBUG] check_frida: running
[2025-08-21 12:18:07][357718893052189][284 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 12:18:07][357718893052189][284 ms][DEBUG] START check_internet
[2025-08-21 12:18:07][357718893052189][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:18:08][357718893052189][690 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.673/201.673/201.673/0.000 ms\n
[2025-08-21 12:18:08][357718893052189][690 ms][DEBUG] check_internet: online
[2025-08-21 12:18:08][357718893052189][690 ms][DEBUG] END   check_internet in 406 ms
[2025-08-21 12:18:08][357718893052189][690 ms][DEBUG] START check_scloud
[2025-08-21 12:18:08][357718893052189][690 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:18:08][357718893052189][924 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23508756 104744 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:18:08][357718893052189][925 ms][DEBUG] targetPkg: running
[2025-08-21 12:18:08][357718893052189][925 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 12:18:08][357718893052189][925 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:18:08][357718893052189][925 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NzE4ODkzMDUyMTg5IiwibW9kZWwiOiJTTS1NMTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c2MEVSUUZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTTEsiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTMxNSJ9'" -e "main()" -q"
[2025-08-21 12:18:08][357718893052189][925 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:18:08][357718893052189][925 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NzE4ODkzMDUyMTg5IiwibW9kZWwiOiJTTS1NMTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c2MEVSUUZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTTEsiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTMxNSJ9'" -e "main()" -q"
[2025-08-21 12:18:11][357718893052189][3752 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NzE4ODkzMDUyMTg5IiwibW9kZWwiOiJTTS1NMTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c2MEVSUUZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTTEsiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTMxNSJ9"\r\n
[2025-08-21 12:18:13][357718893052189][5892 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ccbda08-ff09-4edd-8ce8-fd91c6328c6a","id":"QR_0ccbda08-ff09-4edd-8ce8-fd91c6328c6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:18:13][357718893052189][5893 ms][DEBUG] proc_open done in 4968 ms; code=0; res.len=3152
[2025-08-21 12:18:13][357718893052189][5893 ms][DEBUG] END   runCmdUntilRes#1 in 4968 ms
[2025-08-21 12:18:13][357718893052189][5893 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:18:19][350900921848427][0 ms][INFO] === Request start ===
[2025-08-21 12:18:19][350900921848427][1 ms][DEBUG] START check_frida
[2025-08-21 12:18:19][350900921848427][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:18:20][350900921848427][261 ms][DEBUG] SU: done in 259 ms; outroot          4632     1 2349136  50060 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:18:20][350900921848427][261 ms][DEBUG] check_frida: running
[2025-08-21 12:18:20][350900921848427][261 ms][DEBUG] END   check_frida in 260 ms
[2025-08-21 12:18:20][350900921848427][261 ms][DEBUG] START check_internet
[2025-08-21 12:18:20][350900921848427][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:18:20][350900921848427][620 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.423/257.423/257.423/0.000 ms\n
[2025-08-21 12:18:20][350900921848427][620 ms][DEBUG] check_internet: online
[2025-08-21 12:18:20][350900921848427][620 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 12:18:20][350900921848427][620 ms][DEBUG] START check_scloud
[2025-08-21 12:18:20][350900921848427][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:18:20][350900921848427][916 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23508788 105304 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:18:20][350900921848427][916 ms][DEBUG] targetPkg: running
[2025-08-21 12:18:20][350900921848427][916 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:18:20][350900921848427][917 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:18:20][350900921848427][917 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTAwOTIxODQ4NDI3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBME1GNVpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjExMyJ9'" -e "main()" -q"
[2025-08-21 12:18:20][350900921848427][917 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:18:20][350900921848427][917 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTAwOTIxODQ4NDI3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBME1GNVpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjExMyJ9'" -e "main()" -q"
[2025-08-21 12:18:23][350900921848427][3728 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTAwOTIxODQ4NDI3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBME1GNVpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjExMyJ9"\r\n
[2025-08-21 12:18:25][350900921848427][5728 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_354b6bfd-4dd5-4364-9f9c-531ce256b435","id":"QR_354b6bfd-4dd5-4364-9f9c-531ce256b435","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:18:25][350900921848427][5728 ms][DEBUG] proc_open done in 4811 ms; code=0; res.len=3152
[2025-08-21 12:18:25][350900921848427][5728 ms][DEBUG] END   runCmdUntilRes#1 in 4811 ms
[2025-08-21 12:18:25][350900921848427][5728 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:18:30][352485221245563][0 ms][INFO] === Request start ===
[2025-08-21 12:18:30][352485221245563][1 ms][DEBUG] START check_frida
[2025-08-21 12:18:30][352485221245563][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:18:30][352485221245563][262 ms][DEBUG] SU: done in 261 ms; outroot          4632     1 2349136  50048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:18:30][352485221245563][262 ms][DEBUG] check_frida: running
[2025-08-21 12:18:30][352485221245563][262 ms][DEBUG] END   check_frida in 261 ms
[2025-08-21 12:18:30][352485221245563][262 ms][DEBUG] START check_internet
[2025-08-21 12:18:30][352485221245563][262 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:18:31][352485221245563][606 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.854/237.854/237.854/0.000 ms\n
[2025-08-21 12:18:31][352485221245563][606 ms][DEBUG] check_internet: online
[2025-08-21 12:18:31][352485221245563][606 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 12:18:31][352485221245563][606 ms][DEBUG] START check_scloud
[2025-08-21 12:18:31][352485221245563][606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:18:31][352485221245563][902 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23508820 105896 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:18:31][352485221245563][902 ms][DEBUG] targetPkg: running
[2025-08-21 12:18:31][352485221245563][902 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:18:31][352485221245563][902 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:18:31][352485221245563][902 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDg1MjIxMjQ1NTYzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMDBaWERXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MDg0In0='" -e "main()" -q"
[2025-08-21 12:18:31][352485221245563][902 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:18:31][352485221245563][902 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDg1MjIxMjQ1NTYzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMDBaWERXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MDg0In0='" -e "main()" -q"
[2025-08-21 12:18:34][352485221245563][3714 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDg1MjIxMjQ1NTYzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hBMDBaWERXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MDg0In0="\r\n
[2025-08-21 12:18:35][350915068298608][0 ms][INFO] === Request start ===
[2025-08-21 12:18:37][352485221245563][6729 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d24794a-4659-4314-82e1-4c500c3bfe9d","id":"QR_6d24794a-4659-4314-82e1-4c500c3bfe9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:18:37][352485221245563][6729 ms][DEBUG] proc_open done in 5827 ms; code=0; res.len=3152
[2025-08-21 12:18:37][352485221245563][6729 ms][DEBUG] END   runCmdUntilRes#1 in 5827 ms
[2025-08-21 12:18:37][352485221245563][6729 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:18:37][350915068298608][2027 ms][DEBUG] START check_frida
[2025-08-21 12:18:37][350915068298608][2027 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:18:37][350915068298608][2339 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2349136  50056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:18:37][350915068298608][2339 ms][DEBUG] check_frida: running
[2025-08-21 12:18:37][350915068298608][2339 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 12:18:37][350915068298608][2339 ms][DEBUG] START check_internet
[2025-08-21 12:18:37][350915068298608][2339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:18:38][350915068298608][2589 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.288/144.288/144.288/0.000 ms\n
[2025-08-21 12:18:38][350915068298608][2589 ms][DEBUG] check_internet: online
[2025-08-21 12:18:38][350915068298608][2589 ms][DEBUG] END   check_internet in 249 ms
[2025-08-21 12:18:38][350915068298608][2589 ms][DEBUG] START check_scloud
[2025-08-21 12:18:38][350915068298608][2589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:18:38][350915068298608][2886 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23508852 106488 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:18:38][350915068298608][2886 ms][DEBUG] targetPkg: running
[2025-08-21 12:18:38][350915068298608][2886 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:18:38][350915068298608][2886 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:18:38][350915068298608][2886 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTE1MDY4Mjk4NjA4IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFc3MDBYTUdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjI3In0='" -e "main()" -q"
[2025-08-21 12:18:38][350915068298608][2886 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:18:38][350915068298608][2886 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTE1MDY4Mjk4NjA4IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFc3MDBYTUdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjI3In0='" -e "main()" -q"
[2025-08-21 12:18:41][350915068298608][5713 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTE1MDY4Mjk4NjA4IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFc3MDBYTUdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjI3In0="\r\n
[2025-08-21 12:18:44][350915068298608][8619 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66f63d91-5074-447a-a879-f1c71a72205a","id":"QR_66f63d91-5074-447a-a879-f1c71a72205a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:18:44][350915068298608][8619 ms][DEBUG] proc_open done in 5733 ms; code=0; res.len=3152
[2025-08-21 12:18:44][350915068298608][8619 ms][DEBUG] END   runCmdUntilRes#1 in 5733 ms
[2025-08-21 12:18:44][350915068298608][8619 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:19:07][350013883951765][0 ms][INFO] === Request start ===
[2025-08-21 12:19:07][350013883951765][1 ms][DEBUG] START check_frida
[2025-08-21 12:19:07][350013883951765][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:19:07][350013883951765][284 ms][DEBUG] SU: done in 283 ms; outroot          4632     1 2332716  50068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:19:07][350013883951765][284 ms][DEBUG] check_frida: running
[2025-08-21 12:19:07][350013883951765][284 ms][DEBUG] END   check_frida in 284 ms
[2025-08-21 12:19:07][350013883951765][285 ms][DEBUG] START check_scloud
[2025-08-21 12:19:07][350013883951765][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:19:07][350013883951765][580 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23508884 107060 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:19:07][350013883951765][580 ms][DEBUG] targetPkg: running
[2025-08-21 12:19:07][350013883951765][581 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 12:19:07][350013883951765][581 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:19:07][350013883951765][581 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgzOTUxNzY1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRCMjQ2ODlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjI3NyJ9'" -e "main()" -q"
[2025-08-21 12:19:07][350013883951765][581 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:19:07][350013883951765][581 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgzOTUxNzY1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRCMjQ2ODlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjI3NyJ9'" -e "main()" -q"
[2025-08-21 12:19:10][350013883951765][3408 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODgzOTUxNzY1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRCMjQ2ODlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjI3NyJ9"\r\n
[2025-08-21 12:19:12][350013883951765][5204 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78c2e048-216e-4c08-b194-3ef9cdd31ace","id":"QR_78c2e048-216e-4c08-b194-3ef9cdd31ace","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:19:12][350013883951765][5204 ms][DEBUG] proc_open done in 4623 ms; code=0; res.len=3152
[2025-08-21 12:19:12][350013883951765][5204 ms][DEBUG] END   runCmdUntilRes#1 in 4623 ms
[2025-08-21 12:19:12][350013883951765][5204 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:19:32][350896383143572][1 ms][INFO] === Request start ===
[2025-08-21 12:19:32][350896383143572][2 ms][DEBUG] START check_frida
[2025-08-21 12:19:32][350896383143572][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:19:32][350896383143572][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2332716  50064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:19:32][350896383143572][295 ms][DEBUG] check_frida: running
[2025-08-21 12:19:32][350896383143572][295 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 12:19:32][350896383143572][295 ms][DEBUG] START check_scloud
[2025-08-21 12:19:32][350896383143572][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:19:33][350896383143572][560 ms][DEBUG] SU: done in 265 ms; outu0_a118       7399 30745 23508916 105104 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:19:33][350896383143572][560 ms][DEBUG] targetPkg: running
[2025-08-21 12:19:33][350896383143572][560 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 12:19:33][350896383143572][560 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:19:33][350896383143572][560 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY4OCJ9'" -e "main()" -q"
[2025-08-21 12:19:33][350896383143572][561 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:19:33][350896383143572][561 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY4OCJ9'" -e "main()" -q"
[2025-08-21 12:19:35][350896383143572][3387 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY4OCJ9"\r\n
[2025-08-21 12:19:38][350896383143572][5449 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d83d0575-8903-45ce-87a7-2c3c5bf26db3","id":"QR_d83d0575-8903-45ce-87a7-2c3c5bf26db3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:19:38][350896383143572][5449 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 12:19:38][350896383143572][5449 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 12:19:38][350896383143572][5449 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:21:49][354747953982269][1 ms][INFO] === Request start ===
[2025-08-21 12:21:49][354747953982269][1 ms][DEBUG] START check_frida
[2025-08-21 12:21:49][354747953982269][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:21:49][354747953982269][259 ms][DEBUG] SU: done in 257 ms; outroot          4632     1 2348124  50056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:21:49][354747953982269][259 ms][DEBUG] check_frida: running
[2025-08-21 12:21:49][354747953982269][259 ms][DEBUG] END   check_frida in 258 ms
[2025-08-21 12:21:49][354747953982269][259 ms][DEBUG] START check_scloud
[2025-08-21 12:21:49][354747953982269][259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:21:49][354747953982269][540 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23508948 105680 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:21:49][354747953982269][540 ms][DEBUG] targetPkg: running
[2025-08-21 12:21:49][354747953982269][540 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:21:49][354747953982269][540 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:21:49][354747953982269][541 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUzOTgyMjY5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDc5MjJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTEzOCJ9'" -e "main()" -q"
[2025-08-21 12:21:49][354747953982269][541 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:21:49][354747953982269][541 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUzOTgyMjY5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDc5MjJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTEzOCJ9'" -e "main()" -q"
[2025-08-21 12:21:52][354747953982269][3352 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTUzOTgyMjY5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDc5MjJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTEzOCJ9"\r\n
[2025-08-21 12:21:54][354747953982269][5383 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_714f0b33-e082-43d9-b434-b84d6df0ebd8","id":"QR_714f0b33-e082-43d9-b434-b84d6df0ebd8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:21:54][354747953982269][5383 ms][DEBUG] proc_open done in 4843 ms; code=0; res.len=3152
[2025-08-21 12:21:54][354747953982269][5384 ms][DEBUG] END   runCmdUntilRes#1 in 4843 ms
[2025-08-21 12:21:54][354747953982269][5384 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:22:06][350805650313156][0 ms][INFO] === Request start ===
[2025-08-21 12:22:06][350805650313156][1 ms][DEBUG] START check_frida
[2025-08-21 12:22:06][350805650313156][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:22:07][350805650313156][303 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2349136  50124 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:22:07][350805650313156][303 ms][DEBUG] check_frida: running
[2025-08-21 12:22:07][350805650313156][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 12:22:07][350805650313156][303 ms][DEBUG] START check_internet
[2025-08-21 12:22:07][350805650313156][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:22:07][350805650313156][772 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.649/202.649/202.649/0.000 ms\n
[2025-08-21 12:22:07][350805650313156][772 ms][DEBUG] check_internet: online
[2025-08-21 12:22:07][350805650313156][772 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 12:22:07][350805650313156][772 ms][DEBUG] START check_scloud
[2025-08-21 12:22:07][350805650313156][772 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:22:07][350805650313156][1039 ms][DEBUG] SU: done in 267 ms; outu0_a118       7399 30745 23508980 106288 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:22:07][350805650313156][1039 ms][DEBUG] targetPkg: running
[2025-08-21 12:22:07][350805650313156][1039 ms][DEBUG] END   check_scloud in 267 ms
[2025-08-21 12:22:07][350805650313156][1039 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:22:07][350805650313156][1039 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODA1NjUwMzEzMTU2IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDVGNzhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2MCJ9'" -e "main()" -q"
[2025-08-21 12:22:07][350805650313156][1039 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:22:07][350805650313156][1039 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODA1NjUwMzEzMTU2IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDVGNzhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2MCJ9'" -e "main()" -q"
[2025-08-21 12:22:10][350805650313156][3880 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODA1NjUwMzEzMTU2IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDVGNzhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2MCJ9"\r\n
[2025-08-21 12:22:12][350805650313156][5817 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d02b5f5-a756-4f4f-a304-0b478be92a31","id":"QR_1d02b5f5-a756-4f4f-a304-0b478be92a31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:22:12][350805650313156][5818 ms][DEBUG] proc_open done in 4779 ms; code=0; res.len=3152
[2025-08-21 12:22:12][350805650313156][5818 ms][DEBUG] END   runCmdUntilRes#1 in 4779 ms
[2025-08-21 12:22:12][350805650313156][5818 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:22:21][357052525138194][0 ms][INFO] === Request start ===
[2025-08-21 12:22:21][357052525138194][1 ms][DEBUG] START check_frida
[2025-08-21 12:22:21][357052525138194][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:22:21][357052525138194][308 ms][DEBUG] SU: done in 307 ms; outroot          4632     1 2349136  50108 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:22:21][357052525138194][308 ms][DEBUG] check_frida: running
[2025-08-21 12:22:21][357052525138194][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 12:22:21][357052525138194][308 ms][DEBUG] START check_internet
[2025-08-21 12:22:21][357052525138194][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:22:22][357052525138194][604 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.506/197.506/197.506/0.000 ms\n
[2025-08-21 12:22:22][357052525138194][605 ms][DEBUG] check_internet: online
[2025-08-21 12:22:22][357052525138194][605 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 12:22:22][357052525138194][605 ms][DEBUG] START check_scloud
[2025-08-21 12:22:22][357052525138194][605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:22:22][357052525138194][901 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23509012 106876 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:22:22][357052525138194][902 ms][DEBUG] targetPkg: running
[2025-08-21 12:22:22][357052525138194][902 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:22:22][357052525138194][902 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:22:22][357052525138194][902 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDUyNTI1MTM4MTk0IiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVDMwQ1c0MFoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkRCVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTg4In0='" -e "main()" -q"
[2025-08-21 12:22:22][357052525138194][902 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:22:22][357052525138194][902 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDUyNTI1MTM4MTk0IiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVDMwQ1c0MFoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkRCVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTg4In0='" -e "main()" -q"
[2025-08-21 12:22:25][357052525138194][3697 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MDUyNTI1MTM4MTk0IiwibW9kZWwiOiJTTS1QNjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVDMwQ1c0MFoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkRCVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTg4In0="\r\n
[2025-08-21 12:22:27][357052525138194][5556 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0824ab31-ab6d-4486-a9be-67d279b58efa","id":"QR_0824ab31-ab6d-4486-a9be-67d279b58efa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:22:27][357052525138194][5556 ms][DEBUG] proc_open done in 4655 ms; code=0; res.len=3152
[2025-08-21 12:22:27][357052525138194][5556 ms][DEBUG] END   runCmdUntilRes#1 in 4655 ms
[2025-08-21 12:22:27][357052525138194][5556 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:23:06][352432792254079][0 ms][INFO] === Request start ===
[2025-08-21 12:23:06][352432792254079][1 ms][DEBUG] START check_frida
[2025-08-21 12:23:06][352432792254079][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:23:06][352432792254079][291 ms][DEBUG] SU: done in 290 ms; outroot          4632     1 2332716  50064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:23:06][352432792254079][291 ms][DEBUG] check_frida: running
[2025-08-21 12:23:06][352432792254079][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 12:23:06][352432792254079][291 ms][DEBUG] START check_scloud
[2025-08-21 12:23:06][352432792254079][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:23:06][352432792254079][587 ms][DEBUG] SU: done in 295 ms; outu0_a118       7399 30745 23509044 105068 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:23:06][352432792254079][587 ms][DEBUG] targetPkg: running
[2025-08-21 12:23:06][352432792254079][587 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 12:23:06][352432792254079][587 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:23:06][352432792254079][587 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDMyNzkyMjU0MDc5IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g3MFpDTlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgyMCJ9'" -e "main()" -q"
[2025-08-21 12:23:06][352432792254079][587 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:23:06][352432792254079][587 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDMyNzkyMjU0MDc5IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g3MFpDTlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgyMCJ9'" -e "main()" -q"
[2025-08-21 12:23:09][352432792254079][3414 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDMyNzkyMjU0MDc5IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g3MFpDTlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgyMCJ9"\r\n
[2025-08-21 12:23:12][352432792254079][5773 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_303e4cd8-065d-4423-b261-702e7296211a","id":"QR_303e4cd8-065d-4423-b261-702e7296211a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:23:12][352432792254079][5773 ms][DEBUG] proc_open done in 5185 ms; code=0; res.len=3152
[2025-08-21 12:23:12][352432792254079][5773 ms][DEBUG] END   runCmdUntilRes#1 in 5186 ms
[2025-08-21 12:23:12][352432792254079][5773 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:23:17][350013881134737][0 ms][INFO] === Request start ===
[2025-08-21 12:23:17][350013881134737][1 ms][DEBUG] START check_frida
[2025-08-21 12:23:17][350013881134737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:23:18][350013881134737][306 ms][DEBUG] SU: done in 305 ms; outroot          4632     1 2349136  50084 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:23:18][350013881134737][306 ms][DEBUG] check_frida: running
[2025-08-21 12:23:18][350013881134737][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 12:23:18][350013881134737][306 ms][DEBUG] START check_scloud
[2025-08-21 12:23:18][350013881134737][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:23:18][350013881134737][603 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23509076 105684 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:23:18][350013881134737][603 ms][DEBUG] targetPkg: running
[2025-08-21 12:23:18][350013881134737][603 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:23:18][350013881134737][603 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:23:18][350013881134737][604 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgxMTM0NzM3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMDlYVlBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEyNiJ9'" -e "main()" -q"
[2025-08-21 12:23:18][350013881134737][604 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:23:18][350013881134737][604 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgxMTM0NzM3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMDlYVlBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEyNiJ9'" -e "main()" -q"
[2025-08-21 12:23:21][350013881134737][3399 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODgxMTM0NzM3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMDlYVlBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTEyNiJ9"\r\n
[2025-08-21 12:23:23][350013881134737][5680 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24195fe4-b290-484c-b37e-c05052fe260e","id":"QR_24195fe4-b290-484c-b37e-c05052fe260e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:23:23][350013881134737][5681 ms][DEBUG] proc_open done in 5077 ms; code=0; res.len=3152
[2025-08-21 12:23:23][350013881134737][5681 ms][DEBUG] END   runCmdUntilRes#1 in 5077 ms
[2025-08-21 12:23:23][350013881134737][5681 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:23:29][353530675382229][0 ms][INFO] === Request start ===
[2025-08-21 12:23:29][353530675382229][1 ms][DEBUG] START check_frida
[2025-08-21 12:23:29][353530675382229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:23:29][353530675382229][300 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2349136  50068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:23:29][353530675382229][300 ms][DEBUG] check_frida: running
[2025-08-21 12:23:29][353530675382229][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 12:23:29][353530675382229][300 ms][DEBUG] START check_scloud
[2025-08-21 12:23:29][353530675382229][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:23:29][353530675382229][597 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23509108 106300 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:23:29][353530675382229][597 ms][DEBUG] targetPkg: running
[2025-08-21 12:23:29][353530675382229][597 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:23:29][353530675382229][597 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:23:29][353530675382229][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTMwNjc1MzgyMjI5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk4MDFLWEZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc1MiJ9'" -e "main()" -q"
[2025-08-21 12:23:29][353530675382229][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:23:29][353530675382229][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTMwNjc1MzgyMjI5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk4MDFLWEZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc1MiJ9'" -e "main()" -q"
[2025-08-21 12:23:32][353530675382229][3409 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNTMwNjc1MzgyMjI5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk4MDFLWEZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc1MiJ9"\r\n
[2025-08-21 12:23:34][353530675382229][5236 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06d264b3-2bc7-40a6-8122-389e030b592c","id":"QR_06d264b3-2bc7-40a6-8122-389e030b592c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:23:34][353530675382229][5237 ms][DEBUG] proc_open done in 4640 ms; code=0; res.len=3152
[2025-08-21 12:23:34][353530675382229][5237 ms][DEBUG] END   runCmdUntilRes#1 in 4640 ms
[2025-08-21 12:23:34][353530675382229][5237 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:25:09][352404916207861][1 ms][INFO] === Request start ===
[2025-08-21 12:25:09][352404916207861][2 ms][DEBUG] START check_frida
[2025-08-21 12:25:09][352404916207861][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:25:10][352404916207861][246 ms][DEBUG] SU: done in 245 ms; outroot          4632     1 2332716  50152 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:25:10][352404916207861][246 ms][DEBUG] check_frida: running
[2025-08-21 12:25:10][352404916207861][247 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 12:25:10][352404916207861][247 ms][DEBUG] START check_scloud
[2025-08-21 12:25:10][352404916207861][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:25:10][352404916207861][529 ms][DEBUG] SU: done in 282 ms; outu0_a118       7399 30745 23509140 105284 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:25:10][352404916207861][529 ms][DEBUG] targetPkg: running
[2025-08-21 12:25:10][352404916207861][529 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 12:25:10][352404916207861][529 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:25:10][352404916207861][529 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDA0OTE2MjA3ODYxIiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MUE0R0NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg0NCJ9'" -e "main()" -q"
[2025-08-21 12:25:10][352404916207861][529 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:25:10][352404916207861][529 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDA0OTE2MjA3ODYxIiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MUE0R0NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg0NCJ9'" -e "main()" -q"
[2025-08-21 12:25:13][352404916207861][3386 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDA0OTE2MjA3ODYxIiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MUE0R0NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg0NCJ9"\r\n
[2025-08-21 12:25:15][352404916207861][5480 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ba0e22d-0d94-4222-ad31-ea2c19f3019f","id":"QR_8ba0e22d-0d94-4222-ad31-ea2c19f3019f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:25:15][352404916207861][5480 ms][DEBUG] proc_open done in 4951 ms; code=0; res.len=3152
[2025-08-21 12:25:15][352404916207861][5480 ms][DEBUG] END   runCmdUntilRes#1 in 4951 ms
[2025-08-21 12:25:15][352404916207861][5480 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:26:07][353313362465684][0 ms][INFO] === Request start ===
[2025-08-21 12:26:07][353313362465684][1 ms][DEBUG] START check_frida
[2025-08-21 12:26:07][353313362465684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:26:07][353313362465684][295 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2332716  50124 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:26:07][353313362465684][295 ms][DEBUG] check_frida: running
[2025-08-21 12:26:07][353313362465684][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 12:26:07][353313362465684][295 ms][DEBUG] START check_internet
[2025-08-21 12:26:07][353313362465684][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:26:07][353313362465684][732 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.322/201.322/201.322/0.000 ms\n
[2025-08-21 12:26:07][353313362465684][732 ms][DEBUG] check_internet: online
[2025-08-21 12:26:07][353313362465684][732 ms][DEBUG] END   check_internet in 437 ms
[2025-08-21 12:26:07][353313362465684][732 ms][DEBUG] START check_scloud
[2025-08-21 12:26:07][353313362465684][732 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:26:08][353313362465684][1013 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23509172 105848 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:26:08][353313362465684][1014 ms][DEBUG] targetPkg: running
[2025-08-21 12:26:08][353313362465684][1014 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:26:08][353313362465684][1014 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:26:08][353313362465684][1014 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYyMiJ9'" -e "main()" -q"
[2025-08-21 12:26:08][353313362465684][1014 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:26:08][353313362465684][1014 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYyMiJ9'" -e "main()" -q"
[2025-08-21 12:26:10][353313362465684][3841 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYyMiJ9"\r\n
[2025-08-21 12:26:13][353313362465684][5965 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18e0564a-3fe7-452f-af54-90d06672de9d","id":"QR_18e0564a-3fe7-452f-af54-90d06672de9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:26:13][353313362465684][5966 ms][DEBUG] proc_open done in 4952 ms; code=0; res.len=3152
[2025-08-21 12:26:13][353313362465684][5966 ms][DEBUG] END   runCmdUntilRes#1 in 4952 ms
[2025-08-21 12:26:13][353313362465684][5966 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:27:07][350013885456565][1 ms][INFO] === Request start ===
[2025-08-21 12:27:07][350013885456565][2 ms][DEBUG] START check_frida
[2025-08-21 12:27:07][350013885456565][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:27:07][350013885456565][282 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2332716  50080 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:27:07][350013885456565][282 ms][DEBUG] check_frida: running
[2025-08-21 12:27:07][350013885456565][282 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 12:27:07][350013885456565][282 ms][DEBUG] START check_scloud
[2025-08-21 12:27:07][350013885456565][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:27:08][350013885456565][563 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23509204 106448 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:27:08][350013885456565][563 ms][DEBUG] targetPkg: running
[2025-08-21 12:27:08][350013885456565][563 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:27:08][350013885456565][563 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:27:08][350013885456565][563 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1NDU2NTY1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMEQyRjZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc2MiJ9'" -e "main()" -q"
[2025-08-21 12:27:08][350013885456565][563 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:27:08][350013885456565][564 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg1NDU2NTY1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMEQyRjZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc2MiJ9'" -e "main()" -q"
[2025-08-21 12:27:11][350013885456565][3406 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODg1NDU2NTY1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMEQyRjZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc2MiJ9"\r\n
[2025-08-21 12:27:13][350013885456565][5718 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_994c33fb-c50d-44e0-ade1-f882b2d955bd","id":"QR_994c33fb-c50d-44e0-ade1-f882b2d955bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:27:13][350013885456565][5718 ms][DEBUG] proc_open done in 5155 ms; code=0; res.len=3152
[2025-08-21 12:27:13][350013885456565][5718 ms][DEBUG] END   runCmdUntilRes#1 in 5155 ms
[2025-08-21 12:27:13][350013885456565][5718 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:27:19][352677531419785][0 ms][INFO] === Request start ===
[2025-08-21 12:27:19][352677531419785][1 ms][DEBUG] START check_frida
[2025-08-21 12:27:19][352677531419785][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:27:20][352677531419785][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2349136  50064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:27:20][352677531419785][291 ms][DEBUG] check_frida: running
[2025-08-21 12:27:20][352677531419785][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 12:27:20][352677531419785][291 ms][DEBUG] START check_scloud
[2025-08-21 12:27:20][352677531419785][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:27:20][352677531419785][602 ms][DEBUG] SU: done in 311 ms; outu0_a118       7399 30745 23509236 105384 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:27:20][352677531419785][602 ms][DEBUG] targetPkg: running
[2025-08-21 12:27:20][352677531419785][602 ms][DEBUG] END   check_scloud in 311 ms
[2025-08-21 12:27:20][352677531419785][602 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:27:20][352677531419785][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMxNDE5Nzg1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MERWVlhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI3NSJ9'" -e "main()" -q"
[2025-08-21 12:27:20][352677531419785][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:27:20][352677531419785][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMxNDE5Nzg1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MERWVlhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI3NSJ9'" -e "main()" -q"
[2025-08-21 12:27:23][352677531419785][3429 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjc3NTMxNDE5Nzg1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MERWVlhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI3NSJ9"\r\n
[2025-08-21 12:27:25][352677531419785][5444 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c06a7fa4-d16f-4f4d-902c-7cf754122aeb","id":"QR_c06a7fa4-d16f-4f4d-902c-7cf754122aeb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:27:25][352677531419785][5444 ms][DEBUG] proc_open done in 4841 ms; code=0; res.len=3152
[2025-08-21 12:27:25][352677531419785][5444 ms][DEBUG] END   runCmdUntilRes#1 in 4842 ms
[2025-08-21 12:27:25][352677531419785][5444 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:27:44][352257980187595][0 ms][INFO] === Request start ===
[2025-08-21 12:27:44][352257980187595][1 ms][DEBUG] START check_frida
[2025-08-21 12:27:44][352257980187595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:27:44][352257980187595][252 ms][DEBUG] SU: done in 251 ms; outroot          4632     1 2332716  50132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:27:44][352257980187595][252 ms][DEBUG] check_frida: running
[2025-08-21 12:27:44][352257980187595][252 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 12:27:44][352257980187595][252 ms][DEBUG] START check_scloud
[2025-08-21 12:27:44][352257980187595][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:27:45][352257980187595][471 ms][DEBUG] SU: done in 219 ms; outu0_a118       7399 30745 23509268 105980 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:27:45][352257980187595][472 ms][DEBUG] targetPkg: running
[2025-08-21 12:27:45][352257980187595][472 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 12:27:45][352257980187595][472 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:27:45][352257980187595][472 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjQ1In0='" -e "main()" -q"
[2025-08-21 12:27:45][352257980187595][472 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:27:45][352257980187595][472 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjQ1In0='" -e "main()" -q"
[2025-08-21 12:27:47][352257980187595][3251 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjQ1In0="\r\n
[2025-08-21 12:27:51][352257980187595][6485 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7da97961-09b5-4824-882a-d81d799b1ef2","id":"QR_7da97961-09b5-4824-882a-d81d799b1ef2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:27:51][352257980187595][6485 ms][DEBUG] proc_open done in 6013 ms; code=0; res.len=3152
[2025-08-21 12:27:51][352257980187595][6485 ms][DEBUG] END   runCmdUntilRes#1 in 6013 ms
[2025-08-21 12:27:51][352257980187595][6485 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:29:49][353403932001489][1 ms][INFO] === Request start ===
[2025-08-21 12:29:49][353403932001489][2 ms][DEBUG] START check_frida
[2025-08-21 12:29:49][353403932001489][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:29:49][353403932001489][296 ms][DEBUG] SU: done in 295 ms; outroot          4632     1 2331704  50136 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:29:49][353403932001489][297 ms][DEBUG] check_frida: running
[2025-08-21 12:29:49][353403932001489][297 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 12:29:49][353403932001489][297 ms][DEBUG] START check_scloud
[2025-08-21 12:29:49][353403932001489][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:29:49][353403932001489][609 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23509300 106608 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:29:49][353403932001489][609 ms][DEBUG] targetPkg: running
[2025-08-21 12:29:49][353403932001489][609 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 12:29:49][353403932001489][609 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:29:49][353403932001489][609 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDAzOTMyMDAxNDg5IiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1gxMDdQSjZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI2NyJ9'" -e "main()" -q"
[2025-08-21 12:29:49][353403932001489][609 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:29:49][353403932001489][609 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDAzOTMyMDAxNDg5IiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1gxMDdQSjZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI2NyJ9'" -e "main()" -q"
[2025-08-21 12:29:52][353403932001489][3436 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDAzOTMyMDAxNDg5IiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1gxMDdQSjZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI2NyJ9"\r\n
[2025-08-21 12:29:54][353403932001489][5498 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a10ce9a9-8375-4f1d-b6e2-c390c776e8d5","id":"QR_a10ce9a9-8375-4f1d-b6e2-c390c776e8d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:29:54][353403932001489][5498 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 12:29:54][353403932001489][5498 ms][DEBUG] END   runCmdUntilRes#1 in 4890 ms
[2025-08-21 12:29:54][353403932001489][5498 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:30:09][350026550940317][0 ms][INFO] === Request start ===
[2025-08-21 12:30:09][350026550940317][1 ms][DEBUG] START check_frida
[2025-08-21 12:30:09][350026550940317][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:30:09][350026550940317][248 ms][DEBUG] SU: done in 246 ms; outroot          4632     1 2332716  50056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:30:09][350026550940317][248 ms][DEBUG] check_frida: running
[2025-08-21 12:30:09][350026550940317][248 ms][DEBUG] END   check_frida in 247 ms
[2025-08-21 12:30:09][350026550940317][248 ms][DEBUG] START check_internet
[2025-08-21 12:30:09][350026550940317][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:30:10][350026550940317][576 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.757/223.757/223.757/0.000 ms\n
[2025-08-21 12:30:10][350026550940317][576 ms][DEBUG] check_internet: online
[2025-08-21 12:30:10][350026550940317][576 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 12:30:10][350026550940317][576 ms][DEBUG] START check_scloud
[2025-08-21 12:30:10][350026550940317][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:30:10][350026550940317][810 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23509332 103044 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:30:10][350026550940317][810 ms][DEBUG] targetPkg: running
[2025-08-21 12:30:10][350026550940317][810 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 12:30:10][350026550940317][810 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:30:10][350026550940317][811 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI2NTUwOTQwMzE3IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MUM3UUZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY1MiJ9'" -e "main()" -q"
[2025-08-21 12:30:10][350026550940317][811 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:30:10][350026550940317][811 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI2NTUwOTQwMzE3IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MUM3UUZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY1MiJ9'" -e "main()" -q"
[2025-08-21 12:30:13][350026550940317][3637 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDI2NTUwOTQwMzE3IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MUM3UUZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY1MiJ9"\r\n
[2025-08-21 12:30:14][350026550940317][5403 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d23928d1-2daf-4254-8fea-ac6741b02226","id":"QR_d23928d1-2daf-4254-8fea-ac6741b02226","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:30:14][350026550940317][5403 ms][DEBUG] proc_open done in 4592 ms; code=0; res.len=3152
[2025-08-21 12:30:14][350026550940317][5403 ms][DEBUG] END   runCmdUntilRes#1 in 4593 ms
[2025-08-21 12:30:14][350026550940317][5403 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:31:21][357211245380441][0 ms][INFO] === Request start ===
[2025-08-21 12:31:21][357211245380441][1 ms][DEBUG] START check_frida
[2025-08-21 12:31:21][357211245380441][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:31:21][357211245380441][319 ms][DEBUG] SU: done in 318 ms; outroot          4632     1 2332716  50048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:31:21][357211245380441][319 ms][DEBUG] check_frida: running
[2025-08-21 12:31:21][357211245380441][319 ms][DEBUG] END   check_frida in 318 ms
[2025-08-21 12:31:21][357211245380441][319 ms][DEBUG] START check_scloud
[2025-08-21 12:31:21][357211245380441][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:31:21][357211245380441][631 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23509364 103508 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:31:21][357211245380441][631 ms][DEBUG] targetPkg: running
[2025-08-21 12:31:21][357211245380441][631 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 12:31:21][357211245380441][631 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:31:21][357211245380441][631 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MjExMjQ1MzgwNDQxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MTdDUTBUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk5OSJ9'" -e "main()" -q"
[2025-08-21 12:31:21][357211245380441][631 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:31:21][357211245380441][631 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MjExMjQ1MzgwNDQxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MTdDUTBUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk5OSJ9'" -e "main()" -q"
[2025-08-21 12:31:24][357211245380441][3458 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MjExMjQ1MzgwNDQxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MTdDUTBUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk5OSJ9"\r\n
[2025-08-21 12:31:26][357211245380441][5599 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_337e89a2-5303-446b-a77d-fdf80bf63e66","id":"QR_337e89a2-5303-446b-a77d-fdf80bf63e66","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:31:26][357211245380441][5599 ms][DEBUG] proc_open done in 4968 ms; code=0; res.len=3152
[2025-08-21 12:31:26][357211245380441][5599 ms][DEBUG] END   runCmdUntilRes#1 in 4968 ms
[2025-08-21 12:31:26][357211245380441][5599 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:33:30][354595806602828][1 ms][INFO] === Request start ===
[2025-08-21 12:33:30][354595806602828][1 ms][DEBUG] START check_frida
[2025-08-21 12:33:30][354595806602828][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:33:30][354595806602828][247 ms][DEBUG] SU: done in 245 ms; outroot          4632     1 2332716  50056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:33:30][354595806602828][247 ms][DEBUG] check_frida: running
[2025-08-21 12:33:30][354595806602828][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 12:33:30][354595806602828][247 ms][DEBUG] START check_scloud
[2025-08-21 12:33:30][354595806602828][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:33:30][354595806602828][527 ms][DEBUG] SU: done in 279 ms; outu0_a118       7399 30745 23509396 104308 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:33:30][354595806602828][527 ms][DEBUG] targetPkg: running
[2025-08-21 12:33:30][354595806602828][527 ms][DEBUG] END   check_scloud in 279 ms
[2025-08-21 12:33:30][354595806602828][527 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:33:30][354595806602828][527 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTk1ODA2NjAyODI4IiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMU5IQU1IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTMxMCJ9'" -e "main()" -q"
[2025-08-21 12:33:30][354595806602828][527 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:33:30][354595806602828][527 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTk1ODA2NjAyODI4IiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMU5IQU1IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTMxMCJ9'" -e "main()" -q"
[2025-08-21 12:33:33][354595806602828][3354 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTk1ODA2NjAyODI4IiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMU5IQU1IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTMxMCJ9"\r\n
[2025-08-21 12:33:35][354595806602828][5509 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9c71436-6581-47fb-87b8-0b531dd5c585","id":"QR_a9c71436-6581-47fb-87b8-0b531dd5c585","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:33:35][354595806602828][5510 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 12:33:35][354595806602828][5510 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 12:33:35][354595806602828][5510 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:35:15][358780100359806][0 ms][INFO] === Request start ===
[2025-08-21 12:35:15][358780100359806][1 ms][DEBUG] START check_frida
[2025-08-21 12:35:15][358780100359806][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:35:16][358780100359806][303 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2332716  50064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:35:16][358780100359806][303 ms][DEBUG] check_frida: running
[2025-08-21 12:35:16][358780100359806][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 12:35:16][358780100359806][303 ms][DEBUG] START check_scloud
[2025-08-21 12:35:16][358780100359806][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:35:16][358780100359806][537 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23509428 105092 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:35:16][358780100359806][537 ms][DEBUG] targetPkg: running
[2025-08-21 12:35:16][358780100359806][537 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 12:35:16][358780100359806][537 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:35:16][358780100359806][537 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NzgwMTAwMzU5ODA2IiwibW9kZWwiOiJTTS1OOTc1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE03M0pOWVBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVE8iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTcyNiJ9'" -e "main()" -q"
[2025-08-21 12:35:16][358780100359806][538 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:35:16][358780100359806][538 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NzgwMTAwMzU5ODA2IiwibW9kZWwiOiJTTS1OOTc1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE03M0pOWVBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVE8iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTcyNiJ9'" -e "main()" -q"
[2025-08-21 12:35:19][358780100359806][3365 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NzgwMTAwMzU5ODA2IiwibW9kZWwiOiJTTS1OOTc1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE03M0pOWVBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVE8iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTcyNiJ9"\r\n
[2025-08-21 12:35:21][358780100359806][5411 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9afc11a-d725-4947-bba1-c24fa741bd7a","id":"QR_e9afc11a-d725-4947-bba1-c24fa741bd7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:35:21][358780100359806][5411 ms][DEBUG] proc_open done in 4874 ms; code=0; res.len=3152
[2025-08-21 12:35:21][358780100359806][5411 ms][DEBUG] END   runCmdUntilRes#1 in 4874 ms
[2025-08-21 12:35:21][358780100359806][5411 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:35:38][354952832945442][1 ms][INFO] === Request start ===
[2025-08-21 12:35:38][354952832945442][2 ms][DEBUG] START check_frida
[2025-08-21 12:35:38][354952832945442][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:35:38][354952832945442][245 ms][DEBUG] SU: done in 244 ms; outroot          4632     1 2332716  50052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:35:38][354952832945442][245 ms][DEBUG] check_frida: running
[2025-08-21 12:35:38][354952832945442][245 ms][DEBUG] END   check_frida in 244 ms
[2025-08-21 12:35:38][354952832945442][245 ms][DEBUG] START check_scloud
[2025-08-21 12:35:38][354952832945442][245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:35:38][354952832945442][526 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23509460 105632 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:35:38][354952832945442][526 ms][DEBUG] targetPkg: running
[2025-08-21 12:35:38][354952832945442][527 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:35:38][354952832945442][527 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:35:38][354952832945442][527 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTUyODMyOTQ1NDQyIiwibW9kZWwiOiJTTS1BMjE3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE44MEY3WURNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTQyIn0='" -e "main()" -q"
[2025-08-21 12:35:38][354952832945442][527 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:35:38][354952832945442][527 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTUyODMyOTQ1NDQyIiwibW9kZWwiOiJTTS1BMjE3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE44MEY3WURNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTQyIn0='" -e "main()" -q"
[2025-08-21 12:35:41][354952832945442][3323 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTUyODMyOTQ1NDQyIiwibW9kZWwiOiJTTS1BMjE3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE44MEY3WURNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTQyIn0="\r\n
[2025-08-21 12:35:46][354952832945442][7853 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d4cee54-3615-4c50-914f-4e79a776378b","id":"QR_8d4cee54-3615-4c50-914f-4e79a776378b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:35:46][354952832945442][7853 ms][DEBUG] proc_open done in 7326 ms; code=0; res.len=3152
[2025-08-21 12:35:46][354952832945442][7853 ms][DEBUG] END   runCmdUntilRes#1 in 7326 ms
[2025-08-21 12:35:46][354952832945442][7853 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:35:50][352469859211345][1 ms][INFO] === Request start ===
[2025-08-21 12:35:50][352469859211345][2 ms][DEBUG] START check_frida
[2025-08-21 12:35:50][352469859211345][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:35:51][352469859211345][251 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2349136  50052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:35:51][352469859211345][251 ms][DEBUG] check_frida: running
[2025-08-21 12:35:51][352469859211345][251 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 12:35:51][352469859211345][251 ms][DEBUG] START check_scloud
[2025-08-21 12:35:51][352469859211345][251 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:35:51][352469859211345][532 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23509492 106176 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:35:51][352469859211345][532 ms][DEBUG] targetPkg: running
[2025-08-21 12:35:51][352469859211345][532 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 12:35:51][352469859211345][532 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:35:51][352469859211345][533 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU5MjExMzQ1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MFZWVDhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIzNyJ9'" -e "main()" -q"
[2025-08-21 12:35:51][352469859211345][533 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:35:51][352469859211345][533 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU5MjExMzQ1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MFZWVDhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIzNyJ9'" -e "main()" -q"
[2025-08-21 12:35:54][352469859211345][3375 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDY5ODU5MjExMzQ1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MFZWVDhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIzNyJ9"\r\n
[2025-08-21 12:35:56][352469859211345][5734 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4d49d72-737c-4128-9b4a-c2cb7fe55ed4","id":"QR_c4d49d72-737c-4128-9b4a-c2cb7fe55ed4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:35:56][352469859211345][5735 ms][DEBUG] proc_open done in 5202 ms; code=0; res.len=3152
[2025-08-21 12:35:56][352469859211345][5735 ms][DEBUG] END   runCmdUntilRes#1 in 5202 ms
[2025-08-21 12:35:56][352469859211345][5735 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:36:07][352677531655008][0 ms][INFO] === Request start ===
[2025-08-21 12:36:07][352677531655008][1 ms][DEBUG] START check_frida
[2025-08-21 12:36:07][352677531655008][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:36:07][352677531655008][313 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2349136  50068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:36:07][352677531655008][313 ms][DEBUG] check_frida: running
[2025-08-21 12:36:07][352677531655008][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 12:36:07][352677531655008][313 ms][DEBUG] START check_internet
[2025-08-21 12:36:07][352677531655008][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:36:07][352677531655008][782 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.220/198.220/198.220/0.000 ms\n
[2025-08-21 12:36:07][352677531655008][782 ms][DEBUG] check_internet: online
[2025-08-21 12:36:07][352677531655008][782 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 12:36:07][352677531655008][782 ms][DEBUG] START check_scloud
[2025-08-21 12:36:07][352677531655008][782 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:36:08][352677531655008][1032 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23509524 107236 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:36:08][352677531655008][1032 ms][DEBUG] targetPkg: running
[2025-08-21 12:36:08][352677531655008][1032 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 12:36:08][352677531655008][1032 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:36:08][352677531655008][1032 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMxNjU1MDA4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc4MDNZNzFQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI4MSJ9'" -e "main()" -q"
[2025-08-21 12:36:08][352677531655008][1032 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:36:08][352677531655008][1032 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMxNjU1MDA4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc4MDNZNzFQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI4MSJ9'" -e "main()" -q"
[2025-08-21 12:36:10][352677531655008][3844 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjc3NTMxNjU1MDA4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc4MDNZNzFQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzI4MSJ9"\r\n
[2025-08-21 12:36:12][352677531655008][5687 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b487286d-bab9-4cd4-9636-28168bc8d456","id":"QR_b487286d-bab9-4cd4-9636-28168bc8d456","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:36:12][352677531655008][5687 ms][DEBUG] proc_open done in 4655 ms; code=0; res.len=3152
[2025-08-21 12:36:12][352677531655008][5687 ms][DEBUG] END   runCmdUntilRes#1 in 4655 ms
[2025-08-21 12:36:12][352677531655008][5687 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:36:50][352375453614737][0 ms][INFO] === Request start ===
[2025-08-21 12:36:50][352375453614737][1 ms][DEBUG] START check_frida
[2025-08-21 12:36:50][352375453614737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:36:50][352375453614737][304 ms][DEBUG] SU: done in 303 ms; outroot          4632     1 2332716  50068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:36:50][352375453614737][304 ms][DEBUG] check_frida: running
[2025-08-21 12:36:50][352375453614737][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 12:36:50][352375453614737][304 ms][DEBUG] START check_internet
[2025-08-21 12:36:50][352375453614737][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:36:51][352375453614737][647 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=244 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 244.765/244.765/244.765/0.000 ms\n
[2025-08-21 12:36:51][352375453614737][648 ms][DEBUG] check_internet: online
[2025-08-21 12:36:51][352375453614737][648 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 12:36:51][352375453614737][648 ms][DEBUG] START check_scloud
[2025-08-21 12:36:51][352375453614737][648 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:36:51][352375453614737][945 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23509556 107308 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:36:51][352375453614737][945 ms][DEBUG] targetPkg: running
[2025-08-21 12:36:51][352375453614737][945 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:36:51][352375453614737][945 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:36:51][352375453614737][945 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzc1NDUzNjE0NzM3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c2MUJaV1NGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI5NyJ9'" -e "main()" -q"
[2025-08-21 12:36:51][352375453614737][945 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:36:51][352375453614737][945 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzc1NDUzNjE0NzM3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c2MUJaV1NGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI5NyJ9'" -e "main()" -q"
[2025-08-21 12:36:54][352375453614737][3756 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzc1NDUzNjE0NzM3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c2MUJaV1NGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI5NyJ9"\r\n
[2025-08-21 12:36:56][352375453614737][5990 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0573377-631e-412b-8d74-c6dedaafb3e7","id":"QR_d0573377-631e-412b-8d74-c6dedaafb3e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:36:56][352375453614737][5990 ms][DEBUG] proc_open done in 5045 ms; code=0; res.len=3152
[2025-08-21 12:36:56][352375453614737][5990 ms][DEBUG] END   runCmdUntilRes#1 in 5045 ms
[2025-08-21 12:36:56][352375453614737][5990 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:37:26][357272990199097][0 ms][INFO] === Request start ===
[2025-08-21 12:37:26][357272990199097][1 ms][DEBUG] START check_frida
[2025-08-21 12:37:26][357272990199097][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:37:26][357272990199097][249 ms][DEBUG] SU: done in 248 ms; outroot          4632     1 2349136  50064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:37:26][357272990199097][249 ms][DEBUG] check_frida: running
[2025-08-21 12:37:26][357272990199097][249 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 12:37:26][357272990199097][249 ms][DEBUG] START check_scloud
[2025-08-21 12:37:26][357272990199097][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:37:26][357272990199097][546 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23509588 107856 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:37:26][357272990199097][546 ms][DEBUG] targetPkg: running
[2025-08-21 12:37:26][357272990199097][546 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:37:26][357272990199097][546 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:37:26][357272990199097][546 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MjcyOTkwMTk5MDk3IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dBMDBRMTBGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODE5In0='" -e "main()" -q"
[2025-08-21 12:37:26][357272990199097][546 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:37:26][357272990199097][546 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MjcyOTkwMTk5MDk3IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dBMDBRMTBGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODE5In0='" -e "main()" -q"
[2025-08-21 12:37:29][357272990199097][3404 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MjcyOTkwMTk5MDk3IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dBMDBRMTBGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODE5In0="\r\n
[2025-08-21 12:37:32][357272990199097][6763 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4d69df1-257c-4bbe-9ead-68346c939554","id":"QR_d4d69df1-257c-4bbe-9ead-68346c939554","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:37:32][357272990199097][6763 ms][DEBUG] proc_open done in 6217 ms; code=0; res.len=3152
[2025-08-21 12:37:32][357272990199097][6763 ms][DEBUG] END   runCmdUntilRes#1 in 6217 ms
[2025-08-21 12:37:32][357272990199097][6763 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:38:45][350013882221442][1 ms][INFO] === Request start ===
[2025-08-21 12:38:45][350013882221442][2 ms][DEBUG] START check_frida
[2025-08-21 12:38:45][350013882221442][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:38:45][350013882221442][285 ms][DEBUG] SU: done in 284 ms; outroot          4632     1 2332716  50044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:38:45][350013882221442][285 ms][DEBUG] check_frida: running
[2025-08-21 12:38:45][350013882221442][285 ms][DEBUG] END   check_frida in 284 ms
[2025-08-21 12:38:45][350013882221442][286 ms][DEBUG] START check_internet
[2025-08-21 12:38:45][350013882221442][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:38:45][350013882221442][660 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.708/252.708/252.708/0.000 ms\n
[2025-08-21 12:38:45][350013882221442][660 ms][DEBUG] check_internet: online
[2025-08-21 12:38:45][350013882221442][660 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 12:38:45][350013882221442][660 ms][DEBUG] START check_scloud
[2025-08-21 12:38:45][350013882221442][660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:38:46][350013882221442][957 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23509620 108068 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:38:46][350013882221442][957 ms][DEBUG] targetPkg: running
[2025-08-21 12:38:46][350013882221442][957 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:38:46][350013882221442][957 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:38:46][350013882221442][957 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgyMjIxNDQyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMjVaV1JWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI5MiJ9'" -e "main()" -q"
[2025-08-21 12:38:46][350013882221442][957 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:38:46][350013882221442][957 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgyMjIxNDQyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMjVaV1JWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI5MiJ9'" -e "main()" -q"
[2025-08-21 12:38:49][350013882221442][3769 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODgyMjIxNDQyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMjVaV1JWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI5MiJ9"\r\n
[2025-08-21 12:38:51][350013882221442][5784 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54639104-658c-4d98-981e-8f56672608cb","id":"QR_54639104-658c-4d98-981e-8f56672608cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:38:51][350013882221442][5785 ms][DEBUG] proc_open done in 4827 ms; code=0; res.len=3152
[2025-08-21 12:38:51][350013882221442][5785 ms][DEBUG] END   runCmdUntilRes#1 in 4827 ms
[2025-08-21 12:38:51][350013882221442][5785 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:40:07][350040120122694][0 ms][INFO] === Request start ===
[2025-08-21 12:40:07][350040120122694][1 ms][DEBUG] START check_frida
[2025-08-21 12:40:07][350040120122694][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:40:07][350040120122694][298 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716  50056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:40:07][350040120122694][298 ms][DEBUG] check_frida: running
[2025-08-21 12:40:07][350040120122694][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 12:40:07][350040120122694][298 ms][DEBUG] START check_internet
[2025-08-21 12:40:07][350040120122694][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:40:07][350040120122694][704 ms][DEBUG] SU: done in 405 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.234/202.234/202.234/0.000 ms\n
[2025-08-21 12:40:07][350040120122694][704 ms][DEBUG] check_internet: online
[2025-08-21 12:40:07][350040120122694][704 ms][DEBUG] END   check_internet in 406 ms
[2025-08-21 12:40:07][350040120122694][704 ms][DEBUG] START check_scloud
[2025-08-21 12:40:07][350040120122694][704 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:40:08][350040120122694][985 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23509652 108560 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:40:08][350040120122694][985 ms][DEBUG] targetPkg: running
[2025-08-21 12:40:08][350040120122694][985 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:40:08][350040120122694][985 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:40:08][350040120122694][985 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDQwMTIwMTIyNjk0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c5MTBZQTNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUwMCJ9'" -e "main()" -q"
[2025-08-21 12:40:08][350040120122694][985 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:40:08][350040120122694][985 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDQwMTIwMTIyNjk0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c5MTBZQTNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUwMCJ9'" -e "main()" -q"
[2025-08-21 12:40:10][350040120122694][3813 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDQwMTIwMTIyNjk0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c5MTBZQTNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUwMCJ9"\r\n
[2025-08-21 12:40:13][350040120122694][5937 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c9ef046-d75d-429b-ac1c-a1f5969889e2","id":"QR_3c9ef046-d75d-429b-ac1c-a1f5969889e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:40:13][350040120122694][5937 ms][DEBUG] proc_open done in 4952 ms; code=0; res.len=3152
[2025-08-21 12:40:13][350040120122694][5937 ms][DEBUG] END   runCmdUntilRes#1 in 4952 ms
[2025-08-21 12:40:13][350040120122694][5937 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:41:05][351813970863586][1 ms][INFO] === Request start ===
[2025-08-21 12:41:05][351813970863586][2 ms][DEBUG] START check_frida
[2025-08-21 12:41:05][351813970863586][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:41:05][351813970863586][287 ms][DEBUG] SU: done in 285 ms; outroot          4632     1 2348124  50032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:41:05][351813970863586][287 ms][DEBUG] check_frida: running
[2025-08-21 12:41:05][351813970863586][287 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 12:41:05][351813970863586][287 ms][DEBUG] START check_scloud
[2025-08-21 12:41:05][351813970863586][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:41:05][351813970863586][584 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23509684 109372 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:41:05][351813970863586][584 ms][DEBUG] targetPkg: running
[2025-08-21 12:41:05][351813970863586][584 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:41:05][351813970863586][584 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:41:05][351813970863586][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODEzOTcwODYzNTg2IiwibW9kZWwiOiJTTS1BMjY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzNEQ2WlZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTUwIn0='" -e "main()" -q"
[2025-08-21 12:41:05][351813970863586][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:41:05][351813970863586][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODEzOTcwODYzNTg2IiwibW9kZWwiOiJTTS1BMjY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzNEQ2WlZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTUwIn0='" -e "main()" -q"
[2025-08-21 12:41:08][351557140268586][1 ms][INFO] === Request start ===
[2025-08-21 12:41:08][351813970863586][3396 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODEzOTcwODYzNTg2IiwibW9kZWwiOiJTTS1BMjY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzNEQ2WlZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTUwIn0="\r\n
[2025-08-21 12:41:13][351813970863586][8238 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9960a03c-7d03-4a2a-966e-fa6a52c4decf","id":"QR_9960a03c-7d03-4a2a-966e-fa6a52c4decf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:41:13][351813970863586][8239 ms][DEBUG] proc_open done in 7654 ms; code=0; res.len=3152
[2025-08-21 12:41:13][351813970863586][8239 ms][DEBUG] END   runCmdUntilRes#1 in 7655 ms
[2025-08-21 12:41:13][351813970863586][8239 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:41:13][351557140268586][5065 ms][DEBUG] START check_frida
[2025-08-21 12:41:13][351557140268586][5065 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:41:13][351557140268586][5378 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2349136  50044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:41:13][351557140268586][5378 ms][DEBUG] check_frida: running
[2025-08-21 12:41:13][351557140268586][5378 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 12:41:13][351557140268586][5378 ms][DEBUG] START check_scloud
[2025-08-21 12:41:13][351557140268586][5378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:41:14][351557140268586][5690 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23509716 109940 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:41:14][351557140268586][5690 ms][DEBUG] targetPkg: running
[2025-08-21 12:41:14][351557140268586][5690 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 12:41:14][351557140268586][5690 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:41:14][351557140268586][5690 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTU3MTQwMjY4NTg2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MEczN0FLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzE4In0='" -e "main()" -q"
[2025-08-21 12:41:14][351557140268586][5690 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:41:14][351557140268586][5690 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTU3MTQwMjY4NTg2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MEczN0FLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzE4In0='" -e "main()" -q"
[2025-08-21 12:41:17][351557140268586][8486 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTU3MTQwMjY4NTg2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MEczN0FLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzE4In0="\r\n
[2025-08-21 12:41:19][351557140268586][10923 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16e4dbb1-1006-4751-a052-46f14e6b1699","id":"QR_16e4dbb1-1006-4751-a052-46f14e6b1699","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:41:19][351557140268586][10923 ms][DEBUG] proc_open done in 5233 ms; code=0; res.len=3152
[2025-08-21 12:41:19][351557140268586][10923 ms][DEBUG] END   runCmdUntilRes#1 in 5233 ms
[2025-08-21 12:41:19][351557140268586][10923 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:41:56][357181568132325][0 ms][INFO] === Request start ===
[2025-08-21 12:41:56][357181568132325][1 ms][DEBUG] START check_frida
[2025-08-21 12:41:56][357181568132325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:41:56][357181568132325][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2348124  50024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:41:56][357181568132325][294 ms][DEBUG] check_frida: running
[2025-08-21 12:41:56][357181568132325][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 12:41:56][357181568132325][294 ms][DEBUG] START check_scloud
[2025-08-21 12:41:56][357181568132325][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:41:57][357181568132325][591 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23509748 103512 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:41:57][357181568132325][591 ms][DEBUG] targetPkg: running
[2025-08-21 12:41:57][357181568132325][591 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:41:57][357181568132325][591 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:41:57][357181568132325][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MTgxNTY4MTMyMzI1IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI2OFgyMDNHVFlSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMTUyIn0='" -e "main()" -q"
[2025-08-21 12:41:57][357181568132325][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:41:57][357181568132325][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MTgxNTY4MTMyMzI1IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI2OFgyMDNHVFlSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMTUyIn0='" -e "main()" -q"
[2025-08-21 12:42:00][357181568132325][3434 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MTgxNTY4MTMyMzI1IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI2OFgyMDNHVFlSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMTUyIn0="\r\n
[2025-08-21 12:42:04][357181568132325][8292 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1767c9a6-0617-46a0-a5b2-b83bd501e344","id":"QR_1767c9a6-0617-46a0-a5b2-b83bd501e344","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:42:04][357181568132325][8292 ms][DEBUG] proc_open done in 7701 ms; code=0; res.len=3152
[2025-08-21 12:42:04][357181568132325][8292 ms][DEBUG] END   runCmdUntilRes#1 in 7701 ms
[2025-08-21 12:42:04][357181568132325][8293 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:42:44][355094841440575][0 ms][INFO] === Request start ===
[2025-08-21 12:42:44][355094841440575][1 ms][DEBUG] START check_frida
[2025-08-21 12:42:44][355094841440575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:42:44][355094841440575][269 ms][DEBUG] SU: done in 268 ms; outroot          4632     1 2332716  50060 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:42:44][355094841440575][269 ms][DEBUG] check_frida: running
[2025-08-21 12:42:44][355094841440575][269 ms][DEBUG] END   check_frida in 268 ms
[2025-08-21 12:42:44][355094841440575][269 ms][DEBUG] START check_internet
[2025-08-21 12:42:44][355094841440575][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:42:44][355094841440575][785 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.207/203.207/203.207/0.000 ms\n
[2025-08-21 12:42:44][355094841440575][785 ms][DEBUG] check_internet: online
[2025-08-21 12:42:44][355094841440575][785 ms][DEBUG] END   check_internet in 516 ms
[2025-08-21 12:42:44][355094841440575][785 ms][DEBUG] START check_scloud
[2025-08-21 12:42:44][355094841440575][785 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:42:45][355094841440575][1034 ms][DEBUG] SU: done in 249 ms; outu0_a118       7399 30745 23509780 104060 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:42:45][355094841440575][1034 ms][DEBUG] targetPkg: running
[2025-08-21 12:42:45][355094841440575][1034 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 12:42:45][355094841440575][1035 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:42:45][355094841440575][1035 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDk0ODQxNDQwNTc1IiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k1MVhRWVNYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NSJ9'" -e "main()" -q"
[2025-08-21 12:42:45][355094841440575][1035 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:42:45][355094841440575][1035 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDk0ODQxNDQwNTc1IiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k1MVhRWVNYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NSJ9'" -e "main()" -q"
[2025-08-21 12:42:48][355094841440575][3862 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDk0ODQxNDQwNTc1IiwibW9kZWwiOiJTTS1NMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k1MVhRWVNYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NSJ9"\r\n
[2025-08-21 12:42:50][355094841440575][6018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df6d1764-82e5-4869-97c0-cc72019310b7","id":"QR_df6d1764-82e5-4869-97c0-cc72019310b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:42:50][355094841440575][6018 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 12:42:50][355094841440575][6018 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 12:42:50][355094841440575][6018 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:43:40][350320362187138][1 ms][INFO] === Request start ===
[2025-08-21 12:43:40][350320362187138][2 ms][DEBUG] START check_frida
[2025-08-21 12:43:40][350320362187138][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:43:41][350320362187138][252 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2332716  50056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:43:41][350320362187138][252 ms][DEBUG] check_frida: running
[2025-08-21 12:43:41][350320362187138][252 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 12:43:41][350320362187138][252 ms][DEBUG] START check_scloud
[2025-08-21 12:43:41][350320362187138][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:43:41][350320362187138][533 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23509812 104708 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:43:41][350320362187138][533 ms][DEBUG] targetPkg: running
[2025-08-21 12:43:41][350320362187138][533 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:43:41][350320362187138][533 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:43:41][350320362187138][533 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzIwMzYyMTg3MTM4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMTdKTDFXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAyOSJ9'" -e "main()" -q"
[2025-08-21 12:43:41][350320362187138][533 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:43:41][350320362187138][533 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzIwMzYyMTg3MTM4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMTdKTDFXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAyOSJ9'" -e "main()" -q"
[2025-08-21 12:43:44][350320362187138][3360 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzIwMzYyMTg3MTM4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMTdKTDFXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAyOSJ9"\r\n
[2025-08-21 12:43:46][350320362187138][5704 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7c77c9e-fde3-4ef6-ba59-a30871f87909","id":"QR_e7c77c9e-fde3-4ef6-ba59-a30871f87909","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:43:46][350320362187138][5704 ms][DEBUG] proc_open done in 5171 ms; code=0; res.len=3152
[2025-08-21 12:43:46][350320362187138][5704 ms][DEBUG] END   runCmdUntilRes#1 in 5171 ms
[2025-08-21 12:43:46][350320362187138][5704 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:44:33][352208775806642][0 ms][INFO] === Request start ===
[2025-08-21 12:44:33][352208775806642][1 ms][DEBUG] START check_frida
[2025-08-21 12:44:33][352208775806642][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:44:33][352208775806642][296 ms][DEBUG] SU: done in 295 ms; outroot          4632     1 2332716  50068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:44:33][352208775806642][296 ms][DEBUG] check_frida: running
[2025-08-21 12:44:33][352208775806642][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 12:44:33][352208775806642][296 ms][DEBUG] START check_internet
[2025-08-21 12:44:33][352208775806642][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:44:33][352208775806642][657 ms][DEBUG] SU: done in 361 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.887/250.887/250.887/0.000 ms\n
[2025-08-21 12:44:33][352208775806642][658 ms][DEBUG] check_internet: online
[2025-08-21 12:44:33][352208775806642][658 ms][DEBUG] END   check_internet in 361 ms
[2025-08-21 12:44:33][352208775806642][658 ms][DEBUG] START check_scloud
[2025-08-21 12:44:33][352208775806642][658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:44:33][352208775806642][953 ms][DEBUG] SU: done in 295 ms; outu0_a118       7399 30745 23509844 105216 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:44:33][352208775806642][953 ms][DEBUG] targetPkg: running
[2025-08-21 12:44:33][352208775806642][953 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 12:44:33][352208775806642][953 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:44:33][352208775806642][953 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjA4Nzc1ODA2NjQyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMjUzU1BKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU0NCJ9'" -e "main()" -q"
[2025-08-21 12:44:33][352208775806642][953 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:44:33][352208775806642][953 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjA4Nzc1ODA2NjQyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMjUzU1BKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU0NCJ9'" -e "main()" -q"
[2025-08-21 12:44:36][352208775806642][3796 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjA4Nzc1ODA2NjQyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMjUzU1BKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU0NCJ9"\r\n
[2025-08-21 12:44:38][352208775806642][5498 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_daceffe7-6312-40fe-822b-6e08a593d1d6","id":"QR_daceffe7-6312-40fe-822b-6e08a593d1d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:44:38][352208775806642][5499 ms][DEBUG] proc_open done in 4546 ms; code=0; res.len=3152
[2025-08-21 12:44:38][352208775806642][5499 ms][DEBUG] END   runCmdUntilRes#1 in 4546 ms
[2025-08-21 12:44:38][352208775806642][5499 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:45:07][350263230070484][1 ms][INFO] === Request start ===
[2025-08-21 12:45:07][350263230070484][2 ms][DEBUG] START check_frida
[2025-08-21 12:45:07][350263230070484][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:45:08][350263230070484][301 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2332716  50080 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:45:08][350263230070484][301 ms][DEBUG] check_frida: running
[2025-08-21 12:45:08][350263230070484][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 12:45:08][350263230070484][301 ms][DEBUG] START check_scloud
[2025-08-21 12:45:08][350263230070484][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:45:08][350263230070484][613 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23509876 105764 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:45:08][350263230070484][613 ms][DEBUG] targetPkg: running
[2025-08-21 12:45:08][350263230070484][613 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 12:45:08][350263230070484][613 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:45:08][350263230070484][614 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjYzMjMwMDcwNDg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1g1MDFZSzlaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY4NCJ9'" -e "main()" -q"
[2025-08-21 12:45:08][350263230070484][614 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:45:08][350263230070484][614 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjYzMjMwMDcwNDg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1g1MDFZSzlaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY4NCJ9'" -e "main()" -q"
[2025-08-21 12:45:11][350263230070484][3441 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjYzMjMwMDcwNDg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSQ1g1MDFZSzlaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY4NCJ9"\r\n
[2025-08-21 12:45:13][350263230070484][5596 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9010f459-9588-40f9-9ad9-baecfd614a32","id":"QR_9010f459-9588-40f9-9ad9-baecfd614a32","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:45:13][350263230070484][5596 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 12:45:13][350263230070484][5596 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 12:45:13][350263230070484][5597 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:47:13][357967976310846][1 ms][INFO] === Request start ===
[2025-08-21 12:47:13][357967976310846][2 ms][DEBUG] START check_frida
[2025-08-21 12:47:13][357967976310846][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:47:13][357967976310846][303 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2332716  50064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:47:13][357967976310846][304 ms][DEBUG] check_frida: running
[2025-08-21 12:47:13][357967976310846][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 12:47:13][357967976310846][304 ms][DEBUG] START check_scloud
[2025-08-21 12:47:13][357967976310846][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:47:13][357967976310846][538 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23509908 106336 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:47:13][357967976310846][538 ms][DEBUG] targetPkg: running
[2025-08-21 12:47:13][357967976310846][538 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 12:47:13][357967976310846][538 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:47:13][357967976310846][538 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc2MzEwODQ2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMFBBOFZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk3MyJ9'" -e "main()" -q"
[2025-08-21 12:47:13][357967976310846][538 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:47:13][357967976310846][538 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc2MzEwODQ2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMFBBOFZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk3MyJ9'" -e "main()" -q"
[2025-08-21 12:47:16][357967976310846][3381 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTY3OTc2MzEwODQ2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMFBBOFZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk3MyJ9"\r\n
[2025-08-21 12:47:19][357967976310846][5896 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b2f7805-a533-4374-af86-9989c85da37a","id":"QR_6b2f7805-a533-4374-af86-9989c85da37a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:47:19][357967976310846][5896 ms][DEBUG] proc_open done in 5359 ms; code=0; res.len=3152
[2025-08-21 12:47:19][357967976310846][5896 ms][DEBUG] END   runCmdUntilRes#1 in 5359 ms
[2025-08-21 12:47:19][357967976310846][5896 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:47:20][356115231376191][0 ms][INFO] === Request start ===
[2025-08-21 12:47:20][356115231376191][1 ms][DEBUG] START check_frida
[2025-08-21 12:47:20][356115231376191][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:47:20][356115231376191][303 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2349136  50080 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:47:20][356115231376191][303 ms][DEBUG] check_frida: running
[2025-08-21 12:47:20][356115231376191][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 12:47:20][356115231376191][303 ms][DEBUG] START check_scloud
[2025-08-21 12:47:20][356115231376191][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:47:21][356115231376191][584 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23509940 106880 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:47:21][356115231376191][585 ms][DEBUG] targetPkg: running
[2025-08-21 12:47:21][356115231376191][585 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:47:21][356115231376191][585 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:47:21][356115231376191][585 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MTE1MjMxMzc2MTkxIiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1M0NONjNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2Nzc0In0='" -e "main()" -q"
[2025-08-21 12:47:21][356115231376191][585 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:47:21][356115231376191][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MTE1MjMxMzc2MTkxIiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1M0NONjNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2Nzc0In0='" -e "main()" -q"
[2025-08-21 12:47:23][356115231376191][3412 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MTE1MjMxMzc2MTkxIiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1M0NONjNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2Nzc0In0="\r\n
[2025-08-21 12:47:28][356115231376191][8020 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95bfe39b-6997-4224-b15f-ca6d04a42039","id":"QR_95bfe39b-6997-4224-b15f-ca6d04a42039","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:47:28][356115231376191][8021 ms][DEBUG] proc_open done in 7436 ms; code=0; res.len=3152
[2025-08-21 12:47:28][356115231376191][8021 ms][DEBUG] END   runCmdUntilRes#1 in 7436 ms
[2025-08-21 12:47:28][356115231376191][8021 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:48:17][356414815901346][0 ms][INFO] === Request start ===
[2025-08-21 12:48:17][356414815901346][1 ms][DEBUG] START check_frida
[2025-08-21 12:48:17][356414815901346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:48:17][356414815901346][304 ms][DEBUG] SU: done in 303 ms; outroot          4632     1 2332716  50144 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:48:17][356414815901346][304 ms][DEBUG] check_frida: running
[2025-08-21 12:48:17][356414815901346][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 12:48:17][356414815901346][304 ms][DEBUG] START check_internet
[2025-08-21 12:48:17][356414815901346][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:48:17][356414815901346][726 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.524/201.524/201.524/0.000 ms\n
[2025-08-21 12:48:17][356414815901346][726 ms][DEBUG] check_internet: online
[2025-08-21 12:48:17][356414815901346][726 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 12:48:17][356414815901346][726 ms][DEBUG] START check_scloud
[2025-08-21 12:48:17][356414815901346][726 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:48:18][356414815901346][1007 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23509972 107428 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:48:18][356414815901346][1007 ms][DEBUG] targetPkg: running
[2025-08-21 12:48:18][356414815901346][1007 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 12:48:18][356414815901346][1007 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:48:18][356414815901346][1007 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE1OTAxMzQ2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTE1In0='" -e "main()" -q"
[2025-08-21 12:48:18][356414815901346][1007 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:48:18][356414815901346][1008 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE1OTAxMzQ2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTE1In0='" -e "main()" -q"
[2025-08-21 12:48:20][356414815901346][3819 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE0ODE1OTAxMzQ2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDJKMzhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTE1In0="\r\n
[2025-08-21 12:48:24][356414815901346][7052 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3b10f6d-7951-4b9f-bc6b-84e027f3a547","id":"QR_e3b10f6d-7951-4b9f-bc6b-84e027f3a547","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:48:24][356414815901346][7052 ms][DEBUG] proc_open done in 6045 ms; code=0; res.len=3152
[2025-08-21 12:48:24][356414815901346][7052 ms][DEBUG] END   runCmdUntilRes#1 in 6045 ms
[2025-08-21 12:48:24][356414815901346][7052 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:48:56][354529385425392][1 ms][INFO] === Request start ===
[2025-08-21 12:48:56][354529385425392][2 ms][DEBUG] START check_frida
[2025-08-21 12:48:56][354529385425392][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:48:56][354529385425392][300 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716  50160 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:48:56][354529385425392][300 ms][DEBUG] check_frida: running
[2025-08-21 12:48:56][354529385425392][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 12:48:56][354529385425392][301 ms][DEBUG] START check_internet
[2025-08-21 12:48:56][354529385425392][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:48:57][354529385425392][613 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=213 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 213.247/213.247/213.247/0.000 ms\n
[2025-08-21 12:48:57][354529385425392][613 ms][DEBUG] check_internet: online
[2025-08-21 12:48:57][354529385425392][613 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 12:48:57][354529385425392][613 ms][DEBUG] START check_scloud
[2025-08-21 12:48:57][354529385425392][613 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:48:57][354529385425392][909 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23510004 107976 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:48:57][354529385425392][909 ms][DEBUG] targetPkg: running
[2025-08-21 12:48:57][354529385425392][909 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:48:57][354529385425392][909 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:48:57][354529385425392][910 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTI5Mzg1NDI1MzkyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcxMDE4QURSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAwNiJ9'" -e "main()" -q"
[2025-08-21 12:48:57][354529385425392][910 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:48:57][354529385425392][910 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTI5Mzg1NDI1MzkyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcxMDE4QURSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAwNiJ9'" -e "main()" -q"
[2025-08-21 12:49:00][354529385425392][3736 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTI5Mzg1NDI1MzkyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcxMDE4QURSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAwNiJ9"\r\n
[2025-08-21 12:49:02][354529385425392][5876 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_417df6ab-f604-40ba-bee6-a412a21d840d","id":"QR_417df6ab-f604-40ba-bee6-a412a21d840d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:49:02][354529385425392][5877 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 12:49:02][354529385425392][5877 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-21 12:49:02][354529385425392][5877 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:50:10][350938280475739][0 ms][INFO] === Request start ===
[2025-08-21 12:50:10][350938280475739][1 ms][DEBUG] START check_frida
[2025-08-21 12:50:10][350938280475739][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:50:10][350938280475739][305 ms][DEBUG] SU: done in 304 ms; outroot          4632     1 2332716  50100 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:50:10][350938280475739][305 ms][DEBUG] check_frida: running
[2025-08-21 12:50:10][350938280475739][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 12:50:10][350938280475739][305 ms][DEBUG] START check_internet
[2025-08-21 12:50:10][350938280475739][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:50:10][350938280475739][571 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=159 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 159.843/159.843/159.843/0.000 ms\n
[2025-08-21 12:50:10][350938280475739][571 ms][DEBUG] check_internet: online
[2025-08-21 12:50:10][350938280475739][571 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 12:50:10][350938280475739][571 ms][DEBUG] START check_scloud
[2025-08-21 12:50:10][350938280475739][571 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:50:11][350938280475739][821 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23510036 108888 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:50:11][350938280475739][821 ms][DEBUG] targetPkg: running
[2025-08-21 12:50:11][350938280475739][821 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 12:50:11][350938280475739][821 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:50:11][350938280475739][821 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4MjgwNDc1NzM5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMFFZU0dQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzA5NSJ9'" -e "main()" -q"
[2025-08-21 12:50:11][350938280475739][821 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:50:11][350938280475739][821 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4MjgwNDc1NzM5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMFFZU0dQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzA5NSJ9'" -e "main()" -q"
[2025-08-21 12:50:13][350938280475739][3632 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4MjgwNDc1NzM5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMFFZU0dQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzA5NSJ9"\r\n
[2025-08-21 12:50:16][350938280475739][5866 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3428ab3f-c2f1-4745-b6eb-7fef66d3f4a3","id":"QR_3428ab3f-c2f1-4745-b6eb-7fef66d3f4a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:50:16][350938280475739][5866 ms][DEBUG] proc_open done in 5046 ms; code=0; res.len=3152
[2025-08-21 12:50:16][350938280475739][5866 ms][DEBUG] END   runCmdUntilRes#1 in 5046 ms
[2025-08-21 12:50:16][350938280475739][5866 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:51:07][351521289018087][1 ms][INFO] === Request start ===
[2025-08-21 12:51:07][351521289018087][2 ms][DEBUG] START check_frida
[2025-08-21 12:51:07][351521289018087][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:51:07][351521289018087][248 ms][DEBUG] SU: done in 246 ms; outroot          4632     1 2332716  50064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:51:07][351521289018087][248 ms][DEBUG] check_frida: running
[2025-08-21 12:51:07][351521289018087][248 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 12:51:07][351521289018087][248 ms][DEBUG] START check_scloud
[2025-08-21 12:51:07][351521289018087][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:51:08][351521289018087][482 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23510068 109376 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:51:08][351521289018087][482 ms][DEBUG] targetPkg: running
[2025-08-21 12:51:08][351521289018087][482 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 12:51:08][351521289018087][482 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:51:08][351521289018087][482 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg5MDE4MDg3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MVdXRkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUwOSJ9'" -e "main()" -q"
[2025-08-21 12:51:08][351521289018087][482 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:51:08][351521289018087][482 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg5MDE4MDg3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MVdXRkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUwOSJ9'" -e "main()" -q"
[2025-08-21 12:51:10][351521289018087][3309 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTIxMjg5MDE4MDg3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MVdXRkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUwOSJ9"\r\n
[2025-08-21 12:51:12][351521289018087][5246 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3bd7165-aff4-46b5-8a0b-fceb8d3687f8","id":"QR_b3bd7165-aff4-46b5-8a0b-fceb8d3687f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:51:12][351521289018087][5246 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 12:51:12][351521289018087][5246 ms][DEBUG] END   runCmdUntilRes#1 in 4764 ms
[2025-08-21 12:51:12][351521289018087][5246 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:51:27][358625330667520][0 ms][INFO] === Request start ===
[2025-08-21 12:51:27][358625330667520][1 ms][DEBUG] START check_frida
[2025-08-21 12:51:27][358625330667520][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:51:28][358625330667520][283 ms][DEBUG] SU: done in 282 ms; outroot          4632     1 2332716  50056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:51:28][358625330667520][283 ms][DEBUG] check_frida: running
[2025-08-21 12:51:28][358625330667520][283 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 12:51:28][358625330667520][283 ms][DEBUG] START check_scloud
[2025-08-21 12:51:28][358625330667520][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:51:28][358625330667520][579 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23510100 104048 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:51:28][358625330667520][579 ms][DEBUG] targetPkg: running
[2025-08-21 12:51:28][358625330667520][580 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 12:51:28][358625330667520][580 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:51:28][358625330667520][580 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NjI1MzMwNjY3NTIwIiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1IxMTZSS0RWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDMxOCJ9'" -e "main()" -q"
[2025-08-21 12:51:28][358625330667520][580 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:51:28][358625330667520][580 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NjI1MzMwNjY3NTIwIiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1IxMTZSS0RWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDMxOCJ9'" -e "main()" -q"
[2025-08-21 12:51:31][358625330667520][3391 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NjI1MzMwNjY3NTIwIiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1IxMTZSS0RWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDMxOCJ9"\r\n
[2025-08-21 12:51:33][358625330667520][5641 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d501c4c-e3f6-4eea-9699-440b36cb0dfb","id":"QR_5d501c4c-e3f6-4eea-9699-440b36cb0dfb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:51:33][358625330667520][5641 ms][DEBUG] proc_open done in 5061 ms; code=0; res.len=3152
[2025-08-21 12:51:33][358625330667520][5641 ms][DEBUG] END   runCmdUntilRes#1 in 5061 ms
[2025-08-21 12:51:33][358625330667520][5641 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:52:05][351272336374566][0 ms][INFO] === Request start ===
[2025-08-21 12:52:05][351272336374566][1 ms][DEBUG] START check_frida
[2025-08-21 12:52:05][351272336374566][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:52:05][351272336374566][248 ms][DEBUG] SU: done in 247 ms; outroot          4632     1 2332716  50068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:52:05][351272336374566][248 ms][DEBUG] check_frida: running
[2025-08-21 12:52:05][351272336374566][248 ms][DEBUG] END   check_frida in 247 ms
[2025-08-21 12:52:05][351272336374566][248 ms][DEBUG] START check_internet
[2025-08-21 12:52:05][351272336374566][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:52:06][351272336374566][765 ms][DEBUG] SU: done in 517 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.350/202.350/202.350/0.000 ms\n
[2025-08-21 12:52:06][351272336374566][765 ms][DEBUG] check_internet: online
[2025-08-21 12:52:06][351272336374566][765 ms][DEBUG] END   check_internet in 517 ms
[2025-08-21 12:52:06][351272336374566][765 ms][DEBUG] START check_scloud
[2025-08-21 12:52:06][351272336374566][765 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:52:06][351272336374566][1014 ms][DEBUG] SU: done in 248 ms; outu0_a118       7399 30745 23510132 104592 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:52:06][351272336374566][1014 ms][DEBUG] targetPkg: running
[2025-08-21 12:52:06][351272336374566][1014 ms][DEBUG] END   check_scloud in 248 ms
[2025-08-21 12:52:06][351272336374566][1014 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:52:06][351272336374566][1014 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM2Mzc0NTY2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0ME5GVERKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzOSJ9'" -e "main()" -q"
[2025-08-21 12:52:06][351272336374566][1014 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:52:06][351272336374566][1014 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM2Mzc0NTY2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0ME5GVERKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzOSJ9'" -e "main()" -q"
[2025-08-21 12:52:09][351272336374566][3810 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcyMzM2Mzc0NTY2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0ME5GVERKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzOSJ9"\r\n
[2025-08-21 12:52:11][351272336374566][5918 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f9287b3-bd6a-41f8-8e99-1447aeb35532","id":"QR_0f9287b3-bd6a-41f8-8e99-1447aeb35532","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:52:11][351272336374566][5919 ms][DEBUG] proc_open done in 4904 ms; code=0; res.len=3152
[2025-08-21 12:52:11][351272336374566][5919 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 12:52:11][351272336374566][5919 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:52:18][352677100715621][0 ms][INFO] === Request start ===
[2025-08-21 12:52:18][352677100715621][1 ms][DEBUG] START check_frida
[2025-08-21 12:52:18][352677100715621][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:52:18][352677100715621][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  50124 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:52:18][352677100715621][297 ms][DEBUG] check_frida: running
[2025-08-21 12:52:18][352677100715621][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 12:52:18][352677100715621][297 ms][DEBUG] START check_internet
[2025-08-21 12:52:18][352677100715621][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:52:19][352677100715621][547 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.356/152.356/152.356/0.000 ms\n
[2025-08-21 12:52:19][352677100715621][547 ms][DEBUG] check_internet: online
[2025-08-21 12:52:19][352677100715621][547 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 12:52:19][352677100715621][547 ms][DEBUG] START check_scloud
[2025-08-21 12:52:19][352677100715621][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:52:19][352677100715621][844 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23510164 105144 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:52:19][352677100715621][844 ms][DEBUG] targetPkg: running
[2025-08-21 12:52:19][352677100715621][844 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:52:19][352677100715621][844 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:52:19][352677100715621][844 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3MTAwNzE1NjIxIiwibW9kZWwiOiJTTS1HOTc1TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzOU0zMFEwREJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVUMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTcxNSJ9'" -e "main()" -q"
[2025-08-21 12:52:19][352677100715621][844 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:52:19][352677100715621][844 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3MTAwNzE1NjIxIiwibW9kZWwiOiJTTS1HOTc1TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzOU0zMFEwREJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVUMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTcxNSJ9'" -e "main()" -q"
[2025-08-21 12:52:22][352677100715621][3672 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjc3MTAwNzE1NjIxIiwibW9kZWwiOiJTTS1HOTc1TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzOU0zMFEwREJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVUMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTcxNSJ9"\r\n
[2025-08-21 12:52:24][352677100715621][5499 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_088e7d47-c7fd-4e1f-8b2c-df71bb8da7f4","id":"QR_088e7d47-c7fd-4e1f-8b2c-df71bb8da7f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:52:24][352677100715621][5499 ms][DEBUG] proc_open done in 4655 ms; code=0; res.len=3152
[2025-08-21 12:52:24][352677100715621][5499 ms][DEBUG] END   runCmdUntilRes#1 in 4655 ms
[2025-08-21 12:52:24][352677100715621][5499 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:52:25][350551932881285][0 ms][INFO] === Request start ===
[2025-08-21 12:52:25][350551932881285][1 ms][DEBUG] START check_frida
[2025-08-21 12:52:25][350551932881285][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:52:25][350551932881285][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  50100 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:52:25][350551932881285][298 ms][DEBUG] check_frida: running
[2025-08-21 12:52:25][350551932881285][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 12:52:25][350551932881285][298 ms][DEBUG] START check_internet
[2025-08-21 12:52:25][350551932881285][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:52:26][350551932881285][673 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=262 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 262.276/262.276/262.276/0.000 ms\n
[2025-08-21 12:52:26][350551932881285][673 ms][DEBUG] check_internet: online
[2025-08-21 12:52:26][350551932881285][673 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 12:52:26][350551932881285][673 ms][DEBUG] START check_scloud
[2025-08-21 12:52:26][350551932881285][673 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:52:26][350551932881285][969 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23510196 105700 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:52:26][350551932881285][969 ms][DEBUG] targetPkg: running
[2025-08-21 12:52:26][350551932881285][969 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 12:52:26][350551932881285][969 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:52:26][350551932881285][969 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTUxOTMyODgxMjg1IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk2MDAzUzNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDczIn0='" -e "main()" -q"
[2025-08-21 12:52:26][350551932881285][969 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:52:26][350551932881285][969 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTUxOTMyODgxMjg1IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk2MDAzUzNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDczIn0='" -e "main()" -q"
[2025-08-21 12:52:29][350551932881285][3797 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTUxOTMyODgxMjg1IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk2MDAzUzNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDczIn0="\r\n
[2025-08-21 12:52:35][350551932881285][9670 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09e019bf-87aa-4f62-9b36-098c06704b4f","id":"QR_09e019bf-87aa-4f62-9b36-098c06704b4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:52:35][350551932881285][9671 ms][DEBUG] proc_open done in 8702 ms; code=0; res.len=3152
[2025-08-21 12:52:35][350551932881285][9671 ms][DEBUG] END   runCmdUntilRes#1 in 8702 ms
[2025-08-21 12:52:35][350551932881285][9671 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:53:08][351477975964136][1 ms][INFO] === Request start ===
[2025-08-21 12:53:08][351477975964136][2 ms][DEBUG] START check_frida
[2025-08-21 12:53:08][351477975964136][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:53:08][351477975964136][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2332716  50144 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:53:08][351477975964136][292 ms][DEBUG] check_frida: running
[2025-08-21 12:53:08][351477975964136][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 12:53:08][351477975964136][292 ms][DEBUG] START check_scloud
[2025-08-21 12:53:08][351477975964136][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:53:09][351477975964136][589 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23510228 106292 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:53:09][351477975964136][589 ms][DEBUG] targetPkg: running
[2025-08-21 12:53:09][351477975964136][589 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:53:09][351477975964136][589 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:53:09][351477975964136][589 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc1OTY0MTM2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMDlZUTJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU5MSJ9'" -e "main()" -q"
[2025-08-21 12:53:09][351477975964136][589 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:53:09][351477975964136][589 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc1OTY0MTM2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMDlZUTJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU5MSJ9'" -e "main()" -q"
[2025-08-21 12:53:12][351477975964136][3401 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDc3OTc1OTY0MTM2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMDlZUTJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU5MSJ9"\r\n
[2025-08-21 12:53:14][351477975964136][5525 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98ae2c3a-a8bc-4c4e-8e73-3be3b15c4d9b","id":"QR_98ae2c3a-a8bc-4c4e-8e73-3be3b15c4d9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:53:14][351477975964136][5526 ms][DEBUG] proc_open done in 4937 ms; code=0; res.len=3152
[2025-08-21 12:53:14][351477975964136][5526 ms][DEBUG] END   runCmdUntilRes#1 in 4937 ms
[2025-08-21 12:53:14][351477975964136][5526 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:53:18][354401161630621][0 ms][INFO] === Request start ===
[2025-08-21 12:53:18][354401161630621][1 ms][DEBUG] START check_frida
[2025-08-21 12:53:18][354401161630621][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:53:18][354401161630621][312 ms][DEBUG] SU: done in 311 ms; outroot          4632     1 2349136  50092 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:53:18][354401161630621][312 ms][DEBUG] check_frida: running
[2025-08-21 12:53:18][354401161630621][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 12:53:18][354401161630621][312 ms][DEBUG] START check_scloud
[2025-08-21 12:53:18][354401161630621][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:53:19][354401161630621][625 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23510260 106836 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:53:19][354401161630621][625 ms][DEBUG] targetPkg: running
[2025-08-21 12:53:19][354401161630621][625 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 12:53:19][354401161630621][625 ms][DEBUG] rawBody.length=1160
[2025-08-21 12:53:19][354401161630621][625 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDAxMTYxNjMwNjIxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhBMDVOREpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMTg1In0='" -e "main()" -q"
[2025-08-21 12:53:19][354401161630621][625 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:53:19][354401161630621][625 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDAxMTYxNjMwNjIxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhBMDVOREpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMTg1In0='" -e "main()" -q"
[2025-08-21 12:53:21][354401161630621][3421 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDAxMTYxNjMwNjIxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhBMDVOREpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMTg1In0="\r\n
[2025-08-21 12:53:25][354401161630621][6576 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14da279e-d6be-45a9-a966-037c40b9622a","id":"QR_14da279e-d6be-45a9-a966-037c40b9622a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:53:25][354401161630621][6576 ms][DEBUG] proc_open done in 5952 ms; code=0; res.len=3152
[2025-08-21 12:53:25][354401161630621][6576 ms][DEBUG] END   runCmdUntilRes#1 in 5952 ms
[2025-08-21 12:53:25][354401161630621][6576 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:53:30][353029493347548][0 ms][INFO] === Request start ===
[2025-08-21 12:53:30][353029493347548][1 ms][DEBUG] START check_frida
[2025-08-21 12:53:30][353029493347548][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:53:30][353029493347548][302 ms][DEBUG] SU: done in 301 ms; outroot          4632     1 2349136  50128 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:53:30][353029493347548][302 ms][DEBUG] check_frida: running
[2025-08-21 12:53:30][353029493347548][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 12:53:30][353029493347548][302 ms][DEBUG] START check_scloud
[2025-08-21 12:53:30][353029493347548][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:53:31][353029493347548][614 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23510292 107380 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:53:31][353029493347548][614 ms][DEBUG] targetPkg: running
[2025-08-21 12:53:31][353029493347548][614 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 12:53:31][353029493347548][614 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:53:31][353029493347548][614 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI5NDkzMzQ3NTQ4IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMkNOMlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc5NCJ9'" -e "main()" -q"
[2025-08-21 12:53:31][353029493347548][614 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:53:31][353029493347548][614 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI5NDkzMzQ3NTQ4IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMkNOMlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc5NCJ9'" -e "main()" -q"
[2025-08-21 12:53:33][353029493347548][3441 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDI5NDkzMzQ3NTQ4IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMkNOMlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc5NCJ9"\r\n
[2025-08-21 12:53:36][353029493347548][5660 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_daefda13-1ecc-466a-9693-5b2e98d6b2df","id":"QR_daefda13-1ecc-466a-9693-5b2e98d6b2df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:53:36][353029493347548][5660 ms][DEBUG] proc_open done in 5046 ms; code=0; res.len=3152
[2025-08-21 12:53:36][353029493347548][5660 ms][DEBUG] END   runCmdUntilRes#1 in 5046 ms
[2025-08-21 12:53:36][353029493347548][5661 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:53:56][353302728227508][0 ms][INFO] === Request start ===
[2025-08-21 12:53:56][353302728227508][1 ms][DEBUG] START check_frida
[2025-08-21 12:53:56][353302728227508][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:53:56][353302728227508][311 ms][DEBUG] SU: done in 310 ms; outroot          4632     1 2332716  50112 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:53:56][353302728227508][311 ms][DEBUG] check_frida: running
[2025-08-21 12:53:56][353302728227508][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 12:53:56][353302728227508][311 ms][DEBUG] START check_scloud
[2025-08-21 12:53:56][353302728227508][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:53:57][353302728227508][608 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23510324 107928 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:53:57][353302728227508][608 ms][DEBUG] targetPkg: running
[2025-08-21 12:53:57][353302728227508][608 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 12:53:57][353302728227508][608 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:53:57][353302728227508][608 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzAyNzI4MjI3NTA4IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzNEZWU0tZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUzMyJ9'" -e "main()" -q"
[2025-08-21 12:53:57][353302728227508][608 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:53:57][353302728227508][608 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzAyNzI4MjI3NTA4IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzNEZWU0tZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUzMyJ9'" -e "main()" -q"
[2025-08-21 12:53:59][353302728227508][3419 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzAyNzI4MjI3NTA4IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzNEZWU0tZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUzMyJ9"\r\n
[2025-08-21 12:54:01][353302728227508][5278 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd107bd6-b7a5-41c9-a7c5-daab5bea2a49","id":"QR_bd107bd6-b7a5-41c9-a7c5-daab5bea2a49","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:54:01][353302728227508][5279 ms][DEBUG] proc_open done in 4670 ms; code=0; res.len=3152
[2025-08-21 12:54:01][353302728227508][5279 ms][DEBUG] END   runCmdUntilRes#1 in 4671 ms
[2025-08-21 12:54:01][353302728227508][5279 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:56:05][353302727454921][1 ms][INFO] === Request start ===
[2025-08-21 12:56:05][353302727454921][2 ms][DEBUG] START check_frida
[2025-08-21 12:56:05][353302727454921][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:56:06][353302727454921][252 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2332716  50136 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:56:06][353302727454921][252 ms][DEBUG] check_frida: running
[2025-08-21 12:56:06][353302727454921][252 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 12:56:06][353302727454921][252 ms][DEBUG] START check_internet
[2025-08-21 12:56:06][353302727454921][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:56:06][353302727454921][767 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.499/202.499/202.499/0.000 ms\n
[2025-08-21 12:56:06][353302727454921][767 ms][DEBUG] check_internet: online
[2025-08-21 12:56:06][353302727454921][767 ms][DEBUG] END   check_internet in 516 ms
[2025-08-21 12:56:06][353302727454921][767 ms][DEBUG] START check_scloud
[2025-08-21 12:56:06][353302727454921][767 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:56:06][353302727454921][1017 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23510356 108476 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:56:06][353302727454921][1017 ms][DEBUG] targetPkg: running
[2025-08-21 12:56:06][353302727454921][1017 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 12:56:06][353302727454921][1017 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:56:06][353302727454921][1017 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzAyNzI3NDU0OTIxIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNENXQ05QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUxOCJ9'" -e "main()" -q"
[2025-08-21 12:56:06][353302727454921][1017 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:56:06][353302727454921][1017 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzAyNzI3NDU0OTIxIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNENXQ05QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUxOCJ9'" -e "main()" -q"
[2025-08-21 12:56:09][353302727454921][3844 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzAyNzI3NDU0OTIxIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNENXQ05QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUxOCJ9"\r\n
[2025-08-21 12:56:11][353302727454921][5719 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a262195-3ef3-4d19-87f8-c7d4f4ce48e5","id":"QR_5a262195-3ef3-4d19-87f8-c7d4f4ce48e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:56:11][353302727454921][5719 ms][DEBUG] proc_open done in 4702 ms; code=0; res.len=3152
[2025-08-21 12:56:11][353302727454921][5719 ms][DEBUG] END   runCmdUntilRes#1 in 4702 ms
[2025-08-21 12:56:11][353302727454921][5719 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:56:14][353791805182687][0 ms][INFO] === Request start ===
[2025-08-21 12:56:14][353791805182687][1 ms][DEBUG] START check_frida
[2025-08-21 12:56:14][353791805182687][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:56:14][353791805182687][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2349136  50072 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:56:14][353791805182687][294 ms][DEBUG] check_frida: running
[2025-08-21 12:56:14][353791805182687][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 12:56:14][353791805182687][295 ms][DEBUG] START check_internet
[2025-08-21 12:56:14][353791805182687][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:56:14][353791805182687][607 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.247/192.247/192.247/0.000 ms\n
[2025-08-21 12:56:14][353791805182687][607 ms][DEBUG] check_internet: online
[2025-08-21 12:56:14][353791805182687][607 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 12:56:14][353791805182687][607 ms][DEBUG] START check_scloud
[2025-08-21 12:56:14][353791805182687][607 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:56:14][353791805182687][857 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23510388 109028 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:56:14][353791805182687][857 ms][DEBUG] targetPkg: running
[2025-08-21 12:56:14][353791805182687][857 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 12:56:14][353791805182687][857 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:56:14][353791805182687][857 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzkxODA1MTgyNjg3IiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MDA0SEhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM0NyJ9'" -e "main()" -q"
[2025-08-21 12:56:14][353791805182687][857 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:56:14][353791805182687][857 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzkxODA1MTgyNjg3IiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MDA0SEhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM0NyJ9'" -e "main()" -q"
[2025-08-21 12:56:17][353791805182687][3684 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNzkxODA1MTgyNjg3IiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MDA0SEhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM0NyJ9"\r\n
[2025-08-21 12:56:19][353791805182687][5762 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5738f02-a89b-4938-b6bd-b75076a4039f","id":"QR_c5738f02-a89b-4938-b6bd-b75076a4039f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:56:19][353791805182687][5762 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 12:56:19][353791805182687][5762 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 12:56:19][353791805182687][5762 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:56:49][350320368807614][0 ms][INFO] === Request start ===
[2025-08-21 12:56:49][350320368807614][1 ms][DEBUG] START check_frida
[2025-08-21 12:56:49][350320368807614][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:56:50][350320368807614][252 ms][DEBUG] SU: done in 251 ms; outroot          4632     1 2332716  50152 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:56:50][350320368807614][252 ms][DEBUG] check_frida: running
[2025-08-21 12:56:50][350320368807614][252 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 12:56:50][350320368807614][252 ms][DEBUG] START check_internet
[2025-08-21 12:56:50][350320368807614][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:56:50][350320368807614][580 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.103/239.103/239.103/0.000 ms\n
[2025-08-21 12:56:50][350320368807614][580 ms][DEBUG] check_internet: online
[2025-08-21 12:56:50][350320368807614][580 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 12:56:50][350320368807614][580 ms][DEBUG] START check_scloud
[2025-08-21 12:56:50][350320368807614][580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:56:50][350320368807614][830 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23510420 104456 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:56:50][350320368807614][830 ms][DEBUG] targetPkg: running
[2025-08-21 12:56:50][350320368807614][830 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 12:56:50][350320368807614][830 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:56:50][350320368807614][830 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzIwMzY4ODA3NjE0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MU4xSExCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQxNSJ9'" -e "main()" -q"
[2025-08-21 12:56:50][350320368807614][830 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:56:50][350320368807614][830 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzIwMzY4ODA3NjE0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MU4xSExCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQxNSJ9'" -e "main()" -q"
[2025-08-21 12:56:53][350320368807614][3642 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzIwMzY4ODA3NjE0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MU4xSExCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQxNSJ9"\r\n
[2025-08-21 12:56:55][350320368807614][5376 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b19ef82-3128-4993-9852-28cdccc94b79","id":"QR_2b19ef82-3128-4993-9852-28cdccc94b79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:56:55][350320368807614][5376 ms][DEBUG] proc_open done in 4546 ms; code=0; res.len=3152
[2025-08-21 12:56:55][350320368807614][5376 ms][DEBUG] END   runCmdUntilRes#1 in 4546 ms
[2025-08-21 12:56:55][350320368807614][5376 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:58:06][350025490776716][1 ms][INFO] === Request start ===
[2025-08-21 12:58:06][350025490776716][1 ms][DEBUG] START check_frida
[2025-08-21 12:58:06][350025490776716][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:58:06][350025490776716][301 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716  50068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:58:06][350025490776716][301 ms][DEBUG] check_frida: running
[2025-08-21 12:58:06][350025490776716][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 12:58:06][350025490776716][301 ms][DEBUG] START check_internet
[2025-08-21 12:58:06][350025490776716][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 12:58:07][350025490776716][660 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.192/256.192/256.192/0.000 ms\n
[2025-08-21 12:58:07][350025490776716][661 ms][DEBUG] check_internet: online
[2025-08-21 12:58:07][350025490776716][661 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 12:58:07][350025490776716][661 ms][DEBUG] START check_scloud
[2025-08-21 12:58:07][350025490776716][661 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:58:07][350025490776716][926 ms][DEBUG] SU: done in 265 ms; outu0_a118       7399 30745 23510452 105272 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:58:07][350025490776716][926 ms][DEBUG] targetPkg: running
[2025-08-21 12:58:07][350025490776716][926 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 12:58:07][350025490776716][926 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:58:07][350025490776716][926 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI1NDkwNzc2NzE2IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMDFLTFdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM0NyJ9'" -e "main()" -q"
[2025-08-21 12:58:07][350025490776716][926 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:58:07][350025490776716][926 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI1NDkwNzc2NzE2IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMDFLTFdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM0NyJ9'" -e "main()" -q"
[2025-08-21 12:58:10][350025490776716][3769 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDI1NDkwNzc2NzE2IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMDFLTFdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM0NyJ9"\r\n
[2025-08-21 12:58:12][350025490776716][5893 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f49608e5-5849-45de-bf0a-f9c0d53462cf","id":"QR_f49608e5-5849-45de-bf0a-f9c0d53462cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:58:12][350025490776716][5893 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 12:58:12][350025490776716][5893 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-21 12:58:12][350025490776716][5893 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:59:05][354656350396777][1 ms][INFO] === Request start ===
[2025-08-21 12:59:05][354656350396777][2 ms][DEBUG] START check_frida
[2025-08-21 12:59:05][354656350396777][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:59:05][354656350396777][263 ms][DEBUG] SU: done in 261 ms; outroot          4632     1 2332716  50144 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:59:05][354656350396777][263 ms][DEBUG] check_frida: running
[2025-08-21 12:59:05][354656350396777][263 ms][DEBUG] END   check_frida in 261 ms
[2025-08-21 12:59:05][354656350396777][263 ms][DEBUG] START check_scloud
[2025-08-21 12:59:05][354656350396777][263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:59:05][354656350396777][575 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23510484 105824 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:59:05][354656350396777][575 ms][DEBUG] targetPkg: running
[2025-08-21 12:59:05][354656350396777][575 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 12:59:05][354656350396777][575 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:59:05][354656350396777][576 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NjU2MzUwMzk2Nzc3IiwibW9kZWwiOiJTTS1TOTAxRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q2Mlg2Q0VQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkwOCJ9'" -e "main()" -q"
[2025-08-21 12:59:05][354656350396777][576 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:59:05][354656350396777][576 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NjU2MzUwMzk2Nzc3IiwibW9kZWwiOiJTTS1TOTAxRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q2Mlg2Q0VQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkwOCJ9'" -e "main()" -q"
[2025-08-21 12:59:08][354656350396777][3434 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NjU2MzUwMzk2Nzc3IiwibW9kZWwiOiJTTS1TOTAxRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q2Mlg2Q0VQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkwOCJ9"\r\n
[2025-08-21 12:59:10][354656350396777][5261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24a4c195-20d5-4909-b1af-b3edad013a9b","id":"QR_24a4c195-20d5-4909-b1af-b3edad013a9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:59:10][354656350396777][5261 ms][DEBUG] proc_open done in 4685 ms; code=0; res.len=3152
[2025-08-21 12:59:10][354656350396777][5261 ms][DEBUG] END   runCmdUntilRes#1 in 4686 ms
[2025-08-21 12:59:10][354656350396777][5261 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 12:59:38][352682506125391][0 ms][INFO] === Request start ===
[2025-08-21 12:59:38][352682506125391][1 ms][DEBUG] START check_frida
[2025-08-21 12:59:38][352682506125391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 12:59:39][352682506125391][279 ms][DEBUG] SU: done in 277 ms; outroot          4632     1 2332716  50132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 12:59:39][352682506125391][279 ms][DEBUG] check_frida: running
[2025-08-21 12:59:39][352682506125391][279 ms][DEBUG] END   check_frida in 278 ms
[2025-08-21 12:59:39][352682506125391][279 ms][DEBUG] START check_scloud
[2025-08-21 12:59:39][352682506125391][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 12:59:39][352682506125391][591 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23510516 106360 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 12:59:39][352682506125391][591 ms][DEBUG] targetPkg: running
[2025-08-21 12:59:39][352682506125391][591 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 12:59:39][352682506125391][591 ms][DEBUG] rawBody.length=1161
[2025-08-21 12:59:39][352682506125391][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjgyNTA2MTI1MzkxIiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQxME4wUE1MIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFR1kiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQwNyJ9'" -e "main()" -q"
[2025-08-21 12:59:39][352682506125391][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 12:59:39][352682506125391][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjgyNTA2MTI1MzkxIiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQxME4wUE1MIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFR1kiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQwNyJ9'" -e "main()" -q"
[2025-08-21 12:59:42][352682506125391][3418 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjgyNTA2MTI1MzkxIiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQxME4wUE1MIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFR1kiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQwNyJ9"\r\n
[2025-08-21 12:59:44][352682506125391][5574 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_612220e9-a77d-43a9-accd-70444920721d","id":"QR_612220e9-a77d-43a9-accd-70444920721d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 12:59:44][352682506125391][5574 ms][DEBUG] proc_open done in 4983 ms; code=0; res.len=3152
[2025-08-21 12:59:44][352682506125391][5574 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 12:59:44][352682506125391][5574 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:01:07][354120809432105][1 ms][INFO] === Request start ===
[2025-08-21 13:01:07][354120809432105][2 ms][DEBUG] START check_frida
[2025-08-21 13:01:07][354120809432105][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:01:07][354120809432105][306 ms][DEBUG] SU: done in 304 ms; outroot          4632     1 2332716  50124 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:01:07][354120809432105][306 ms][DEBUG] check_frida: running
[2025-08-21 13:01:07][354120809432105][306 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 13:01:07][354120809432105][306 ms][DEBUG] START check_scloud
[2025-08-21 13:01:07][354120809432105][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:01:07][354120809432105][602 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23510548 106892 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:01:07][354120809432105][602 ms][DEBUG] targetPkg: running
[2025-08-21 13:01:07][354120809432105][602 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 13:01:07][354120809432105][602 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:01:07][354120809432105][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTIwODA5NDMyMTA1IiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MEtESjBSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5NiJ9'" -e "main()" -q"
[2025-08-21 13:01:07][354120809432105][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:01:07][354120809432105][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTIwODA5NDMyMTA1IiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MEtESjBSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5NiJ9'" -e "main()" -q"
[2025-08-21 13:01:10][354120809432105][3414 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTIwODA5NDMyMTA1IiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MEtESjBSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5NiJ9"\r\n
[2025-08-21 13:01:12][354120809432105][5523 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb36bfd4-eda3-486a-a8ac-13d717902ccb","id":"QR_cb36bfd4-eda3-486a-a8ac-13d717902ccb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:01:12][354120809432105][5524 ms][DEBUG] proc_open done in 4921 ms; code=0; res.len=3152
[2025-08-21 13:01:12][354120809432105][5524 ms][DEBUG] END   runCmdUntilRes#1 in 4921 ms
[2025-08-21 13:01:12][354120809432105][5524 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:02:21][354048741733274][0 ms][INFO] === Request start ===
[2025-08-21 13:02:21][354048741733274][1 ms][DEBUG] START check_frida
[2025-08-21 13:02:21][354048741733274][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:02:21][354048741733274][301 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2332716  50140 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:02:21][354048741733274][301 ms][DEBUG] check_frida: running
[2025-08-21 13:02:21][354048741733274][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 13:02:21][354048741733274][302 ms][DEBUG] START check_internet
[2025-08-21 13:02:21][354048741733274][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:02:22][354048741733274][754 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.532/202.532/202.532/0.000 ms\n
[2025-08-21 13:02:22][354048741733274][754 ms][DEBUG] check_internet: online
[2025-08-21 13:02:22][354048741733274][754 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 13:02:22][354048741733274][754 ms][DEBUG] START check_scloud
[2025-08-21 13:02:22][354048741733274][754 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:02:22][354048741733274][990 ms][DEBUG] SU: done in 236 ms; outu0_a118       7399 30745 23510580 107552 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:02:22][354048741733274][990 ms][DEBUG] targetPkg: running
[2025-08-21 13:02:22][354048741733274][990 ms][DEBUG] END   check_scloud in 236 ms
[2025-08-21 13:02:22][354048741733274][990 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:02:22][354048741733274][991 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDQ4NzQxNzMzMjc0IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MU1GSEJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMzMCJ9'" -e "main()" -q"
[2025-08-21 13:02:22][354048741733274][991 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:02:22][354048741733274][991 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDQ4NzQxNzMzMjc0IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MU1GSEJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMzMCJ9'" -e "main()" -q"
[2025-08-21 13:02:25][354048741733274][3816 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDQ4NzQxNzMzMjc0IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MU1GSEJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMzMCJ9"\r\n
[2025-08-21 13:02:27][354048741733274][6268 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77d2ef34-84e4-40ee-95d3-a7eb5aaea4ce","id":"QR_77d2ef34-84e4-40ee-95d3-a7eb5aaea4ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:02:27][354048741733274][6269 ms][DEBUG] proc_open done in 5278 ms; code=0; res.len=3152
[2025-08-21 13:02:27][354048741733274][6269 ms][DEBUG] END   runCmdUntilRes#1 in 5279 ms
[2025-08-21 13:02:27][354048741733274][6269 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:03:09][351397294952697][1 ms][INFO] === Request start ===
[2025-08-21 13:03:09][351397294952697][2 ms][DEBUG] START check_frida
[2025-08-21 13:03:09][351397294952697][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:03:09][351397294952697][247 ms][DEBUG] SU: done in 246 ms; outroot          4632     1 2332716  50168 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:03:09][351397294952697][247 ms][DEBUG] check_frida: running
[2025-08-21 13:03:09][351397294952697][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 13:03:09][351397294952697][248 ms][DEBUG] START check_scloud
[2025-08-21 13:03:09][351397294952697][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:03:10][351397294952697][560 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23510612 108056 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:03:10][351397294952697][560 ms][DEBUG] targetPkg: running
[2025-08-21 13:03:10][351397294952697][560 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 13:03:10][351397294952697][560 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:03:10][351397294952697][560 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzk3Mjk0OTUyNjk3IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFIyMVA3VkxLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUgiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAzMCJ9'" -e "main()" -q"
[2025-08-21 13:03:10][351397294952697][560 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:03:10][351397294952697][560 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzk3Mjk0OTUyNjk3IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFIyMVA3VkxLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUgiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAzMCJ9'" -e "main()" -q"
[2025-08-21 13:03:13][351397294952697][3387 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzk3Mjk0OTUyNjk3IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFIyMVA3VkxLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUgiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAzMCJ9"\r\n
[2025-08-21 13:03:15][351397294952697][5762 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbb09fde-8ad3-4dde-937d-5a919c469896","id":"QR_bbb09fde-8ad3-4dde-937d-5a919c469896","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:03:15][351397294952697][5762 ms][DEBUG] proc_open done in 5202 ms; code=0; res.len=3152
[2025-08-21 13:03:15][351397294952697][5762 ms][DEBUG] END   runCmdUntilRes#1 in 5202 ms
[2025-08-21 13:03:15][351397294952697][5762 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:04:08][352737401753042][0 ms][INFO] === Request start ===
[2025-08-21 13:04:08][352737401753042][1 ms][DEBUG] START check_frida
[2025-08-21 13:04:08][352737401753042][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:04:08][352737401753042][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2332716  50076 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:04:08][352737401753042][294 ms][DEBUG] check_frida: running
[2025-08-21 13:04:08][352737401753042][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 13:04:08][352737401753042][295 ms][DEBUG] START check_internet
[2025-08-21 13:04:08][352737401753042][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:04:08][352737401753042][668 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.100/260.100/260.100/0.000 ms\n
[2025-08-21 13:04:08][352737401753042][668 ms][DEBUG] check_internet: online
[2025-08-21 13:04:08][352737401753042][668 ms][DEBUG] END   check_internet in 373 ms
[2025-08-21 13:04:08][352737401753042][668 ms][DEBUG] START check_scloud
[2025-08-21 13:04:08][352737401753042][668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:04:09][352737401753042][902 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23510644 108632 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:04:09][352737401753042][902 ms][DEBUG] targetPkg: running
[2025-08-21 13:04:09][352737401753042][902 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 13:04:09][352737401753042][902 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:04:09][352737401753042][902 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzM3NDAxNzUzMDQyIiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDNEJTUkhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM2OSJ9'" -e "main()" -q"
[2025-08-21 13:04:09][352737401753042][902 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:04:09][352737401753042][902 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzM3NDAxNzUzMDQyIiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDNEJTUkhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM2OSJ9'" -e "main()" -q"
[2025-08-21 13:04:11][352737401753042][3714 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzM3NDAxNzUzMDQyIiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDNEJTUkhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM2OSJ9"\r\n
[2025-08-21 13:04:13][352737401753042][5573 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fbb69899-5f13-4ccb-8f48-60c6d56c8297","id":"QR_fbb69899-5f13-4ccb-8f48-60c6d56c8297","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:04:13][352737401753042][5573 ms][DEBUG] proc_open done in 4671 ms; code=0; res.len=3152
[2025-08-21 13:04:13][352737401753042][5573 ms][DEBUG] END   runCmdUntilRes#1 in 4671 ms
[2025-08-21 13:04:13][352737401753042][5573 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:06:00][357967971182141][1 ms][INFO] === Request start ===
[2025-08-21 13:06:00][357967971182141][2 ms][DEBUG] START check_frida
[2025-08-21 13:06:00][357967971182141][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:06:00][357967971182141][255 ms][DEBUG] SU: done in 253 ms; outroot          4632     1 2332716  50084 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:06:00][357967971182141][255 ms][DEBUG] check_frida: running
[2025-08-21 13:06:00][357967971182141][255 ms][DEBUG] END   check_frida in 253 ms
[2025-08-21 13:06:00][357967971182141][255 ms][DEBUG] START check_internet
[2025-08-21 13:06:00][357967971182141][255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:06:00][357967971182141][723 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.819/203.819/203.819/0.000 ms\n
[2025-08-21 13:06:00][357967971182141][723 ms][DEBUG] check_internet: online
[2025-08-21 13:06:00][357967971182141][723 ms][DEBUG] END   check_internet in 468 ms
[2025-08-21 13:06:00][357967971182141][723 ms][DEBUG] START check_scloud
[2025-08-21 13:06:00][357967971182141][723 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:06:01][357967971182141][1005 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23510676 105160 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:06:01][357967971182141][1005 ms][DEBUG] targetPkg: running
[2025-08-21 13:06:01][357967971182141][1005 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 13:06:01][357967971182141][1005 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:06:01][357967971182141][1005 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTcxMTgyMTQxIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMDNNMk5SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjM1NyJ9'" -e "main()" -q"
[2025-08-21 13:06:01][357967971182141][1005 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:06:01][357967971182141][1005 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTcxMTgyMTQxIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMDNNMk5SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjM1NyJ9'" -e "main()" -q"
[2025-08-21 13:06:03][357967971182141][3848 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTY3OTcxMTgyMTQxIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMDNNMk5SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjM1NyJ9"\r\n
[2025-08-21 13:06:05][357967971182141][5863 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5f485a4-8c27-4ed9-93e1-655456d80c89","id":"QR_c5f485a4-8c27-4ed9-93e1-655456d80c89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:06:05][357967971182141][5863 ms][DEBUG] proc_open done in 4858 ms; code=0; res.len=3152
[2025-08-21 13:06:05][357967971182141][5863 ms][DEBUG] END   runCmdUntilRes#1 in 4858 ms
[2025-08-21 13:06:05][357967971182141][5863 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:08:09][351890470519322][1 ms][INFO] === Request start ===
[2025-08-21 13:08:09][351890470519322][2 ms][DEBUG] START check_frida
[2025-08-21 13:08:09][351890470519322][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:08:09][351890470519322][308 ms][DEBUG] SU: done in 306 ms; outroot          4632     1 2332716  50156 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:08:09][351890470519322][308 ms][DEBUG] check_frida: running
[2025-08-21 13:08:09][351890470519322][308 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 13:08:09][351890470519322][308 ms][DEBUG] START check_internet
[2025-08-21 13:08:09][351890470519322][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:08:09][351890470519322][651 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.362/248.362/248.362/0.000 ms\n
[2025-08-21 13:08:09][351890470519322][651 ms][DEBUG] check_internet: online
[2025-08-21 13:08:09][351890470519322][651 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 13:08:09][351890470519322][652 ms][DEBUG] START check_scloud
[2025-08-21 13:08:09][351890470519322][652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:08:10][351890470519322][933 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23510708 105712 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:08:10][351890470519322][933 ms][DEBUG] targetPkg: running
[2025-08-21 13:08:10][351890470519322][933 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 13:08:10][351890470519322][933 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:08:10][351890470519322][933 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODkwNDcwNTE5MzIyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MjRKMlNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQ4MCJ9'" -e "main()" -q"
[2025-08-21 13:08:10][351890470519322][933 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:08:10][351890470519322][933 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODkwNDcwNTE5MzIyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MjRKMlNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQ4MCJ9'" -e "main()" -q"
[2025-08-21 13:08:13][351890470519322][3745 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODkwNDcwNTE5MzIyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MjRKMlNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQ4MCJ9"\r\n
[2025-08-21 13:08:15][351890470519322][6057 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6cca38bb-d567-40b6-931c-ba9b31febb3b","id":"QR_6cca38bb-d567-40b6-931c-ba9b31febb3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:08:15][351890470519322][6057 ms][DEBUG] proc_open done in 5124 ms; code=0; res.len=3152
[2025-08-21 13:08:15][351890470519322][6057 ms][DEBUG] END   runCmdUntilRes#1 in 5125 ms
[2025-08-21 13:08:15][351890470519322][6057 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:09:06][351978522161571][0 ms][INFO] === Request start ===
[2025-08-21 13:09:06][351978522161571][1 ms][DEBUG] START check_frida
[2025-08-21 13:09:06][351978522161571][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:09:06][351978522161571][258 ms][DEBUG] SU: done in 257 ms; outroot          4632     1 2332716  50112 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:09:06][351978522161571][258 ms][DEBUG] check_frida: running
[2025-08-21 13:09:06][351978522161571][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 13:09:06][351978522161571][258 ms][DEBUG] START check_scloud
[2025-08-21 13:09:06][351978522161571][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:09:06][351978522161571][555 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23510740 106288 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:09:06][351978522161571][555 ms][DEBUG] targetPkg: running
[2025-08-21 13:09:06][351978522161571][555 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:09:06][351978522161571][555 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:09:06][351978522161571][555 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIyMTYxNTcxIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMDVYVzNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc1MyJ9'" -e "main()" -q"
[2025-08-21 13:09:06][351978522161571][555 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:09:06][351978522161571][555 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIyMTYxNTcxIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMDVYVzNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc1MyJ9'" -e "main()" -q"
[2025-08-21 13:09:09][351978522161571][3382 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxOTc4NTIyMTYxNTcxIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMDVYVzNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc1MyJ9"\r\n
[2025-08-21 13:09:11][351978522161571][5256 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4310c650-d865-4eb3-b583-8d886304af0e","id":"QR_4310c650-d865-4eb3-b583-8d886304af0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:09:11][351978522161571][5257 ms][DEBUG] proc_open done in 4701 ms; code=0; res.len=3152
[2025-08-21 13:09:11][351978522161571][5257 ms][DEBUG] END   runCmdUntilRes#1 in 4702 ms
[2025-08-21 13:09:11][351978522161571][5257 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:09:19][350876470368233][0 ms][INFO] === Request start ===
[2025-08-21 13:09:19][350876470368233][1 ms][DEBUG] START check_frida
[2025-08-21 13:09:19][350876470368233][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:09:19][350876470368233][281 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2349136  50160 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:09:19][350876470368233][281 ms][DEBUG] check_frida: running
[2025-08-21 13:09:19][350876470368233][281 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:09:19][350876470368233][281 ms][DEBUG] START check_scloud
[2025-08-21 13:09:19][350876470368233][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:09:19][350876470368233][578 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23510772 106832 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:09:19][350876470368233][578 ms][DEBUG] targetPkg: running
[2025-08-21 13:09:19][350876470368233][578 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:09:19][350876470368233][578 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:09:19][350876470368233][578 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODc2NDcwMzY4MjMzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMlgxWlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgxNiJ9'" -e "main()" -q"
[2025-08-21 13:09:19][350876470368233][578 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:09:19][350876470368233][578 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODc2NDcwMzY4MjMzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMlgxWlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgxNiJ9'" -e "main()" -q"
[2025-08-21 13:09:22][350876470368233][3390 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODc2NDcwMzY4MjMzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMlgxWlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgxNiJ9"\r\n
[2025-08-21 13:09:24][350876470368233][5592 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8459ebe-1516-43a0-8946-d6c438f664a2","id":"QR_c8459ebe-1516-43a0-8946-d6c438f664a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:09:24][350876470368233][5592 ms][DEBUG] proc_open done in 5014 ms; code=0; res.len=3152
[2025-08-21 13:09:24][350876470368233][5593 ms][DEBUG] END   runCmdUntilRes#1 in 5014 ms
[2025-08-21 13:09:24][350876470368233][5593 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:11:29][357651717198716][1 ms][INFO] === Request start ===
[2025-08-21 13:11:29][357651717198716][1 ms][DEBUG] START check_frida
[2025-08-21 13:11:29][357651717198716][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:11:29][357651717198716][289 ms][DEBUG] SU: done in 287 ms; outroot          4632     1 2332716  50108 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:11:29][357651717198716][289 ms][DEBUG] check_frida: running
[2025-08-21 13:11:29][357651717198716][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 13:11:29][357651717198716][289 ms][DEBUG] START check_scloud
[2025-08-21 13:11:29][357651717198716][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:11:29][357651717198716][571 ms][DEBUG] SU: done in 282 ms; outu0_a118       7399 30745 23510804 107376 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:11:29][357651717198716][571 ms][DEBUG] targetPkg: running
[2025-08-21 13:11:29][357651717198716][571 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 13:11:29][357651717198716][571 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:11:29][357651717198716][571 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE3MTk4NzE2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ4MDNCUzREIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDU4In0='" -e "main()" -q"
[2025-08-21 13:11:29][357651717198716][571 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:11:29][357651717198716][571 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE3MTk4NzE2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ4MDNCUzREIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDU4In0='" -e "main()" -q"
[2025-08-21 13:11:32][357651717198716][3398 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzE3MTk4NzE2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ4MDNCUzREIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDU4In0="\r\n
[2025-08-21 13:11:35][357651717198716][6600 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ba7cd37-4bfc-4194-844f-d1f7430dbd0d","id":"QR_6ba7cd37-4bfc-4194-844f-d1f7430dbd0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:11:35][357651717198716][6600 ms][DEBUG] proc_open done in 6029 ms; code=0; res.len=3152
[2025-08-21 13:11:35][357651717198716][6600 ms][DEBUG] END   runCmdUntilRes#1 in 6029 ms
[2025-08-21 13:11:35][357651717198716][6600 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:12:11][355458541313665][0 ms][INFO] === Request start ===
[2025-08-21 13:12:11][355458541313665][1 ms][DEBUG] START check_frida
[2025-08-21 13:12:11][355458541313665][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:12:12][355458541313665][296 ms][DEBUG] SU: done in 295 ms; outroot          4632     1 2332716  50132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:12:12][355458541313665][296 ms][DEBUG] check_frida: running
[2025-08-21 13:12:12][355458541313665][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 13:12:12][355458541313665][296 ms][DEBUG] START check_internet
[2025-08-21 13:12:12][355458541313665][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:12:12][355458541313665][811 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.613/202.613/202.613/0.000 ms\n
[2025-08-21 13:12:12][355458541313665][812 ms][DEBUG] check_internet: online
[2025-08-21 13:12:12][355458541313665][812 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 13:12:12][355458541313665][812 ms][DEBUG] START check_scloud
[2025-08-21 13:12:12][355458541313665][812 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:12:12][355458541313665][1046 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23510836 107936 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:12:12][355458541313665][1046 ms][DEBUG] targetPkg: running
[2025-08-21 13:12:12][355458541313665][1046 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 13:12:12][355458541313665][1046 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:12:12][355458541313665][1046 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDU4NTQxMzEzNjY1IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlKVDEwMEI1TUIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzQxIn0='" -e "main()" -q"
[2025-08-21 13:12:12][355458541313665][1046 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:12:12][355458541313665][1046 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDU4NTQxMzEzNjY1IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlKVDEwMEI1TUIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzQxIn0='" -e "main()" -q"
[2025-08-21 13:12:15][355458541313665][3889 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NDU4NTQxMzEzNjY1IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlKVDEwMEI1TUIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzQxIn0="\r\n
[2025-08-21 13:12:17][355458541313665][5904 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1582b2dd-a916-4682-a297-3a1ac5d14dd5","id":"QR_1582b2dd-a916-4682-a297-3a1ac5d14dd5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:12:17][355458541313665][5904 ms][DEBUG] proc_open done in 4858 ms; code=0; res.len=3152
[2025-08-21 13:12:17][355458541313665][5904 ms][DEBUG] END   runCmdUntilRes#1 in 4858 ms
[2025-08-21 13:12:17][355458541313665][5904 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:12:26][355824553705678][0 ms][INFO] === Request start ===
[2025-08-21 13:12:26][355824553705678][1 ms][DEBUG] START check_frida
[2025-08-21 13:12:26][355824553705678][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:12:27][355824553705678][262 ms][DEBUG] SU: done in 261 ms; outroot          4632     1 2349136  50116 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:12:27][355824553705678][262 ms][DEBUG] check_frida: running
[2025-08-21 13:12:27][355824553705678][262 ms][DEBUG] END   check_frida in 261 ms
[2025-08-21 13:12:27][355824553705678][262 ms][DEBUG] START check_internet
[2025-08-21 13:12:27][355824553705678][262 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:12:27][355824553705678][590 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.441/227.441/227.441/0.000 ms\n
[2025-08-21 13:12:27][355824553705678][590 ms][DEBUG] check_internet: online
[2025-08-21 13:12:27][355824553705678][590 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 13:12:27][355824553705678][590 ms][DEBUG] START check_scloud
[2025-08-21 13:12:27][355824553705678][590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:12:27][355824553705678][887 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23510868 108520 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:12:27][355824553705678][887 ms][DEBUG] targetPkg: running
[2025-08-21 13:12:27][355824553705678][887 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:12:27][355824553705678][887 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:12:27][355824553705678][887 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODI0NTUzNzA1Njc4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg2MDRLVEhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjEzIn0='" -e "main()" -q"
[2025-08-21 13:12:27][355824553705678][887 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:12:27][355824553705678][887 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODI0NTUzNzA1Njc4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg2MDRLVEhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjEzIn0='" -e "main()" -q"
[2025-08-21 13:12:30][355824553705678][3714 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODI0NTUzNzA1Njc4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg2MDRLVEhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjEzIn0="\r\n
[2025-08-21 13:12:33][355824553705678][7120 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5c07576-b989-4000-a0fb-45fe4526629a","id":"QR_e5c07576-b989-4000-a0fb-45fe4526629a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:12:33][355824553705678][7120 ms][DEBUG] proc_open done in 6232 ms; code=0; res.len=3152
[2025-08-21 13:12:33][355824553705678][7120 ms][DEBUG] END   runCmdUntilRes#1 in 6233 ms
[2025-08-21 13:12:33][355824553705678][7120 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:12:53][359484880479228][0 ms][INFO] === Request start ===
[2025-08-21 13:12:53][359484880479228][1 ms][DEBUG] START check_frida
[2025-08-21 13:12:53][359484880479228][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:12:53][359484880479228][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2332716  50120 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:12:53][359484880479228][292 ms][DEBUG] check_frida: running
[2025-08-21 13:12:53][359484880479228][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 13:12:53][359484880479228][292 ms][DEBUG] START check_internet
[2025-08-21 13:12:53][359484880479228][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:12:53][359484880479228][588 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.125/167.125/167.125/0.000 ms\n
[2025-08-21 13:12:53][359484880479228][588 ms][DEBUG] check_internet: online
[2025-08-21 13:12:53][359484880479228][588 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 13:12:53][359484880479228][588 ms][DEBUG] START check_scloud
[2025-08-21 13:12:53][359484880479228][588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:12:54][359484880479228][824 ms][DEBUG] SU: done in 236 ms; outu0_a118       7399 30745 23510900 105324 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:12:54][359484880479228][824 ms][DEBUG] targetPkg: running
[2025-08-21 13:12:54][359484880479228][824 ms][DEBUG] END   check_scloud in 236 ms
[2025-08-21 13:12:54][359484880479228][824 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:12:54][359484880479228][824 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NDg0ODgwNDc5MjI4IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjhWR0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA2NCJ9'" -e "main()" -q"
[2025-08-21 13:12:54][359484880479228][824 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:12:54][359484880479228][824 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NDg0ODgwNDc5MjI4IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjhWR0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA2NCJ9'" -e "main()" -q"
[2025-08-21 13:12:57][359484880479228][3666 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5NDg0ODgwNDc5MjI4IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjhWR0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA2NCJ9"\r\n
[2025-08-21 13:12:59][359484880479228][5712 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18e80764-a68a-4e65-8f10-6b427ff314ae","id":"QR_18e80764-a68a-4e65-8f10-6b427ff314ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:12:59][359484880479228][5712 ms][DEBUG] proc_open done in 4888 ms; code=0; res.len=3152
[2025-08-21 13:12:59][359484880479228][5712 ms][DEBUG] END   runCmdUntilRes#1 in 4888 ms
[2025-08-21 13:12:59][359484880479228][5712 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:13:12][356927267860280][0 ms][INFO] === Request start ===
[2025-08-21 13:13:12][356927267860280][1 ms][DEBUG] START check_frida
[2025-08-21 13:13:12][356927267860280][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:13:12][356927267860280][289 ms][DEBUG] SU: done in 288 ms; outroot          4632     1 2332716  50148 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:13:12][356927267860280][289 ms][DEBUG] check_frida: running
[2025-08-21 13:13:12][356927267860280][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 13:13:12][356927267860280][289 ms][DEBUG] START check_scloud
[2025-08-21 13:13:12][356927267860280][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:13:12][356927267860280][586 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23510932 105892 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:13:12][356927267860280][586 ms][DEBUG] targetPkg: running
[2025-08-21 13:13:12][356927267860280][586 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:13:12][356927267860280][586 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:13:12][356927267860280][586 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTI3MjY3ODYwMjgwIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFkyMDJHTFFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjY0In0='" -e "main()" -q"
[2025-08-21 13:13:12][356927267860280][586 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:13:12][356927267860280][586 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTI3MjY3ODYwMjgwIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFkyMDJHTFFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjY0In0='" -e "main()" -q"
[2025-08-21 13:13:15][356927267860280][3398 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTI3MjY3ODYwMjgwIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFkyMDJHTFFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjY0In0="\r\n
[2025-08-21 13:13:19][356927267860280][7116 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6a92d48-95a9-41c1-82b2-bf8137857f07","id":"QR_a6a92d48-95a9-41c1-82b2-bf8137857f07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:13:19][356927267860280][7116 ms][DEBUG] proc_open done in 6529 ms; code=0; res.len=3152
[2025-08-21 13:13:19][356927267860280][7116 ms][DEBUG] END   runCmdUntilRes#1 in 6530 ms
[2025-08-21 13:13:19][356927267860280][7116 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:13:27][353496272822894][0 ms][INFO] === Request start ===
[2025-08-21 13:13:27][353496272822894][1 ms][DEBUG] START check_frida
[2025-08-21 13:13:27][353496272822894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:13:27][353496272822894][298 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136  50132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:13:27][353496272822894][298 ms][DEBUG] check_frida: running
[2025-08-21 13:13:27][353496272822894][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:13:27][353496272822894][298 ms][DEBUG] START check_scloud
[2025-08-21 13:13:27][353496272822894][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:13:27][353496272822894][517 ms][DEBUG] SU: done in 219 ms; outu0_a118       7399 30745 23510964 106440 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:13:27][353496272822894][517 ms][DEBUG] targetPkg: running
[2025-08-21 13:13:27][353496272822894][517 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 13:13:27][353496272822894][517 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:13:27][353496272822894][517 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDk2MjcyODIyODk0IiwibW9kZWwiOiJTTS1TOTE2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMkpTWU1IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNIQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzM2In0='" -e "main()" -q"
[2025-08-21 13:13:27][353496272822894][517 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:13:27][353496272822894][517 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDk2MjcyODIyODk0IiwibW9kZWwiOiJTTS1TOTE2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMkpTWU1IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNIQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzM2In0='" -e "main()" -q"
[2025-08-21 13:13:30][353496272822894][3345 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDk2MjcyODIyODk0IiwibW9kZWwiOiJTTS1TOTE2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMkpTWU1IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNIQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzM2In0="\r\n
[2025-08-21 13:13:34][353496272822894][7500 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_005e56de-62e5-4c50-a067-e983faccc3aa","id":"QR_005e56de-62e5-4c50-a067-e983faccc3aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:13:34][353496272822894][7500 ms][DEBUG] proc_open done in 6983 ms; code=0; res.len=3152
[2025-08-21 13:13:34][353496272822894][7500 ms][DEBUG] END   runCmdUntilRes#1 in 6983 ms
[2025-08-21 13:13:34][353496272822894][7500 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:14:05][357866609140614][1 ms][INFO] === Request start ===
[2025-08-21 13:14:05][357866609140614][2 ms][DEBUG] START check_frida
[2025-08-21 13:14:05][357866609140614][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:14:05][357866609140614][289 ms][DEBUG] SU: done in 288 ms; outroot          4632     1 2332716  50152 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:14:05][357866609140614][290 ms][DEBUG] check_frida: running
[2025-08-21 13:14:05][357866609140614][290 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 13:14:05][357866609140614][290 ms][DEBUG] START check_internet
[2025-08-21 13:14:05][357866609140614][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:14:06][357866609140614][588 ms][DEBUG] SU: done in 299 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.426/185.426/185.426/0.000 ms\n
[2025-08-21 13:14:06][357866609140614][588 ms][DEBUG] check_internet: online
[2025-08-21 13:14:06][357866609140614][588 ms][DEBUG] END   check_internet in 299 ms
[2025-08-21 13:14:06][357866609140614][588 ms][DEBUG] START check_scloud
[2025-08-21 13:14:06][357866609140614][589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:14:06][357866609140614][899 ms][DEBUG] SU: done in 310 ms; outu0_a118       7399 30745 23510996 107284 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:14:06][357866609140614][899 ms][DEBUG] targetPkg: running
[2025-08-21 13:14:06][357866609140614][899 ms][DEBUG] END   check_scloud in 310 ms
[2025-08-21 13:14:06][357866609140614][899 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:14:06][357866609140614][899 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODY2NjA5MTQwNjE0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2ME1ZMUhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM5MiJ9'" -e "main()" -q"
[2025-08-21 13:14:06][357866609140614][899 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:14:06][357866609140614][899 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODY2NjA5MTQwNjE0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2ME1ZMUhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM5MiJ9'" -e "main()" -q"
[2025-08-21 13:14:08][356019747485993][1 ms][INFO] === Request start ===
[2025-08-21 13:14:09][357866609140614][3742 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3ODY2NjA5MTQwNjE0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2ME1ZMUhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM5MiJ9"\r\n
[2025-08-21 13:14:11][357866609140614][5928 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6225edb7-690d-4028-92cc-14f7bc85f934","id":"QR_6225edb7-690d-4028-92cc-14f7bc85f934","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:14:11][357866609140614][5929 ms][DEBUG] proc_open done in 5030 ms; code=0; res.len=3152
[2025-08-21 13:14:11][357866609140614][5929 ms][DEBUG] END   runCmdUntilRes#1 in 5030 ms
[2025-08-21 13:14:11][357866609140614][5929 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:14:12][356019747485993][4050 ms][DEBUG] START check_frida
[2025-08-21 13:14:12][356019747485993][4050 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:14:12][356019747485993][4300 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136  50136 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:14:12][356019747485993][4300 ms][DEBUG] check_frida: running
[2025-08-21 13:14:12][356019747485993][4300 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:14:12][356019747485993][4300 ms][DEBUG] START check_internet
[2025-08-21 13:14:12][356019747485993][4300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:14:12][356019747485993][4534 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.603/144.603/144.603/0.000 ms\n
[2025-08-21 13:14:12][356019747485993][4534 ms][DEBUG] check_internet: online
[2025-08-21 13:14:12][356019747485993][4534 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 13:14:12][356019747485993][4534 ms][DEBUG] START check_scloud
[2025-08-21 13:14:12][356019747485993][4535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:14:12][356019747485993][4769 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23511028 107844 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:14:12][356019747485993][4769 ms][DEBUG] targetPkg: running
[2025-08-21 13:14:12][356019747485993][4769 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 13:14:12][356019747485993][4769 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:14:12][356019747485993][4769 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MDE5NzQ3NDg1OTkzIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI5MVBMTlBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU1NSJ9'" -e "main()" -q"
[2025-08-21 13:14:13][356019747485993][4769 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:14:13][356019747485993][4769 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MDE5NzQ3NDg1OTkzIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI5MVBMTlBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU1NSJ9'" -e "main()" -q"
[2025-08-21 13:14:15][356019747485993][7580 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MDE5NzQ3NDg1OTkzIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI5MVBMTlBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU1NSJ9"\r\n
[2025-08-21 13:14:17][356019747485993][9377 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f8f1773-54bd-4bde-9fae-a55043bc31b6","id":"QR_6f8f1773-54bd-4bde-9fae-a55043bc31b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:14:17][356019747485993][9377 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 13:14:17][356019747485993][9377 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-21 13:14:17][356019747485993][9377 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:14:20][353818874461898][0 ms][INFO] === Request start ===
[2025-08-21 13:14:20][353818874461898][1 ms][DEBUG] START check_frida
[2025-08-21 13:14:20][353818874461898][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:14:20][353818874461898][293 ms][DEBUG] SU: done in 292 ms; outroot          4632     1 2349136  50104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:14:20][353818874461898][293 ms][DEBUG] check_frida: running
[2025-08-21 13:14:20][353818874461898][293 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 13:14:20][353818874461898][293 ms][DEBUG] START check_internet
[2025-08-21 13:14:20][353818874461898][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:14:21][353818874461898][683 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=263 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 263.241/263.241/263.241/0.000 ms\n
[2025-08-21 13:14:21][353818874461898][683 ms][DEBUG] check_internet: online
[2025-08-21 13:14:21][353818874461898][683 ms][DEBUG] END   check_internet in 390 ms
[2025-08-21 13:14:21][353818874461898][683 ms][DEBUG] START check_scloud
[2025-08-21 13:14:21][353818874461898][683 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:14:21][353818874461898][964 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23511060 108396 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:14:21][353818874461898][964 ms][DEBUG] targetPkg: running
[2025-08-21 13:14:21][353818874461898][965 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 13:14:21][353818874461898][965 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:14:21][353818874461898][965 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzODE4ODc0NDYxODk4IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4M1hBMDZYWVhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg5MCJ9'" -e "main()" -q"
[2025-08-21 13:14:21][353818874461898][965 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:14:21][353818874461898][965 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzODE4ODc0NDYxODk4IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4M1hBMDZYWVhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg5MCJ9'" -e "main()" -q"
[2025-08-21 13:14:24][353818874461898][3792 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzODE4ODc0NDYxODk4IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4M1hBMDZYWVhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg5MCJ9"\r\n
[2025-08-21 13:14:26][353818874461898][5619 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c157641d-12f8-448a-bf2a-8bb0170c9d87","id":"QR_c157641d-12f8-448a-bf2a-8bb0170c9d87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:14:26][353818874461898][5619 ms][DEBUG] proc_open done in 4655 ms; code=0; res.len=3152
[2025-08-21 13:14:26][353818874461898][5619 ms][DEBUG] END   runCmdUntilRes#1 in 4655 ms
[2025-08-21 13:14:26][353818874461898][5619 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:14:37][350695340250490][0 ms][INFO] === Request start ===
[2025-08-21 13:14:37][350695340250490][1 ms][DEBUG] START check_frida
[2025-08-21 13:14:37][350695340250490][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:14:37][351850111414952][0 ms][INFO] === Request start ===
[2025-08-21 13:14:38][350695340250490][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2349136  50156 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:14:38][350695340250490][294 ms][DEBUG] check_frida: running
[2025-08-21 13:14:38][350695340250490][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 13:14:38][350695340250490][294 ms][DEBUG] START check_internet
[2025-08-21 13:14:38][350695340250490][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:14:38][350695340250490][639 ms][DEBUG] SU: done in 345 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.647/235.647/235.647/0.000 ms\n
[2025-08-21 13:14:38][350695340250490][639 ms][DEBUG] check_internet: online
[2025-08-21 13:14:38][350695340250490][639 ms][DEBUG] END   check_internet in 346 ms
[2025-08-21 13:14:38][350695340250490][639 ms][DEBUG] START check_scloud
[2025-08-21 13:14:38][350695340250490][639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:14:38][350695340250490][873 ms][DEBUG] SU: done in 233 ms; outu0_a118       7399 30745 23511092 109068 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:14:38][350695340250490][873 ms][DEBUG] targetPkg: running
[2025-08-21 13:14:38][350695340250490][873 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 13:14:38][350695340250490][873 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:14:38][350695340250490][873 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjk1MzQwMjUwNDkwIiwibW9kZWwiOiJTTS1TOTA2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1QzMDNMR1RBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU4NyJ9'" -e "main()" -q"
[2025-08-21 13:14:38][350695340250490][873 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:14:38][350695340250490][873 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjk1MzQwMjUwNDkwIiwibW9kZWwiOiJTTS1TOTA2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1QzMDNMR1RBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU4NyJ9'" -e "main()" -q"
[2025-08-21 13:14:41][350695340250490][3699 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjk1MzQwMjUwNDkwIiwibW9kZWwiOiJTTS1TOTA2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1QzMDNMR1RBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU4NyJ9"\r\n
[2025-08-21 13:14:43][350695340250490][5917 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2fa3c98-7376-48ef-bc39-26ea91c7032b","id":"QR_e2fa3c98-7376-48ef-bc39-26ea91c7032b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:14:43][350695340250490][5917 ms][DEBUG] proc_open done in 5044 ms; code=0; res.len=3152
[2025-08-21 13:14:43][350695340250490][5917 ms][DEBUG] END   runCmdUntilRes#1 in 5044 ms
[2025-08-21 13:14:43][350695340250490][5917 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:14:44][351850111414952][6085 ms][DEBUG] START check_frida
[2025-08-21 13:14:44][351850111414952][6086 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:14:44][351850111414952][6351 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2349136  50096 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:14:44][351850111414952][6351 ms][DEBUG] check_frida: running
[2025-08-21 13:14:44][351850111414952][6351 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 13:14:44][351850111414952][6351 ms][DEBUG] START check_internet
[2025-08-21 13:14:44][351850111414952][6351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:14:44][351850111414952][6570 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=127 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 127.295/127.295/127.295/0.000 ms\n
[2025-08-21 13:14:44][351850111414952][6570 ms][DEBUG] check_internet: online
[2025-08-21 13:14:44][351850111414952][6570 ms][DEBUG] END   check_internet in 219 ms
[2025-08-21 13:14:44][351850111414952][6570 ms][DEBUG] START check_scloud
[2025-08-21 13:14:44][351850111414952][6570 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:14:44][351850111414952][6805 ms][DEBUG] SU: done in 235 ms; outu0_a118       7399 30745 23511124 106428 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:14:44][351850111414952][6805 ms][DEBUG] targetPkg: running
[2025-08-21 13:14:44][351850111414952][6805 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 13:14:44][351850111414952][6805 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:14:44][351850111414952][6805 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODUwMTExNDE0OTUyIiwibW9kZWwiOiJTTS1HOTg2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q045MFJWWkdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjU5In0='" -e "main()" -q"
[2025-08-21 13:14:44][351850111414952][6805 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:14:44][351850111414952][6805 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODUwMTExNDE0OTUyIiwibW9kZWwiOiJTTS1HOTg2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q045MFJWWkdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjU5In0='" -e "main()" -q"
[2025-08-21 13:14:47][351850111414952][9616 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODUwMTExNDE0OTUyIiwibW9kZWwiOiJTTS1HOTg2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q045MFJWWkdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjU5In0="\r\n
[2025-08-21 13:14:50][351850111414952][12521 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6fc9c93a-6026-497a-96cf-0c4fe541bcf9","id":"QR_6fc9c93a-6026-497a-96cf-0c4fe541bcf9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:14:50][351850111414952][12522 ms][DEBUG] proc_open done in 5717 ms; code=0; res.len=3152
[2025-08-21 13:14:50][351850111414952][12522 ms][DEBUG] END   runCmdUntilRes#1 in 5717 ms
[2025-08-21 13:14:50][351850111414952][12522 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:14:59][351064274486704][0 ms][INFO] === Request start ===
[2025-08-21 13:14:59][351064274486704][1 ms][DEBUG] START check_frida
[2025-08-21 13:14:59][351064274486704][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:14:59][351064274486704][241 ms][DEBUG] SU: done in 240 ms; outroot          4632     1 2349136  50152 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:14:59][351064274486704][241 ms][DEBUG] check_frida: running
[2025-08-21 13:14:59][351064274486704][241 ms][DEBUG] END   check_frida in 240 ms
[2025-08-21 13:14:59][351064274486704][241 ms][DEBUG] START check_internet
[2025-08-21 13:14:59][351064274486704][241 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:14:59][351064274486704][506 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=173 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 173.539/173.539/173.539/0.000 ms\n
[2025-08-21 13:14:59][351064274486704][507 ms][DEBUG] check_internet: online
[2025-08-21 13:14:59][351064274486704][507 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 13:14:59][351064274486704][507 ms][DEBUG] START check_scloud
[2025-08-21 13:14:59][351064274486704][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:14:59][351064274486704][788 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23511156 107016 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:14:59][351064274486704][788 ms][DEBUG] targetPkg: running
[2025-08-21 13:14:59][351064274486704][788 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 13:14:59][351064274486704][788 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:14:59][351064274486704][788 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDY0Mjc0NDg2NzA0IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMDdUV0RYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM1NCJ9'" -e "main()" -q"
[2025-08-21 13:14:59][351064274486704][788 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:14:59][351064274486704][788 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDY0Mjc0NDg2NzA0IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMDdUV0RYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM1NCJ9'" -e "main()" -q"
[2025-08-21 13:15:02][351064274486704][3631 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDY0Mjc0NDg2NzA0IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMDdUV0RYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM1NCJ9"\r\n
[2025-08-21 13:15:04][351064274486704][5568 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc1f4879-8e94-49b5-b0a7-b8cf057a8fcd","id":"QR_fc1f4879-8e94-49b5-b0a7-b8cf057a8fcd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:15:04][351064274486704][5568 ms][DEBUG] proc_open done in 4780 ms; code=0; res.len=3152
[2025-08-21 13:15:04][351064274486704][5568 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-21 13:15:04][351064274486704][5569 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:15:12][351272334053683][1 ms][INFO] === Request start ===
[2025-08-21 13:15:12][351272334053683][2 ms][DEBUG] START check_frida
[2025-08-21 13:15:12][351272334053683][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:15:12][351272334053683][298 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  50156 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:15:12][351272334053683][298 ms][DEBUG] check_frida: running
[2025-08-21 13:15:12][351272334053683][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:15:12][351272334053683][298 ms][DEBUG] START check_scloud
[2025-08-21 13:15:12][351272334053683][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:15:13][351272334053683][597 ms][DEBUG] SU: done in 298 ms; outu0_a118       7399 30745 23511188 107576 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:15:13][351272334053683][597 ms][DEBUG] targetPkg: running
[2025-08-21 13:15:13][351272334053683][597 ms][DEBUG] END   check_scloud in 299 ms
[2025-08-21 13:15:13][351272334053683][597 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:15:13][351272334053683][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM0MDUzNjgzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDlaS1NQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM0MSJ9'" -e "main()" -q"
[2025-08-21 13:15:13][351272334053683][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:15:13][351272334053683][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM0MDUzNjgzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDlaS1NQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM0MSJ9'" -e "main()" -q"
[2025-08-21 13:15:16][351272334053683][3422 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcyMzM0MDUzNjgzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDlaS1NQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM0MSJ9"\r\n
[2025-08-21 13:15:17][351272334053683][5390 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9941f910-f8cc-4ffe-8f45-1519a62d6487","id":"QR_9941f910-f8cc-4ffe-8f45-1519a62d6487","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:15:17][351272334053683][5390 ms][DEBUG] proc_open done in 4793 ms; code=0; res.len=3152
[2025-08-21 13:15:17][351272334053683][5390 ms][DEBUG] END   runCmdUntilRes#1 in 4793 ms
[2025-08-21 13:15:17][351272334053683][5390 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:15:27][352353591407397][0 ms][INFO] === Request start ===
[2025-08-21 13:15:27][352353591407397][1 ms][DEBUG] START check_frida
[2025-08-21 13:15:27][352353591407397][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:15:27][352353591407397][240 ms][DEBUG] SU: done in 239 ms; outroot          4632     1 2349136  50080 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:15:27][352353591407397][240 ms][DEBUG] check_frida: running
[2025-08-21 13:15:27][352353591407397][240 ms][DEBUG] END   check_frida in 239 ms
[2025-08-21 13:15:27][352353591407397][240 ms][DEBUG] START check_scloud
[2025-08-21 13:15:27][352353591407397][240 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:15:27][352353591407397][538 ms][DEBUG] SU: done in 298 ms; outu0_a118       7399 30745 23511220 108076 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:15:27][352353591407397][538 ms][DEBUG] targetPkg: running
[2025-08-21 13:15:27][352353591407397][538 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 13:15:27][352353591407397][538 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:15:27][352353591407397][538 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzUzNTkxNDA3Mzk3IiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJCMDVUNEtBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkxNCJ9'" -e "main()" -q"
[2025-08-21 13:15:27][352353591407397][538 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:15:27][352353591407397][539 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzUzNTkxNDA3Mzk3IiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJCMDVUNEtBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkxNCJ9'" -e "main()" -q"
[2025-08-21 13:15:30][352353591407397][3395 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzUzNTkxNDA3Mzk3IiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJCMDVUNEtBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkxNCJ9"\r\n
[2025-08-21 13:15:32][352353591407397][5192 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d260a3d3-02a4-446f-bc9b-c2c139c5e926","id":"QR_d260a3d3-02a4-446f-bc9b-c2c139c5e926","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:15:32][352353591407397][5192 ms][DEBUG] proc_open done in 4654 ms; code=0; res.len=3152
[2025-08-21 13:15:32][352353591407397][5192 ms][DEBUG] END   runCmdUntilRes#1 in 4654 ms
[2025-08-21 13:15:32][352353591407397][5192 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:15:43][357962503263121][0 ms][INFO] === Request start ===
[2025-08-21 13:15:43][357962503263121][1 ms][DEBUG] START check_frida
[2025-08-21 13:15:43][357962503263121][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:15:43][357962503263121][245 ms][DEBUG] SU: done in 244 ms; outroot          4632     1 2349136  50152 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:15:43][357962503263121][245 ms][DEBUG] check_frida: running
[2025-08-21 13:15:43][357962503263121][245 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 13:15:43][357962503263121][246 ms][DEBUG] START check_scloud
[2025-08-21 13:15:43][357962503263121][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:15:43][357962503263121][525 ms][DEBUG] SU: done in 279 ms; outu0_a118       7399 30745 23511252 108676 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:15:43][357962503263121][525 ms][DEBUG] targetPkg: running
[2025-08-21 13:15:43][357962503263121][525 ms][DEBUG] END   check_scloud in 279 ms
[2025-08-21 13:15:43][357962503263121][525 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:15:43][357962503263121][525 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTAzMjYzMTIxIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDJUV0RLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTIwMSJ9'" -e "main()" -q"
[2025-08-21 13:15:43][357962503263121][525 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:15:43][357962503263121][525 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTAzMjYzMTIxIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDJUV0RLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTIwMSJ9'" -e "main()" -q"
[2025-08-21 13:15:46][357962503263121][3368 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTYyNTAzMjYzMTIxIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDJUV0RLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTIwMSJ9"\r\n
[2025-08-21 13:15:48][357962503263121][5352 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72394f16-44d1-4ef0-9fff-c33421ce5020","id":"QR_72394f16-44d1-4ef0-9fff-c33421ce5020","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:15:48][357962503263121][5352 ms][DEBUG] proc_open done in 4827 ms; code=0; res.len=3152
[2025-08-21 13:15:48][357962503263121][5352 ms][DEBUG] END   runCmdUntilRes#1 in 4827 ms
[2025-08-21 13:15:48][357962503263121][5352 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:16:02][351681596916397][0 ms][INFO] === Request start ===
[2025-08-21 13:16:02][351681596916397][1 ms][DEBUG] START check_frida
[2025-08-21 13:16:02][351681596916397][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:16:02][351681596916397][281 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2332716  50156 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:16:02][351681596916397][281 ms][DEBUG] check_frida: running
[2025-08-21 13:16:02][351681596916397][281 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:16:02][351681596916397][281 ms][DEBUG] START check_internet
[2025-08-21 13:16:02][351681596916397][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:16:02][351681596916397][719 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.254/218.254/218.254/0.000 ms\n
[2025-08-21 13:16:02][351681596916397][719 ms][DEBUG] check_internet: online
[2025-08-21 13:16:02][351681596916397][719 ms][DEBUG] END   check_internet in 437 ms
[2025-08-21 13:16:02][351681596916397][719 ms][DEBUG] START check_scloud
[2025-08-21 13:16:02][351681596916397][719 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:16:03][351681596916397][953 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23511284 106556 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:16:03][351681596916397][953 ms][DEBUG] targetPkg: running
[2025-08-21 13:16:03][351681596916397][953 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 13:16:03][351681596916397][953 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:16:03][351681596916397][953 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjgxNTk2OTE2Mzk3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMUVSMkxQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxNiJ9'" -e "main()" -q"
[2025-08-21 13:16:03][351681596916397][953 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:16:03][351681596916397][953 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjgxNTk2OTE2Mzk3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMUVSMkxQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxNiJ9'" -e "main()" -q"
[2025-08-21 13:16:06][351681596916397][3781 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjgxNTk2OTE2Mzk3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMUVSMkxQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxNiJ9"\r\n
[2025-08-21 13:16:08][351681596916397][5811 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15b515e3-d8f3-4398-b9bd-32fa2b22bd5f","id":"QR_15b515e3-d8f3-4398-b9bd-32fa2b22bd5f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:16:08][351681596916397][5812 ms][DEBUG] proc_open done in 4858 ms; code=0; res.len=3152
[2025-08-21 13:16:08][351681596916397][5812 ms][DEBUG] END   runCmdUntilRes#1 in 4858 ms
[2025-08-21 13:16:08][351681596916397][5812 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:16:16][350858559920936][0 ms][INFO] === Request start ===
[2025-08-21 13:16:16][350858559920936][1 ms][DEBUG] START check_frida
[2025-08-21 13:16:16][350858559920936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:16:16][350858559920936][233 ms][DEBUG] SU: done in 232 ms; outroot          4632     1 2349136  50100 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:16:16][350858559920936][233 ms][DEBUG] check_frida: running
[2025-08-21 13:16:16][350858559920936][233 ms][DEBUG] END   check_frida in 232 ms
[2025-08-21 13:16:16][350858559920936][233 ms][DEBUG] START check_internet
[2025-08-21 13:16:16][350858559920936][233 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:16:16][350858559920936][560 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.795/219.795/219.795/0.000 ms\n
[2025-08-21 13:16:16][350858559920936][560 ms][DEBUG] check_internet: online
[2025-08-21 13:16:16][350858559920936][560 ms][DEBUG] END   check_internet in 327 ms
[2025-08-21 13:16:16][350858559920936][560 ms][DEBUG] START check_scloud
[2025-08-21 13:16:16][350858559920936][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:16:16][350858559920936][857 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23511316 107128 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:16:16][350858559920936][857 ms][DEBUG] targetPkg: running
[2025-08-21 13:16:16][350858559920936][857 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:16:16][350858559920936][857 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:16:16][350858559920936][857 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODU4NTU5OTIwOTM2IiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTQ2MmEyZWMyMWVmZTMwZGFlYyIsImdyb3VwIjoiZjk5ZWYxY2ItMTU1MS00M2FkLWI2OWQtYTg3NmJhMjM5NmM1IiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlZVDgwTFNXMFoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlNLWiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjI4In0='" -e "main()" -q"
[2025-08-21 13:16:16][350858559920936][857 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:16:16][350858559920936][857 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODU4NTU5OTIwOTM2IiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTQ2MmEyZWMyMWVmZTMwZGFlYyIsImdyb3VwIjoiZjk5ZWYxY2ItMTU1MS00M2FkLWI2OWQtYTg3NmJhMjM5NmM1IiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlZVDgwTFNXMFoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlNLWiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjI4In0='" -e "main()" -q"
[2025-08-21 13:16:19][350858559920936][3653 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODU4NTU5OTIwOTM2IiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTQ2MmEyZWMyMWVmZTMwZGFlYyIsImdyb3VwIjoiZjk5ZWYxY2ItMTU1MS00M2FkLWI2OWQtYTg3NmJhMjM5NmM1IiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlZVDgwTFNXMFoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlNLWiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjI4In0="\r\n
[2025-08-21 13:16:21][350858559920936][5575 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d31ce16-ed6f-489e-a44c-58df9533755d","id":"QR_0d31ce16-ed6f-489e-a44c-58df9533755d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:16:21][350858559920936][5575 ms][DEBUG] proc_open done in 4718 ms; code=0; res.len=3152
[2025-08-21 13:16:21][350858559920936][5575 ms][DEBUG] END   runCmdUntilRes#1 in 4718 ms
[2025-08-21 13:16:21][350858559920936][5575 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:16:32][350832442429561][0 ms][INFO] === Request start ===
[2025-08-21 13:16:32][350832442429561][0 ms][DEBUG] START check_frida
[2025-08-21 13:16:32][350832442429561][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:16:32][350832442429561][243 ms][DEBUG] SU: done in 243 ms; outroot          4632     1 2349136  50156 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:16:32][350832442429561][243 ms][DEBUG] check_frida: running
[2025-08-21 13:16:32][350832442429561][243 ms][DEBUG] END   check_frida in 243 ms
[2025-08-21 13:16:32][350832442429561][243 ms][DEBUG] START check_internet
[2025-08-21 13:16:32][350832442429561][243 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:16:32][350832442429561][540 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.081/202.081/202.081/0.000 ms\n
[2025-08-21 13:16:32][350832442429561][540 ms][DEBUG] check_internet: online
[2025-08-21 13:16:32][350832442429561][540 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 13:16:32][350832442429561][540 ms][DEBUG] START check_scloud
[2025-08-21 13:16:32][350832442429561][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:16:33][350832442429561][759 ms][DEBUG] SU: done in 219 ms; outu0_a118       7399 30745 23511348 107712 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:16:33][350832442429561][759 ms][DEBUG] targetPkg: running
[2025-08-21 13:16:33][350832442429561][759 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 13:16:33][350832442429561][759 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:16:33][350832442429561][759 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODMyNDQyNDI5NTYxIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMTRTWlRQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIwOSJ9'" -e "main()" -q"
[2025-08-21 13:16:33][350832442429561][759 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:16:33][350832442429561][759 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODMyNDQyNDI5NTYxIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMTRTWlRQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIwOSJ9'" -e "main()" -q"
[2025-08-21 13:16:35][350832442429561][3570 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODMyNDQyNDI5NTYxIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMTRTWlRQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIwOSJ9"\r\n
[2025-08-21 13:16:37][350832442429561][5289 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed45fdfa-b62a-4f19-8a60-cea6b18886c9","id":"QR_ed45fdfa-b62a-4f19-8a60-cea6b18886c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:16:37][350832442429561][5289 ms][DEBUG] proc_open done in 4530 ms; code=0; res.len=3152
[2025-08-21 13:16:37][350832442429561][5289 ms][DEBUG] END   runCmdUntilRes#1 in 4530 ms
[2025-08-21 13:16:37][350832442429561][5289 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:16:46][355347582623407][0 ms][INFO] === Request start ===
[2025-08-21 13:16:46][355347582623407][1 ms][DEBUG] START check_frida
[2025-08-21 13:16:46][355347582623407][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:16:46][355347582623407][309 ms][DEBUG] SU: done in 308 ms; outroot          4632     1 2349136  50104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:16:46][355347582623407][309 ms][DEBUG] check_frida: running
[2025-08-21 13:16:46][355347582623407][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 13:16:46][355347582623407][309 ms][DEBUG] START check_internet
[2025-08-21 13:16:46][355347582623407][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:16:46][355347582623407][575 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.130/163.130/163.130/0.000 ms\n
[2025-08-21 13:16:46][355347582623407][575 ms][DEBUG] check_internet: online
[2025-08-21 13:16:46][355347582623407][575 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 13:16:46][355347582623407][575 ms][DEBUG] START check_scloud
[2025-08-21 13:16:46][355347582623407][575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:16:47][355347582623407][887 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23511380 108312 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:16:47][355347582623407][887 ms][DEBUG] targetPkg: running
[2025-08-21 13:16:47][355347582623407][887 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 13:16:47][355347582623407][888 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:16:47][355347582623407][888 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQ3NTgyNjIzNDA3IiwibW9kZWwiOiJTTS1OOTgxTiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ044MDJBQU1LIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg3NSJ9'" -e "main()" -q"
[2025-08-21 13:16:47][355347582623407][888 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:16:47][355347582623407][888 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQ3NTgyNjIzNDA3IiwibW9kZWwiOiJTTS1OOTgxTiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ044MDJBQU1LIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg3NSJ9'" -e "main()" -q"
[2025-08-21 13:16:50][355347582623407][3715 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MzQ3NTgyNjIzNDA3IiwibW9kZWwiOiJTTS1OOTgxTiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ044MDJBQU1LIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg3NSJ9"\r\n
[2025-08-21 13:16:52][355347582623407][5995 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5303e9ca-37a8-4710-a1c8-dc4811b9be0d","id":"QR_5303e9ca-37a8-4710-a1c8-dc4811b9be0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:16:52][355347582623407][5995 ms][DEBUG] proc_open done in 5107 ms; code=0; res.len=3152
[2025-08-21 13:16:52][355347582623407][5996 ms][DEBUG] END   runCmdUntilRes#1 in 5108 ms
[2025-08-21 13:16:52][355347582623407][5996 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:17:01][351978522049529][1 ms][INFO] === Request start ===
[2025-08-21 13:17:01][351978522049529][2 ms][DEBUG] START check_frida
[2025-08-21 13:17:01][351978522049529][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:17:01][351978522049529][269 ms][DEBUG] SU: done in 268 ms; outroot          4632     1 2349136  50152 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:17:01][351978522049529][269 ms][DEBUG] check_frida: running
[2025-08-21 13:17:01][351978522049529][269 ms][DEBUG] END   check_frida in 268 ms
[2025-08-21 13:17:01][351978522049529][269 ms][DEBUG] START check_scloud
[2025-08-21 13:17:01][351978522049529][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:17:02][351978522049529][503 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23511412 106732 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:17:02][351978522049529][504 ms][DEBUG] targetPkg: running
[2025-08-21 13:17:02][351978522049529][504 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 13:17:02][351978522049529][504 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:17:02][351978522049529][504 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIyMDQ5NTI5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ5MTVYOEdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI2NCJ9'" -e "main()" -q"
[2025-08-21 13:17:02][351978522049529][504 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:17:02][351978522049529][504 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTc4NTIyMDQ5NTI5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ5MTVYOEdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI2NCJ9'" -e "main()" -q"
[2025-08-21 13:17:04][351978522049529][3346 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxOTc4NTIyMDQ5NTI5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ5MTVYOEdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI2NCJ9"\r\n
[2025-08-21 13:17:06][351978522049529][5112 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d0e90c3-a3b9-4090-aa10-1df1306732b8","id":"QR_9d0e90c3-a3b9-4090-aa10-1df1306732b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:17:06][351978522049529][5112 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 13:17:06][351978522049529][5112 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-21 13:17:06][351978522049529][5112 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:17:21][354149400263312][1 ms][INFO] === Request start ===
[2025-08-21 13:17:21][354149400263312][2 ms][DEBUG] START check_frida
[2025-08-21 13:17:21][354149400263312][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:17:21][354149400263312][248 ms][DEBUG] SU: done in 247 ms; outroot          4632     1 2332716  50120 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:17:21][354149400263312][249 ms][DEBUG] check_frida: running
[2025-08-21 13:17:21][354149400263312][249 ms][DEBUG] END   check_frida in 247 ms
[2025-08-21 13:17:21][354149400263312][249 ms][DEBUG] START check_scloud
[2025-08-21 13:17:21][354149400263312][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:17:22][354149400263312][545 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23511444 107280 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:17:22][354149400263312][545 ms][DEBUG] targetPkg: running
[2025-08-21 13:17:22][354149400263312][545 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 13:17:22][354149400263312][545 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:17:22][354149400263312][545 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTQ5NDAwMjYzMzEyIiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1IyMDMzWEJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1ODM2In0='" -e "main()" -q"
[2025-08-21 13:17:22][354149400263312][545 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:17:22][354149400263312][545 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTQ5NDAwMjYzMzEyIiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1IyMDMzWEJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1ODM2In0='" -e "main()" -q"
[2025-08-21 13:17:24][354149400263312][3404 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTQ5NDAwMjYzMzEyIiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1IyMDMzWEJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1ODM2In0="\r\n
[2025-08-21 13:17:28][354149400263312][6731 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b341880-1de0-47a7-810f-383046779ccf","id":"QR_0b341880-1de0-47a7-810f-383046779ccf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:17:28][354149400263312][6732 ms][DEBUG] proc_open done in 6186 ms; code=0; res.len=3152
[2025-08-21 13:17:28][354149400263312][6732 ms][DEBUG] END   runCmdUntilRes#1 in 6187 ms
[2025-08-21 13:17:28][354149400263312][6732 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:17:38][350109211404871][0 ms][INFO] === Request start ===
[2025-08-21 13:17:38][350109211404871][1 ms][DEBUG] START check_frida
[2025-08-21 13:17:38][350109211404871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:17:38][350109211404871][287 ms][DEBUG] SU: done in 286 ms; outroot          4632     1 2349136  50120 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:17:38][350109211404871][287 ms][DEBUG] check_frida: running
[2025-08-21 13:17:38][350109211404871][287 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 13:17:38][350109211404871][287 ms][DEBUG] START check_scloud
[2025-08-21 13:17:38][350109211404871][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:17:38][350109211404871][568 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23511476 107996 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:17:38][350109211404871][569 ms][DEBUG] targetPkg: running
[2025-08-21 13:17:38][350109211404871][569 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 13:17:38][350109211404871][569 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:17:38][350109211404871][569 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTA5MjExNDA0ODcxIiwibW9kZWwiOiJTTS1BMTY2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MzI5WlRXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjUzIn0='" -e "main()" -q"
[2025-08-21 13:17:38][350109211404871][569 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:17:38][350109211404871][569 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTA5MjExNDA0ODcxIiwibW9kZWwiOiJTTS1BMTY2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MzI5WlRXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjUzIn0='" -e "main()" -q"
[2025-08-21 13:17:41][350109211404871][3380 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTA5MjExNDA0ODcxIiwibW9kZWwiOiJTTS1BMTY2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MzI5WlRXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjUzIn0="\r\n
[2025-08-21 13:17:42][350493702455224][1 ms][INFO] === Request start ===
[2025-08-21 13:17:45][350109211404871][7629 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_809136ae-050d-47e0-8ec7-d9b48f943441","id":"QR_809136ae-050d-47e0-8ec7-d9b48f943441","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:17:45][350109211404871][7629 ms][DEBUG] proc_open done in 7061 ms; code=0; res.len=3152
[2025-08-21 13:17:45][350109211404871][7629 ms][DEBUG] END   runCmdUntilRes#1 in 7061 ms
[2025-08-21 13:17:45][350109211404871][7629 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:17:46][350493702455224][4054 ms][DEBUG] START check_frida
[2025-08-21 13:17:46][350493702455224][4054 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:17:46][350493702455224][4304 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136  50148 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:17:46][350493702455224][4304 ms][DEBUG] check_frida: running
[2025-08-21 13:17:46][350493702455224][4304 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:17:46][350493702455224][4304 ms][DEBUG] START check_scloud
[2025-08-21 13:17:46][350493702455224][4304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:17:47][350493702455224][4616 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23511508 108592 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:17:47][350493702455224][4616 ms][DEBUG] targetPkg: running
[2025-08-21 13:17:47][350493702455224][4616 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 13:17:47][350493702455224][4616 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:17:47][350493702455224][4616 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDkzNzAyNDU1MjI0IiwibW9kZWwiOiJTTS1TOTIxTiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gzMEg0VEhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQxNCJ9'" -e "main()" -q"
[2025-08-21 13:17:47][350493702455224][4616 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:17:47][350493702455224][4616 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDkzNzAyNDU1MjI0IiwibW9kZWwiOiJTTS1TOTIxTiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gzMEg0VEhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQxNCJ9'" -e "main()" -q"
[2025-08-21 13:17:49][350493702455224][7459 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDkzNzAyNDU1MjI0IiwibW9kZWwiOiJTTS1TOTIxTiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gzMEg0VEhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQxNCJ9"\r\n
[2025-08-21 13:17:51][350493702455224][9380 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b487bac-b2de-48d4-8290-2ebbffe9b5f4","id":"QR_4b487bac-b2de-48d4-8290-2ebbffe9b5f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:17:51][350493702455224][9381 ms][DEBUG] proc_open done in 4765 ms; code=0; res.len=3152
[2025-08-21 13:17:51][350493702455224][9381 ms][DEBUG] END   runCmdUntilRes#1 in 4765 ms
[2025-08-21 13:17:51][350493702455224][9381 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:17:55][359322107829405][0 ms][INFO] === Request start ===
[2025-08-21 13:17:55][359322107829405][1 ms][DEBUG] START check_frida
[2025-08-21 13:17:55][359322107829405][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:17:55][359322107829405][295 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2349136  50096 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:17:55][359322107829405][295 ms][DEBUG] check_frida: running
[2025-08-21 13:17:55][359322107829405][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 13:17:55][359322107829405][295 ms][DEBUG] START check_scloud
[2025-08-21 13:17:55][359322107829405][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:17:55][359322107829405][577 ms][DEBUG] SU: done in 283 ms; outu0_a118       7399 30745 23511540 107204 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:17:55][359322107829405][578 ms][DEBUG] targetPkg: running
[2025-08-21 13:17:55][359322107829405][578 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 13:17:55][359322107829405][578 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:17:55][359322107829405][578 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MzIyMTA3ODI5NDA1IiwibW9kZWwiOiJTTS1BNTA1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE05MVlQUUdWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQTFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ4MiJ9'" -e "main()" -q"
[2025-08-21 13:17:55][359322107829405][578 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:17:55][359322107829405][578 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MzIyMTA3ODI5NDA1IiwibW9kZWwiOiJTTS1BNTA1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE05MVlQUUdWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQTFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ4MiJ9'" -e "main()" -q"
[2025-08-21 13:17:56][351393986480253][0 ms][INFO] === Request start ===
[2025-08-21 13:17:58][359322107829405][3403 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MzIyMTA3ODI5NDA1IiwibW9kZWwiOiJTTS1BNTA1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE05MVlQUUdWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQTFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ4MiJ9"\r\n
[2025-08-21 13:18:00][359322107829405][5778 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31477b04-e86a-42b6-86b6-4281cd670c82","id":"QR_31477b04-e86a-42b6-86b6-4281cd670c82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:18:00][359322107829405][5778 ms][DEBUG] proc_open done in 5200 ms; code=0; res.len=3152
[2025-08-21 13:18:00][359322107829405][5778 ms][DEBUG] END   runCmdUntilRes#1 in 5200 ms
[2025-08-21 13:18:00][359322107829405][5778 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:18:00][351393986480253][4058 ms][DEBUG] START check_frida
[2025-08-21 13:18:00][351393986480253][4058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:18:01][351393986480253][4355 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136  50136 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:18:01][351393986480253][4355 ms][DEBUG] check_frida: running
[2025-08-21 13:18:01][351393986480253][4355 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:18:01][351393986480253][4355 ms][DEBUG] START check_internet
[2025-08-21 13:18:01][351393986480253][4355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:18:01][351393986480253][4620 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.587/149.587/149.587/0.000 ms\n
[2025-08-21 13:18:01][351393986480253][4620 ms][DEBUG] check_internet: online
[2025-08-21 13:18:01][351393986480253][4620 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 13:18:01][351393986480253][4620 ms][DEBUG] START check_scloud
[2025-08-21 13:18:01][351393986480253][4620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:18:01][351393986480253][4855 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23511572 107760 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:18:01][351393986480253][4855 ms][DEBUG] targetPkg: running
[2025-08-21 13:18:01][351393986480253][4855 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 13:18:01][351393986480253][4855 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:18:01][351393986480253][4855 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzkzOTg2NDgwMjUzIiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMDM5TlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTg0OCJ9'" -e "main()" -q"
[2025-08-21 13:18:01][351393986480253][4855 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:18:01][351393986480253][4855 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzkzOTg2NDgwMjUzIiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMDM5TlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTg0OCJ9'" -e "main()" -q"
[2025-08-21 13:18:04][351393986480253][7666 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzkzOTg2NDgwMjUzIiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMDM5TlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTg0OCJ9"\r\n
[2025-08-21 13:18:06][351393986480253][9447 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfb29db2-0e35-4b75-8378-e2954ed89ed1","id":"QR_cfb29db2-0e35-4b75-8378-e2954ed89ed1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:18:06][351393986480253][9447 ms][DEBUG] proc_open done in 4593 ms; code=0; res.len=3152
[2025-08-21 13:18:06][351393986480253][9447 ms][DEBUG] END   runCmdUntilRes#1 in 4593 ms
[2025-08-21 13:18:06][351393986480253][9447 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:18:07][350290811150252][0 ms][INFO] === Request start ===
[2025-08-21 13:18:07][350290811150252][1 ms][DEBUG] START check_frida
[2025-08-21 13:18:07][350290811150252][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:18:07][350290811150252][256 ms][DEBUG] SU: done in 255 ms; outroot          4632     1 2349136  50116 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:18:07][350290811150252][256 ms][DEBUG] check_frida: running
[2025-08-21 13:18:07][350290811150252][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 13:18:07][350290811150252][256 ms][DEBUG] START check_internet
[2025-08-21 13:18:07][350290811150252][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:18:07][350290811150252][506 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.101/150.101/150.101/0.000 ms\n
[2025-08-21 13:18:07][350290811150252][506 ms][DEBUG] check_internet: online
[2025-08-21 13:18:07][350290811150252][506 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 13:18:07][350290811150252][506 ms][DEBUG] START check_scloud
[2025-08-21 13:18:07][350290811150252][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:18:07][350290811150252][756 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23511604 108356 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:18:07][350290811150252][756 ms][DEBUG] targetPkg: running
[2025-08-21 13:18:07][350290811150252][756 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 13:18:07][350290811150252][756 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:18:07][350290811150252][756 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjkwODExMTUwMjUyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMTdXMVNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzE3NiJ9'" -e "main()" -q"
[2025-08-21 13:18:07][350290811150252][756 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:18:07][350290811150252][756 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjkwODExMTUwMjUyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMTdXMVNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzE3NiJ9'" -e "main()" -q"
[2025-08-21 13:18:10][350290811150252][3583 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjkwODExMTUwMjUyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMTdXMVNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzE3NiJ9"\r\n
[2025-08-21 13:18:12][350290811150252][5411 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4bce26b-83df-47cb-9b50-e05a97ad6ab7","id":"QR_d4bce26b-83df-47cb-9b50-e05a97ad6ab7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:18:12][350290811150252][5411 ms][DEBUG] proc_open done in 4655 ms; code=0; res.len=3152
[2025-08-21 13:18:12][350290811150252][5411 ms][DEBUG] END   runCmdUntilRes#1 in 4655 ms
[2025-08-21 13:18:12][350290811150252][5411 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:18:15][356408519883008][0 ms][INFO] === Request start ===
[2025-08-21 13:18:15][356408519883008][1 ms][DEBUG] START check_frida
[2025-08-21 13:18:15][356408519883008][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:18:15][356408519883008][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  50112 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:18:15][356408519883008][297 ms][DEBUG] check_frida: running
[2025-08-21 13:18:15][356408519883008][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:18:15][356408519883008][297 ms][DEBUG] START check_internet
[2025-08-21 13:18:15][356408519883008][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:18:16][356408519883008][656 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.410/242.410/242.410/0.000 ms\n
[2025-08-21 13:18:16][356408519883008][656 ms][DEBUG] check_internet: online
[2025-08-21 13:18:16][356408519883008][656 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 13:18:16][356408519883008][656 ms][DEBUG] START check_scloud
[2025-08-21 13:18:16][356408519883008][656 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:18:16][356408519883008][938 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23511636 108956 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:18:16][356408519883008][938 ms][DEBUG] targetPkg: running
[2025-08-21 13:18:16][356408519883008][938 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 13:18:16][356408519883008][938 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:18:16][356408519883008][938 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDA4NTE5ODgzMDA4IiwibW9kZWwiOiJTTS1BMTU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMkoxTE5LIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODk5In0='" -e "main()" -q"
[2025-08-21 13:18:16][356408519883008][938 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:18:16][356408519883008][938 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDA4NTE5ODgzMDA4IiwibW9kZWwiOiJTTS1BMTU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMkoxTE5LIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODk5In0='" -e "main()" -q"
[2025-08-21 13:18:19][356408519883008][3734 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDA4NTE5ODgzMDA4IiwibW9kZWwiOiJTTS1BMTU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMkoxTE5LIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODk5In0="\r\n
[2025-08-21 13:18:24][356408519883008][9029 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30ce24a9-53b2-4633-81ec-14c8c64d6d39","id":"QR_30ce24a9-53b2-4633-81ec-14c8c64d6d39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:18:24][356408519883008][9030 ms][DEBUG] proc_open done in 8091 ms; code=0; res.len=3152
[2025-08-21 13:18:24][356408519883008][9030 ms][DEBUG] END   runCmdUntilRes#1 in 8091 ms
[2025-08-21 13:18:24][356408519883008][9030 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:18:38][350101090768179][0 ms][INFO] === Request start ===
[2025-08-21 13:18:38][350101090768179][1 ms][DEBUG] START check_frida
[2025-08-21 13:18:38][350101090768179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:18:38][350101090768179][282 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716  50124 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:18:38][350101090768179][282 ms][DEBUG] check_frida: running
[2025-08-21 13:18:38][350101090768179][282 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:18:38][350101090768179][282 ms][DEBUG] START check_internet
[2025-08-21 13:18:38][350101090768179][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:18:39][350101090768179][579 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.348/184.348/184.348/0.000 ms\n
[2025-08-21 13:18:39][350101090768179][579 ms][DEBUG] check_internet: online
[2025-08-21 13:18:39][350101090768179][579 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 13:18:39][350101090768179][579 ms][DEBUG] START check_scloud
[2025-08-21 13:18:39][350101090768179][579 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:18:39][350101090768179][829 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23511668 105100 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:18:39][350101090768179][829 ms][DEBUG] targetPkg: running
[2025-08-21 13:18:39][350101090768179][829 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 13:18:39][350101090768179][829 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:18:39][350101090768179][829 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTAxMDkwNzY4MTc5IiwibW9kZWwiOiJTTS1GNzExVSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I4MURBNk5SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTE1In0='" -e "main()" -q"
[2025-08-21 13:18:39][350101090768179][829 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:18:39][350101090768179][829 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTAxMDkwNzY4MTc5IiwibW9kZWwiOiJTTS1GNzExVSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I4MURBNk5SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTE1In0='" -e "main()" -q"
[2025-08-21 13:18:42][350101090768179][3672 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTAxMDkwNzY4MTc5IiwibW9kZWwiOiJTTS1GNzExVSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I4MURBNk5SIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTE1In0="\r\n
[2025-08-21 13:18:45][350101090768179][6702 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1841c4b2-9f0f-4726-8f6c-244c405ae69a","id":"QR_1841c4b2-9f0f-4726-8f6c-244c405ae69a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:18:45][350101090768179][6702 ms][DEBUG] proc_open done in 5874 ms; code=0; res.len=3152
[2025-08-21 13:18:45][350101090768179][6703 ms][DEBUG] END   runCmdUntilRes#1 in 5874 ms
[2025-08-21 13:18:45][350101090768179][6703 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:18:55][352397452940012][0 ms][INFO] === Request start ===
[2025-08-21 13:18:55][352397452940012][1 ms][DEBUG] START check_frida
[2025-08-21 13:18:55][352397452940012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:18:55][352397452940012][283 ms][DEBUG] SU: done in 282 ms; outroot          4632     1 2349136  50104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:18:55][352397452940012][283 ms][DEBUG] check_frida: running
[2025-08-21 13:18:55][352397452940012][283 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 13:18:55][352397452940012][283 ms][DEBUG] START check_internet
[2025-08-21 13:18:55][352397452940012][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:18:55][352397452940012][549 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=177 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 177.577/177.577/177.577/0.000 ms\n
[2025-08-21 13:18:55][352397452940012][549 ms][DEBUG] check_internet: online
[2025-08-21 13:18:55][352397452940012][549 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 13:18:55][352397452940012][549 ms][DEBUG] START check_scloud
[2025-08-21 13:18:55][352397452940012][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:18:55][352397452940012][816 ms][DEBUG] SU: done in 267 ms; outu0_a118       7399 30745 23511700 105644 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:18:55][352397452940012][816 ms][DEBUG] targetPkg: running
[2025-08-21 13:18:55][352397452940012][816 ms][DEBUG] END   check_scloud in 267 ms
[2025-08-21 13:18:55][352397452940012][816 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:18:55][352397452940012][816 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUyOTQwMDEyIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRCMEZNOERLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ2MiJ9'" -e "main()" -q"
[2025-08-21 13:18:55][352397452940012][816 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:18:55][352397452940012][816 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUyOTQwMDEyIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRCMEZNOERLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ2MiJ9'" -e "main()" -q"
[2025-08-21 13:18:58][352397452940012][3642 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzk3NDUyOTQwMDEyIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRCMEZNOERLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ2MiJ9"\r\n
[2025-08-21 13:19:05][352397452940012][10781 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0db9753e-07af-4245-bcf8-bd5ad6aeed52","id":"QR_0db9753e-07af-4245-bcf8-bd5ad6aeed52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:19:05][352397452940012][10781 ms][DEBUG] proc_open done in 9965 ms; code=0; res.len=3152
[2025-08-21 13:19:05][352397452940012][10781 ms][DEBUG] END   runCmdUntilRes#1 in 9965 ms
[2025-08-21 13:19:05][352397452940012][10781 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:19:08][353684141001770][0 ms][INFO] === Request start ===
[2025-08-21 13:19:08][353684141001770][1 ms][DEBUG] START check_frida
[2025-08-21 13:19:08][353684141001770][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:19:08][353684141001770][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2349136  50104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:19:08][353684141001770][294 ms][DEBUG] check_frida: running
[2025-08-21 13:19:08][353684141001770][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 13:19:08][353684141001770][294 ms][DEBUG] START check_scloud
[2025-08-21 13:19:08][353684141001770][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:19:09][353684141001770][591 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23511732 106188 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:19:09][353684141001770][591 ms][DEBUG] targetPkg: running
[2025-08-21 13:19:09][353684141001770][591 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:19:09][353684141001770][591 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:19:09][353684141001770][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQxMDAxNzcwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MDUwMkxUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgyNCJ9'" -e "main()" -q"
[2025-08-21 13:19:09][353684141001770][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:19:09][353684141001770][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQxMDAxNzcwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MDUwMkxUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgyNCJ9'" -e "main()" -q"
[2025-08-21 13:19:12][353684141001770][3403 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjg0MTQxMDAxNzcwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MDUwMkxUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgyNCJ9"\r\n
[2025-08-21 13:19:13][353684141001770][5262 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8623f73-922f-43e8-bff6-f3671c2c7b7c","id":"QR_c8623f73-922f-43e8-bff6-f3671c2c7b7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:19:13][353684141001770][5262 ms][DEBUG] proc_open done in 4671 ms; code=0; res.len=3152
[2025-08-21 13:19:13][353684141001770][5262 ms][DEBUG] END   runCmdUntilRes#1 in 4671 ms
[2025-08-21 13:19:13][353684141001770][5263 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:19:14][350814495066029][0 ms][INFO] === Request start ===
[2025-08-21 13:19:14][350814495066029][1 ms][DEBUG] START check_frida
[2025-08-21 13:19:14][350814495066029][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:19:14][350814495066029][277 ms][DEBUG] SU: done in 276 ms; outroot          4632     1 2349136  50108 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:19:14][350814495066029][277 ms][DEBUG] check_frida: running
[2025-08-21 13:19:14][350814495066029][277 ms][DEBUG] END   check_frida in 276 ms
[2025-08-21 13:19:14][350814495066029][277 ms][DEBUG] START check_scloud
[2025-08-21 13:19:14][350814495066029][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:19:14][350814495066029][573 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23511764 106732 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:19:14][350814495066029][573 ms][DEBUG] targetPkg: running
[2025-08-21 13:19:14][350814495066029][573 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 13:19:14][350814495066029][573 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:19:14][350814495066029][574 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk1MDY2MDI5IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMTBOQTFFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDg1NyJ9'" -e "main()" -q"
[2025-08-21 13:19:14][350814495066029][574 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:19:14][350814495066029][574 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk1MDY2MDI5IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMTBOQTFFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDg1NyJ9'" -e "main()" -q"
[2025-08-21 13:19:17][350814495066029][3369 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODE0NDk1MDY2MDI5IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMTBOQTFFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDg1NyJ9"\r\n
[2025-08-21 13:19:19][350814495066029][5026 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3338e9e7-55b5-4a96-b4fc-0648815b4d4d","id":"QR_3338e9e7-55b5-4a96-b4fc-0648815b4d4d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:19:19][350814495066029][5026 ms][DEBUG] proc_open done in 4453 ms; code=0; res.len=3152
[2025-08-21 13:19:19][350814495066029][5026 ms][DEBUG] END   runCmdUntilRes#1 in 4453 ms
[2025-08-21 13:19:19][350814495066029][5026 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:19:34][353313360862833][0 ms][INFO] === Request start ===
[2025-08-21 13:19:34][353313360862833][0 ms][DEBUG] START check_frida
[2025-08-21 13:19:34][353313360862833][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:19:34][353313360862833][282 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716  50104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:19:34][353313360862833][282 ms][DEBUG] check_frida: running
[2025-08-21 13:19:34][353313360862833][282 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:19:34][353313360862833][282 ms][DEBUG] START check_scloud
[2025-08-21 13:19:34][353313360862833][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:19:35][353313360862833][578 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23511796 107284 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:19:35][353313360862833][578 ms][DEBUG] targetPkg: running
[2025-08-21 13:19:35][353313360862833][578 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 13:19:35][353313360862833][578 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:19:35][353313360862833][578 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYwODYyODMzIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMFg2RDFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzI1In0='" -e "main()" -q"
[2025-08-21 13:19:35][353313360862833][578 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:19:35][353313360862833][578 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYwODYyODMzIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMFg2RDFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzI1In0='" -e "main()" -q"
[2025-08-21 13:19:37][353313360862833][3406 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEzMzYwODYyODMzIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMFg2RDFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzI1In0="\r\n
[2025-08-21 13:19:40][353313360862833][6499 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c5bf0cd-cb4f-45d8-a3b1-67fe0b7d9212","id":"QR_2c5bf0cd-cb4f-45d8-a3b1-67fe0b7d9212","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:19:40][353313360862833][6499 ms][DEBUG] proc_open done in 5920 ms; code=0; res.len=3152
[2025-08-21 13:19:40][353313360862833][6499 ms][DEBUG] END   runCmdUntilRes#1 in 5921 ms
[2025-08-21 13:19:40][353313360862833][6499 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:19:50][356414815313542][0 ms][INFO] === Request start ===
[2025-08-21 13:19:50][356414815313542][1 ms][DEBUG] START check_frida
[2025-08-21 13:19:50][356414815313542][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:19:51][356414815313542][272 ms][DEBUG] SU: done in 271 ms; outroot          4632     1 2349136  50144 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:19:51][356414815313542][273 ms][DEBUG] check_frida: running
[2025-08-21 13:19:51][356414815313542][273 ms][DEBUG] END   check_frida in 272 ms
[2025-08-21 13:19:51][356414815313542][273 ms][DEBUG] START check_scloud
[2025-08-21 13:19:51][356414815313542][273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:19:51][356414815313542][585 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23511828 107828 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:19:51][356414815313542][585 ms][DEBUG] targetPkg: running
[2025-08-21 13:19:51][356414815313542][585 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 13:19:51][356414815313542][585 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:19:51][356414815313542][585 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE1MzEzNTQyIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRDMDFMRE5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM3NyJ9'" -e "main()" -q"
[2025-08-21 13:19:51][356414815313542][585 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:19:51][356414815313542][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE1MzEzNTQyIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRDMDFMRE5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM3NyJ9'" -e "main()" -q"
[2025-08-21 13:19:54][356414815313542][3443 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE0ODE1MzEzNTQyIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRDMDFMRE5FIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM3NyJ9"\r\n
[2025-08-21 13:19:56][356414815313542][5099 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_730fff64-8bf8-41b7-9220-4f036cc01e61","id":"QR_730fff64-8bf8-41b7-9220-4f036cc01e61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:19:56][356414815313542][5100 ms][DEBUG] proc_open done in 4515 ms; code=0; res.len=3152
[2025-08-21 13:19:56][356414815313542][5100 ms][DEBUG] END   runCmdUntilRes#1 in 4515 ms
[2025-08-21 13:19:56][356414815313542][5100 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:20:13][350013884042366][1 ms][INFO] === Request start ===
[2025-08-21 13:20:13][350013884042366][1 ms][DEBUG] START check_frida
[2025-08-21 13:20:13][350013884042366][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:20:13][350013884042366][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2332716  50148 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:20:13][350013884042366][294 ms][DEBUG] check_frida: running
[2025-08-21 13:20:13][350013884042366][295 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 13:20:13][350013884042366][295 ms][DEBUG] START check_internet
[2025-08-21 13:20:13][350013884042366][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:20:14][350013884042366][794 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.826/202.826/202.826/0.000 ms\n
[2025-08-21 13:20:14][350013884042366][794 ms][DEBUG] check_internet: online
[2025-08-21 13:20:14][350013884042366][794 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 13:20:14][350013884042366][794 ms][DEBUG] START check_scloud
[2025-08-21 13:20:14][350013884042366][794 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:20:14][350013884042366][1044 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23511860 108372 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:20:14][350013884042366][1044 ms][DEBUG] targetPkg: running
[2025-08-21 13:20:14][350013884042366][1044 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 13:20:14][350013884042366][1044 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:20:14][350013884042366][1044 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg0MDQyMzY2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMDFITjBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIyNyJ9'" -e "main()" -q"
[2025-08-21 13:20:14][350013884042366][1044 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:20:14][350013884042366][1044 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODg0MDQyMzY2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMDFITjBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIyNyJ9'" -e "main()" -q"
[2025-08-21 13:20:17][350013884042366][3856 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODg0MDQyMzY2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRDMDFITjBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIyNyJ9"\r\n
[2025-08-21 13:20:19][350013884042366][5918 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a0b8404-9e9f-4ac8-b13d-defa22244a58","id":"QR_4a0b8404-9e9f-4ac8-b13d-defa22244a58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:20:19][350013884042366][5918 ms][DEBUG] proc_open done in 4874 ms; code=0; res.len=3152
[2025-08-21 13:20:19][350013884042366][5918 ms][DEBUG] END   runCmdUntilRes#1 in 4874 ms
[2025-08-21 13:20:19][350013884042366][5919 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:20:26][353818874121229][0 ms][INFO] === Request start ===
[2025-08-21 13:20:26][353818874121229][1 ms][DEBUG] START check_frida
[2025-08-21 13:20:26][353818874121229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:20:26][353818874121229][283 ms][DEBUG] SU: done in 282 ms; outroot          4632     1 2349136  50104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:20:26][353818874121229][283 ms][DEBUG] check_frida: running
[2025-08-21 13:20:26][353818874121229][283 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 13:20:26][353818874121229][283 ms][DEBUG] START check_internet
[2025-08-21 13:20:26][353818874121229][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:20:27][353818874121229][673 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.219/267.219/267.219/0.000 ms\n
[2025-08-21 13:20:27][353818874121229][673 ms][DEBUG] check_internet: online
[2025-08-21 13:20:27][353818874121229][673 ms][DEBUG] END   check_internet in 390 ms
[2025-08-21 13:20:27][353818874121229][673 ms][DEBUG] START check_scloud
[2025-08-21 13:20:27][353818874121229][673 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:20:27][353818874121229][907 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23511892 108916 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:20:27][353818874121229][907 ms][DEBUG] targetPkg: running
[2025-08-21 13:20:27][353818874121229][907 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 13:20:27][353818874121229][907 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:20:27][353818874121229][907 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzODE4ODc0MTIxMjI5IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4WVhBMEROQVhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ2NCJ9'" -e "main()" -q"
[2025-08-21 13:20:27][353818874121229][907 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:20:27][353818874121229][908 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzODE4ODc0MTIxMjI5IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4WVhBMEROQVhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ2NCJ9'" -e "main()" -q"
[2025-08-21 13:20:30][353818874121229][3750 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzODE4ODc0MTIxMjI5IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4WVhBMEROQVhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ2NCJ9"\r\n
[2025-08-21 13:20:31][353818874121229][5516 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42ba4902-2d9b-4bed-bf83-1533f49e3b6a","id":"QR_42ba4902-2d9b-4bed-bf83-1533f49e3b6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:20:31][353818874121229][5516 ms][DEBUG] proc_open done in 4609 ms; code=0; res.len=3152
[2025-08-21 13:20:31][353818874121229][5516 ms][DEBUG] END   runCmdUntilRes#1 in 4609 ms
[2025-08-21 13:20:31][353818874121229][5516 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:20:40][350361083874000][0 ms][INFO] === Request start ===
[2025-08-21 13:20:40][350361083874000][1 ms][DEBUG] START check_frida
[2025-08-21 13:20:40][350361083874000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:20:41][350361083874000][288 ms][DEBUG] SU: done in 287 ms; outroot          4632     1 2349136  50112 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:20:41][350361083874000][288 ms][DEBUG] check_frida: running
[2025-08-21 13:20:41][350361083874000][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 13:20:41][350361083874000][288 ms][DEBUG] START check_internet
[2025-08-21 13:20:41][350361083874000][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:20:41][350361083874000][648 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.710/232.710/232.710/0.000 ms\n
[2025-08-21 13:20:41][350361083874000][648 ms][DEBUG] check_internet: online
[2025-08-21 13:20:41][350361083874000][648 ms][DEBUG] END   check_internet in 360 ms
[2025-08-21 13:20:41][350361083874000][648 ms][DEBUG] START check_scloud
[2025-08-21 13:20:41][350361083874000][648 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:20:41][350361083874000][898 ms][DEBUG] SU: done in 249 ms; outu0_a118       7399 30745 23511924 109464 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:20:41][350361083874000][898 ms][DEBUG] targetPkg: running
[2025-08-21 13:20:41][350361083874000][898 ms][DEBUG] END   check_scloud in 249 ms
[2025-08-21 13:20:41][350361083874000][898 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:20:41][350361083874000][898 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzYxMDgzODc0MDAwIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1c0MDE5MUxFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzNiJ9'" -e "main()" -q"
[2025-08-21 13:20:41][350361083874000][898 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:20:41][350361083874000][898 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzYxMDgzODc0MDAwIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1c0MDE5MUxFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzNiJ9'" -e "main()" -q"
[2025-08-21 13:20:44][350361083874000][3741 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzYxMDgzODc0MDAwIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1c0MDE5MUxFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzNiJ9"\r\n
[2025-08-21 13:20:46][350361083874000][5631 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5a1708c-4a12-4f26-9d5d-4f58e34a3264","id":"QR_a5a1708c-4a12-4f26-9d5d-4f58e34a3264","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:20:46][350361083874000][5632 ms][DEBUG] proc_open done in 4734 ms; code=0; res.len=3152
[2025-08-21 13:20:46][350361083874000][5632 ms][DEBUG] END   runCmdUntilRes#1 in 4734 ms
[2025-08-21 13:20:46][350361083874000][5632 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:20:55][359010330787884][0 ms][INFO] === Request start ===
[2025-08-21 13:20:55][359010330787884][1 ms][DEBUG] START check_frida
[2025-08-21 13:20:55][359010330787884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:20:56][359010330787884][296 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2349136  50128 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:20:56][359010330787884][296 ms][DEBUG] check_frida: running
[2025-08-21 13:20:56][359010330787884][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 13:20:56][359010330787884][296 ms][DEBUG] START check_internet
[2025-08-21 13:20:56][359010330787884][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:20:56][359010330787884][655 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.014/245.014/245.014/0.000 ms\n
[2025-08-21 13:20:56][359010330787884][655 ms][DEBUG] check_internet: online
[2025-08-21 13:20:56][359010330787884][655 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 13:20:56][359010330787884][655 ms][DEBUG] START check_scloud
[2025-08-21 13:20:56][359010330787884][655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:20:56][359010330787884][936 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23511956 110008 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:20:56][359010330787884][936 ms][DEBUG] targetPkg: running
[2025-08-21 13:20:56][359010330787884][936 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 13:20:56][359010330787884][936 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:20:56][359010330787884][936 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MDEwMzMwNzg3ODg0IiwibW9kZWwiOiJTTS1OOTgxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05BMDc4UUdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMTAxIn0='" -e "main()" -q"
[2025-08-21 13:20:56][359010330787884][937 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:20:56][359010330787884][937 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MDEwMzMwNzg3ODg0IiwibW9kZWwiOiJTTS1OOTgxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05BMDc4UUdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMTAxIn0='" -e "main()" -q"
[2025-08-21 13:20:59][359010330787884][3779 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MDEwMzMwNzg3ODg0IiwibW9kZWwiOiJTTS1OOTgxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05BMDc4UUdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMTAxIn0="\r\n
[2025-08-21 13:21:03][359010330787884][8200 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f863e37d-b589-4c53-80ec-7de0e30717f7","id":"QR_f863e37d-b589-4c53-80ec-7de0e30717f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:21:03][359010330787884][8200 ms][DEBUG] proc_open done in 7264 ms; code=0; res.len=3152
[2025-08-21 13:21:03][359010330787884][8200 ms][DEBUG] END   runCmdUntilRes#1 in 7264 ms
[2025-08-21 13:21:03][359010330787884][8200 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:21:07][351877476719600][0 ms][INFO] === Request start ===
[2025-08-21 13:21:07][351877476719600][1 ms][DEBUG] START check_frida
[2025-08-21 13:21:07][351877476719600][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:21:07][351877476719600][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2349136  50112 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:21:07][351877476719600][294 ms][DEBUG] check_frida: running
[2025-08-21 13:21:07][351877476719600][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 13:21:07][351877476719600][294 ms][DEBUG] START check_scloud
[2025-08-21 13:21:07][351877476719600][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:21:08][351877476719600][590 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23511988 110576 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:21:08][351877476719600][591 ms][DEBUG] targetPkg: running
[2025-08-21 13:21:08][351877476719600][591 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:21:08][351877476719600][591 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:21:08][351877476719600][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc2NzE5NjAwIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDdCVlRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI2NyJ9'" -e "main()" -q"
[2025-08-21 13:21:08][351877476719600][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:21:08][351877476719600][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc2NzE5NjAwIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDdCVlRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI2NyJ9'" -e "main()" -q"
[2025-08-21 13:21:10][351877476719600][3402 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDc2NzE5NjAwIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDdCVlRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI2NyJ9"\r\n
[2025-08-21 13:21:11][351088371987272][1 ms][INFO] === Request start ===
[2025-08-21 13:21:13][351877476719600][5714 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74691345-592f-4c01-b609-afb424033dad","id":"QR_74691345-592f-4c01-b609-afb424033dad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:21:13][351877476719600][5714 ms][DEBUG] proc_open done in 5124 ms; code=0; res.len=3152
[2025-08-21 13:21:13][351877476719600][5714 ms][DEBUG] END   runCmdUntilRes#1 in 5124 ms
[2025-08-21 13:21:13][351877476719600][5714 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:21:13][351088371987272][2032 ms][DEBUG] START check_frida
[2025-08-21 13:21:13][351088371987272][2032 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:21:13][351088371987272][2329 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136  50132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:21:13][351088371987272][2329 ms][DEBUG] check_frida: running
[2025-08-21 13:21:13][351088371987272][2329 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:21:13][351088371987272][2329 ms][DEBUG] START check_scloud
[2025-08-21 13:21:13][351088371987272][2329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:21:14][351088371987272][2610 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23512020 111124 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:21:14][351088371987272][2610 ms][DEBUG] targetPkg: running
[2025-08-21 13:21:14][351088371987272][2610 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 13:21:14][351088371987272][2610 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:21:14][351088371987272][2610 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDg4MzcxOTg3MjcyIiwibW9kZWwiOiJTTS1NNjI1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJBMDJDUzdBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjMwIn0='" -e "main()" -q"
[2025-08-21 13:21:14][351088371987272][2610 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:21:14][351088371987272][2610 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDg4MzcxOTg3MjcyIiwibW9kZWwiOiJTTS1NNjI1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJBMDJDUzdBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjMwIn0='" -e "main()" -q"
[2025-08-21 13:21:16][351088371987272][5453 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDg4MzcxOTg3MjcyIiwibW9kZWwiOiJTTS1NNjI1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJBMDJDUzdBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjMwIn0="\r\n
[2025-08-21 13:21:19][351088371987272][7890 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_494f3b61-5d2c-4050-ba20-508a6d81e5f8","id":"QR_494f3b61-5d2c-4050-ba20-508a6d81e5f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:21:19][351088371987272][7891 ms][DEBUG] proc_open done in 5280 ms; code=0; res.len=3152
[2025-08-21 13:21:19][351088371987272][7891 ms][DEBUG] END   runCmdUntilRes#1 in 5281 ms
[2025-08-21 13:21:19][351088371987272][7891 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:21:35][357967970119870][0 ms][INFO] === Request start ===
[2025-08-21 13:21:35][357967970119870][1 ms][DEBUG] START check_frida
[2025-08-21 13:21:35][357967970119870][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:21:35][357967970119870][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2332716  50100 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:21:35][357967970119870][297 ms][DEBUG] check_frida: running
[2025-08-21 13:21:35][357967970119870][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:21:35][357967970119870][297 ms][DEBUG] START check_scloud
[2025-08-21 13:21:35][357967970119870][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:21:35][357967970119870][594 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512052 111684 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:21:35][357967970119870][594 ms][DEBUG] targetPkg: running
[2025-08-21 13:21:35][357967970119870][594 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:21:35][357967970119870][594 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:21:35][357967970119870][594 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTcwMTE5ODcwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMEg2SjVaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEzMyJ9'" -e "main()" -q"
[2025-08-21 13:21:35][357967970119870][594 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:21:35][357967970119870][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTcwMTE5ODcwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMEg2SjVaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEzMyJ9'" -e "main()" -q"
[2025-08-21 13:21:36][355802950843284][0 ms][INFO] === Request start ===
[2025-08-21 13:21:38][357967970119870][3421 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTY3OTcwMTE5ODcwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMEg2SjVaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEzMyJ9"\r\n
[2025-08-21 13:21:40][357967970119870][5421 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44350db5-d122-46f5-97b1-43e8e16956c7","id":"QR_44350db5-d122-46f5-97b1-43e8e16956c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:21:40][357967970119870][5421 ms][DEBUG] proc_open done in 4827 ms; code=0; res.len=3152
[2025-08-21 13:21:40][357967970119870][5421 ms][DEBUG] END   runCmdUntilRes#1 in 4827 ms
[2025-08-21 13:21:40][357967970119870][5421 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:21:41][355802950843284][5076 ms][DEBUG] START check_frida
[2025-08-21 13:21:41][355802950843284][5076 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:21:41][355802950843284][5373 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136  50132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:21:41][355802950843284][5373 ms][DEBUG] check_frida: running
[2025-08-21 13:21:41][355802950843284][5373 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:21:41][355802950843284][5373 ms][DEBUG] START check_scloud
[2025-08-21 13:21:41][355802950843284][5373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:21:41][355802950843284][5670 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512084 104828 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:21:41][355802950843284][5670 ms][DEBUG] targetPkg: running
[2025-08-21 13:21:41][355802950843284][5670 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:21:41][355802950843284][5670 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:21:41][355802950843284][5670 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODAyOTUwODQzMjg0IiwibW9kZWwiOiJTTS1TOTE2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cxMzNES1FNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTg0In0='" -e "main()" -q"
[2025-08-21 13:21:41][355802950843284][5670 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:21:41][355802950843284][5670 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODAyOTUwODQzMjg0IiwibW9kZWwiOiJTTS1TOTE2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cxMzNES1FNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTg0In0='" -e "main()" -q"
[2025-08-21 13:21:44][355802950843284][8497 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODAyOTUwODQzMjg0IiwibW9kZWwiOiJTTS1TOTE2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cxMzNES1FNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNTg0In0="\r\n
[2025-08-21 13:21:47][355802950843284][11090 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dcc3aa5b-52ea-4b6d-b838-a5657b8b416b","id":"QR_dcc3aa5b-52ea-4b6d-b838-a5657b8b416b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:21:47][355802950843284][11090 ms][DEBUG] proc_open done in 5420 ms; code=0; res.len=3152
[2025-08-21 13:21:47][355802950843284][11090 ms][DEBUG] END   runCmdUntilRes#1 in 5420 ms
[2025-08-21 13:21:47][355802950843284][11090 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:21:59][355339322117436][0 ms][INFO] === Request start ===
[2025-08-21 13:21:59][355339322117436][1 ms][DEBUG] START check_frida
[2025-08-21 13:21:59][355339322117436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:21:59][355339322117436][285 ms][DEBUG] SU: done in 284 ms; outroot          4632     1 2349136  50108 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:21:59][355339322117436][285 ms][DEBUG] check_frida: running
[2025-08-21 13:21:59][355339322117436][285 ms][DEBUG] END   check_frida in 284 ms
[2025-08-21 13:21:59][355339322117436][285 ms][DEBUG] START check_scloud
[2025-08-21 13:21:59][355339322117436][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:21:59][355339322117436][582 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512116 105384 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:21:59][355339322117436][582 ms][DEBUG] targetPkg: running
[2025-08-21 13:21:59][355339322117436][582 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:21:59][355339322117436][582 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:21:59][355339322117436][582 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzM5MzIyMTE3NDM2IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1MTcyNVZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Njg0In0='" -e "main()" -q"
[2025-08-21 13:21:59][355339322117436][582 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:21:59][355339322117436][582 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzM5MzIyMTE3NDM2IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1MTcyNVZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Njg0In0='" -e "main()" -q"
[2025-08-21 13:22:02][355339322117436][3409 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MzM5MzIyMTE3NDM2IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1MTcyNVZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Njg0In0="\r\n
[2025-08-21 13:22:07][355339322117436][8736 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25c32c29-79f3-4729-ae5f-1567549e2091","id":"QR_25c32c29-79f3-4729-ae5f-1567549e2091","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:22:07][355339322117436][8737 ms][DEBUG] proc_open done in 8155 ms; code=0; res.len=3152
[2025-08-21 13:22:07][355339322117436][8737 ms][DEBUG] END   runCmdUntilRes#1 in 8155 ms
[2025-08-21 13:22:07][355339322117436][8737 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:22:19][359156943364999][1 ms][INFO] === Request start ===
[2025-08-21 13:22:19][359156943364999][2 ms][DEBUG] START check_frida
[2025-08-21 13:22:19][359156943364999][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:22:19][359156943364999][239 ms][DEBUG] SU: done in 238 ms; outroot          4632     1 2332716  50116 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:22:19][359156943364999][239 ms][DEBUG] check_frida: running
[2025-08-21 13:22:19][359156943364999][239 ms][DEBUG] END   check_frida in 238 ms
[2025-08-21 13:22:19][359156943364999][239 ms][DEBUG] START check_internet
[2025-08-21 13:22:19][359156943364999][239 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:22:19][359156943364999][474 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.613/141.613/141.613/0.000 ms\n
[2025-08-21 13:22:19][359156943364999][474 ms][DEBUG] check_internet: online
[2025-08-21 13:22:19][359156943364999][474 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 13:22:19][359156943364999][474 ms][DEBUG] START check_scloud
[2025-08-21 13:22:19][359156943364999][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:22:20][359156943364999][770 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512148 106204 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:22:20][359156943364999][770 ms][DEBUG] targetPkg: running
[2025-08-21 13:22:20][359156943364999][770 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:22:20][359156943364999][770 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:22:20][359156943364999][770 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQzMzY0OTk5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MDE0MFBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjQyIn0='" -e "main()" -q"
[2025-08-21 13:22:20][359156943364999][770 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:22:20][359156943364999][770 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQzMzY0OTk5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MDE0MFBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjQyIn0='" -e "main()" -q"
[2025-08-21 13:22:20][357565433901247][0 ms][INFO] === Request start ===
[2025-08-21 13:22:22][359156943364999][3598 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTU2OTQzMzY0OTk5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MDE0MFBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjQyIn0="\r\n
[2025-08-21 13:22:27][359156943364999][7690 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c1390d9-892e-45b3-90fa-4d1e5199c807","id":"QR_3c1390d9-892e-45b3-90fa-4d1e5199c807","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:22:27][359156943364999][7691 ms][DEBUG] proc_open done in 6920 ms; code=0; res.len=3152
[2025-08-21 13:22:27][359156943364999][7691 ms][DEBUG] END   runCmdUntilRes#1 in 6920 ms
[2025-08-21 13:22:27][359156943364999][7691 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:22:27][357565433901247][7095 ms][DEBUG] START check_frida
[2025-08-21 13:22:27][357565433901247][7096 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:22:28][357565433901247][7392 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136  50116 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:22:28][357565433901247][7393 ms][DEBUG] check_frida: running
[2025-08-21 13:22:28][357565433901247][7393 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:22:28][357565433901247][7393 ms][DEBUG] START check_internet
[2025-08-21 13:22:28][357565433901247][7393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:22:28][357565433901247][7673 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.265/163.265/163.265/0.000 ms\n
[2025-08-21 13:22:28][357565433901247][7674 ms][DEBUG] check_internet: online
[2025-08-21 13:22:28][357565433901247][7674 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 13:22:28][357565433901247][7674 ms][DEBUG] START check_scloud
[2025-08-21 13:22:28][357565433901247][7674 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:22:28][357565433901247][7908 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23512180 106740 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:22:28][357565433901247][7908 ms][DEBUG] targetPkg: running
[2025-08-21 13:22:28][357565433901247][7908 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 13:22:28][357565433901247][7908 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:22:28][357565433901247][7908 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTY1NDMzOTAxMjQ3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MkdNMFhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM4NyJ9'" -e "main()" -q"
[2025-08-21 13:22:28][357565433901247][7908 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:22:28][357565433901247][7908 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTY1NDMzOTAxMjQ3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MkdNMFhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM4NyJ9'" -e "main()" -q"
[2025-08-21 13:22:31][357565433901247][10720 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTY1NDMzOTAxMjQ3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MkdNMFhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM4NyJ9"\r\n
[2025-08-21 13:22:33][357565433901247][12844 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7ada506-55a5-42ca-8bf6-455372ba298f","id":"QR_a7ada506-55a5-42ca-8bf6-455372ba298f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:22:33][357565433901247][12844 ms][DEBUG] proc_open done in 4936 ms; code=0; res.len=3152
[2025-08-21 13:22:33][357565433901247][12844 ms][DEBUG] END   runCmdUntilRes#1 in 4936 ms
[2025-08-21 13:22:33][357565433901247][12844 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:22:35][358261910675996][0 ms][INFO] === Request start ===
[2025-08-21 13:22:35][358261910675996][1 ms][DEBUG] START check_frida
[2025-08-21 13:22:35][358261910675996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:22:35][358261910675996][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  50100 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:22:35][358261910675996][297 ms][DEBUG] check_frida: running
[2025-08-21 13:22:35][358261910675996][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:22:35][358261910675996][297 ms][DEBUG] START check_internet
[2025-08-21 13:22:35][358261910675996][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:22:35][358261910675996][580 ms][DEBUG] SU: done in 283 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.945/192.945/192.945/0.000 ms\n
[2025-08-21 13:22:35][358261910675996][581 ms][DEBUG] check_internet: online
[2025-08-21 13:22:35][358261910675996][581 ms][DEBUG] END   check_internet in 283 ms
[2025-08-21 13:22:35][358261910675996][581 ms][DEBUG] START check_scloud
[2025-08-21 13:22:35][358261910675996][581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:22:35][358261910675996][860 ms][DEBUG] SU: done in 279 ms; outu0_a118       7399 30745 23512212 107300 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:22:35][358261910675996][860 ms][DEBUG] targetPkg: running
[2025-08-21 13:22:35][358261910675996][860 ms][DEBUG] END   check_scloud in 279 ms
[2025-08-21 13:22:35][358261910675996][860 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:22:35][358261910675996][860 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MjYxOTEwNjc1OTk2IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MUpISDBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEyNCJ9'" -e "main()" -q"
[2025-08-21 13:22:35][358261910675996][860 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:22:35][358261910675996][860 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MjYxOTEwNjc1OTk2IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MUpISDBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEyNCJ9'" -e "main()" -q"
[2025-08-21 13:22:38][358261910675996][3687 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MjYxOTEwNjc1OTk2IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MUpISDBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEyNCJ9"\r\n
[2025-08-21 13:22:40][351270411189479][0 ms][INFO] === Request start ===
[2025-08-21 13:22:40][358261910675996][5421 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3592a601-4696-4a4c-89bf-915d74dd97c9","id":"QR_3592a601-4696-4a4c-89bf-915d74dd97c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:22:40][358261910675996][5421 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-21 13:22:40][358261910675996][5421 ms][DEBUG] END   runCmdUntilRes#1 in 4561 ms
[2025-08-21 13:22:40][358261910675996][5421 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:22:41][351270411189479][1003 ms][DEBUG] START check_frida
[2025-08-21 13:22:41][351270411189479][1003 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:22:41][351270411189479][1300 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136  50120 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:22:41][351270411189479][1300 ms][DEBUG] check_frida: running
[2025-08-21 13:22:41][351270411189479][1300 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:22:41][351270411189479][1300 ms][DEBUG] START check_internet
[2025-08-21 13:22:41][351270411189479][1300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:22:41][351270411189479][1534 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.939/142.939/142.939/0.000 ms\n
[2025-08-21 13:22:41][351270411189479][1534 ms][DEBUG] check_internet: online
[2025-08-21 13:22:41][351270411189479][1534 ms][DEBUG] END   check_internet in 235 ms
[2025-08-21 13:22:41][351270411189479][1534 ms][DEBUG] START check_scloud
[2025-08-21 13:22:41][351270411189479][1534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:22:42][351270411189479][1831 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23512244 107852 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:22:42][351270411189479][1831 ms][DEBUG] targetPkg: running
[2025-08-21 13:22:42][351270411189479][1831 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:22:42][351270411189479][1831 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:22:42][351270411189479][1831 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDExMTg5NDc5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ1MUFHUUtXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5NyJ9'" -e "main()" -q"
[2025-08-21 13:22:42][351270411189479][1831 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:22:42][351270411189479][1831 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDExMTg5NDc5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ1MUFHUUtXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5NyJ9'" -e "main()" -q"
[2025-08-21 13:22:44][351270411189479][4674 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcwNDExMTg5NDc5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ1MUFHUUtXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5NyJ9"\r\n
[2025-08-21 13:22:46][351270411189479][6423 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b130a0f8-cc3b-43c8-bc28-cda33a07550c","id":"QR_b130a0f8-cc3b-43c8-bc28-cda33a07550c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:22:46][351270411189479][6424 ms][DEBUG] proc_open done in 4592 ms; code=0; res.len=3152
[2025-08-21 13:22:46][351270411189479][6424 ms][DEBUG] END   runCmdUntilRes#1 in 4592 ms
[2025-08-21 13:22:46][351270411189479][6424 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:22:58][351477975833943][0 ms][INFO] === Request start ===
[2025-08-21 13:22:58][351477975833943][1 ms][DEBUG] START check_frida
[2025-08-21 13:22:58][351477975833943][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:22:58][351477975833943][293 ms][DEBUG] SU: done in 292 ms; outroot          4632     1 2349136  50116 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:22:58][351477975833943][293 ms][DEBUG] check_frida: running
[2025-08-21 13:22:58][351477975833943][293 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 13:22:58][351477975833943][293 ms][DEBUG] START check_internet
[2025-08-21 13:22:58][351477975833943][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:22:58][351477975833943][591 ms][DEBUG] SU: done in 298 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.059/179.059/179.059/0.000 ms\n
[2025-08-21 13:22:58][351477975833943][592 ms][DEBUG] check_internet: online
[2025-08-21 13:22:58][351477975833943][592 ms][DEBUG] END   check_internet in 299 ms
[2025-08-21 13:22:58][351477975833943][592 ms][DEBUG] START check_scloud
[2025-08-21 13:22:58][351477975833943][592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:22:59][351477975833943][839 ms][DEBUG] SU: done in 248 ms; outu0_a118       7399 30745 23512276 108396 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:22:59][351477975833943][840 ms][DEBUG] targetPkg: running
[2025-08-21 13:22:59][351477975833943][840 ms][DEBUG] END   check_scloud in 248 ms
[2025-08-21 13:22:59][351477975833943][840 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:22:59][351477975833943][840 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc1ODMzOTQzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMDkzNENNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTg5NCJ9'" -e "main()" -q"
[2025-08-21 13:22:59][351477975833943][840 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:22:59][351477975833943][840 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc1ODMzOTQzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMDkzNENNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTg5NCJ9'" -e "main()" -q"
[2025-08-21 13:23:02][351477975833943][3651 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDc3OTc1ODMzOTQzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMDkzNENNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTg5NCJ9"\r\n
[2025-08-21 13:23:04][351477975833943][5697 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f460768-1277-484b-b022-ad3e7abc0bf0","id":"QR_8f460768-1277-484b-b022-ad3e7abc0bf0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:23:04][351477975833943][5698 ms][DEBUG] proc_open done in 4858 ms; code=0; res.len=3152
[2025-08-21 13:23:04][351477975833943][5698 ms][DEBUG] END   runCmdUntilRes#1 in 4858 ms
[2025-08-21 13:23:04][351477975833943][5698 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:23:06][359847107537558][0 ms][INFO] === Request start ===
[2025-08-21 13:23:06][359847107537558][1 ms][DEBUG] START check_frida
[2025-08-21 13:23:06][359847107537558][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:23:06][359847107537558][288 ms][DEBUG] SU: done in 287 ms; outroot          4632     1 2349136  50100 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:23:06][359847107537558][289 ms][DEBUG] check_frida: running
[2025-08-21 13:23:06][359847107537558][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 13:23:06][359847107537558][289 ms][DEBUG] START check_scloud
[2025-08-21 13:23:06][359847107537558][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:23:06][359847107537558][600 ms][DEBUG] SU: done in 311 ms; outu0_a118       7399 30745 23512308 108940 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:23:07][359847107537558][600 ms][DEBUG] targetPkg: running
[2025-08-21 13:23:07][359847107537558][600 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 13:23:07][359847107537558][600 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:23:07][359847107537558][600 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5ODQ3MTA3NTM3NTU4IiwibW9kZWwiOiJTTS1HOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ04zMEdUSEhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3NyJ9'" -e "main()" -q"
[2025-08-21 13:23:07][359847107537558][600 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:23:07][359847107537558][600 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5ODQ3MTA3NTM3NTU4IiwibW9kZWwiOiJTTS1HOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ04zMEdUSEhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3NyJ9'" -e "main()" -q"
[2025-08-21 13:23:09][359847107537558][3427 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5ODQ3MTA3NTM3NTU4IiwibW9kZWwiOiJTTS1HOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ04zMEdUSEhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3NyJ9"\r\n
[2025-08-21 13:23:11][359847107537558][5239 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a5c33a1-3470-496f-aa9d-720eea8fd893","id":"QR_7a5c33a1-3470-496f-aa9d-720eea8fd893","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:23:11][359847107537558][5239 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 13:23:11][359847107537558][5239 ms][DEBUG] END   runCmdUntilRes#1 in 4639 ms
[2025-08-21 13:23:11][359847107537558][5239 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:23:44][350247872732675][0 ms][INFO] === Request start ===
[2025-08-21 13:23:44][350247872732675][1 ms][DEBUG] START check_frida
[2025-08-21 13:23:44][350247872732675][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:23:44][350247872732675][254 ms][DEBUG] SU: done in 253 ms; outroot          4632     1 2332716  50100 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:23:44][350247872732675][254 ms][DEBUG] check_frida: running
[2025-08-21 13:23:44][350247872732675][255 ms][DEBUG] END   check_frida in 254 ms
[2025-08-21 13:23:44][350247872732675][255 ms][DEBUG] START check_scloud
[2025-08-21 13:23:44][350247872732675][255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:23:44][350247872732675][534 ms][DEBUG] SU: done in 280 ms; outu0_a118       7399 30745 23512340 109492 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:23:44][350247872732675][535 ms][DEBUG] targetPkg: running
[2025-08-21 13:23:44][350247872732675][535 ms][DEBUG] END   check_scloud in 280 ms
[2025-08-21 13:23:44][350247872732675][535 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:23:44][350247872732675][535 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjQ3ODcyNzMyNjc1IiwibW9kZWwiOiJTTS1OOTgwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE44MVRKVktCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM4NSJ9'" -e "main()" -q"
[2025-08-21 13:23:44][350247872732675][535 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:23:44][350247872732675][535 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjQ3ODcyNzMyNjc1IiwibW9kZWwiOiJTTS1OOTgwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE44MVRKVktCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM4NSJ9'" -e "main()" -q"
[2025-08-21 13:23:47][350247872732675][3362 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjQ3ODcyNzMyNjc1IiwibW9kZWwiOiJTTS1OOTgwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE44MVRKVktCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM4NSJ9"\r\n
[2025-08-21 13:23:49][350247872732675][5596 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_429ea231-f9d8-4099-a59c-604114a00c60","id":"QR_429ea231-f9d8-4099-a59c-604114a00c60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:23:49][350247872732675][5596 ms][DEBUG] proc_open done in 5062 ms; code=0; res.len=3152
[2025-08-21 13:23:49][350247872732675][5597 ms][DEBUG] END   runCmdUntilRes#1 in 5062 ms
[2025-08-21 13:23:49][350247872732675][5597 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:24:07][357450475960064][0 ms][INFO] === Request start ===
[2025-08-21 13:24:07][357450475960064][0 ms][DEBUG] START check_frida
[2025-08-21 13:24:07][357450475960064][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:24:07][357450475960064][246 ms][DEBUG] SU: done in 245 ms; outroot          4632     1 2332716  50100 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:24:07][357450475960064][246 ms][DEBUG] check_frida: running
[2025-08-21 13:24:07][357450475960064][246 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 13:24:07][357450475960064][246 ms][DEBUG] START check_internet
[2025-08-21 13:24:07][357450475960064][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:24:08][357450475960064][589 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.323/236.323/236.323/0.000 ms\n
[2025-08-21 13:24:08][357450475960064][589 ms][DEBUG] check_internet: online
[2025-08-21 13:24:08][357450475960064][589 ms][DEBUG] END   check_internet in 343 ms
[2025-08-21 13:24:08][357450475960064][589 ms][DEBUG] START check_scloud
[2025-08-21 13:24:08][357450475960064][589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:24:08][357450475960064][839 ms][DEBUG] SU: done in 250 ms; outu0_a118       7399 30745 23512372 110040 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:24:08][357450475960064][839 ms][DEBUG] targetPkg: running
[2025-08-21 13:24:08][357450475960064][839 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 13:24:08][357450475960064][839 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:24:08][357450475960064][839 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDc1OTYwMDY0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MDVXS1ZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc5MCJ9'" -e "main()" -q"
[2025-08-21 13:24:08][357450475960064][839 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:24:08][357450475960064][839 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDc1OTYwMDY0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MDVXS1ZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc5MCJ9'" -e "main()" -q"
[2025-08-21 13:24:11][357450475960064][3682 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDUwNDc1OTYwMDY0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MDVXS1ZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc5MCJ9"\r\n
[2025-08-21 13:24:13][357450475960064][5666 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b01d6087-4c86-49c4-a941-6c114ee76355","id":"QR_b01d6087-4c86-49c4-a941-6c114ee76355","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:24:13][357450475960064][5666 ms][DEBUG] proc_open done in 4826 ms; code=0; res.len=3152
[2025-08-21 13:24:13][357450475960064][5666 ms][DEBUG] END   runCmdUntilRes#1 in 4826 ms
[2025-08-21 13:24:13][357450475960064][5666 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:24:19][353192340615622][0 ms][INFO] === Request start ===
[2025-08-21 13:24:19][353192340615622][1 ms][DEBUG] START check_frida
[2025-08-21 13:24:19][353192340615622][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:24:19][353192340615622][272 ms][DEBUG] SU: done in 271 ms; outroot          4632     1 2349136  50112 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:24:19][353192340615622][272 ms][DEBUG] check_frida: running
[2025-08-21 13:24:19][353192340615622][272 ms][DEBUG] END   check_frida in 271 ms
[2025-08-21 13:24:19][353192340615622][272 ms][DEBUG] START check_internet
[2025-08-21 13:24:19][353192340615622][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:24:20][353192340615622][616 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.525/245.525/245.525/0.000 ms\n
[2025-08-21 13:24:20][353192340615622][616 ms][DEBUG] check_internet: online
[2025-08-21 13:24:20][353192340615622][616 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 13:24:20][353192340615622][616 ms][DEBUG] START check_scloud
[2025-08-21 13:24:20][353192340615622][616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:24:20][353192340615622][913 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512404 110568 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:24:20][353192340615622][913 ms][DEBUG] targetPkg: running
[2025-08-21 13:24:20][353192340615622][913 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:24:20][353192340615622][913 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:24:20][353192340615622][913 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTkyMzQwNjE1NjIyIiwibW9kZWwiOiJTTS1YOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlkyMDQzUUhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUxNCJ9'" -e "main()" -q"
[2025-08-21 13:24:20][353192340615622][913 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:24:20][353192340615622][913 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTkyMzQwNjE1NjIyIiwibW9kZWwiOiJTTS1YOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlkyMDQzUUhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUxNCJ9'" -e "main()" -q"
[2025-08-21 13:24:23][353192340615622][3756 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTkyMzQwNjE1NjIyIiwibW9kZWwiOiJTTS1YOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlkyMDQzUUhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUxNCJ9"\r\n
[2025-08-21 13:24:24][353192340615622][5490 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94731c18-6e17-4ac9-93b6-ae11b1b766db","id":"QR_94731c18-6e17-4ac9-93b6-ae11b1b766db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:24:24][353192340615622][5490 ms][DEBUG] proc_open done in 4577 ms; code=0; res.len=3152
[2025-08-21 13:24:24][353192340615622][5490 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 13:24:24][353192340615622][5490 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:25:07][352961654990784][1 ms][INFO] === Request start ===
[2025-08-21 13:25:07][352961654990784][1 ms][DEBUG] START check_frida
[2025-08-21 13:25:07][352961654990784][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:25:07][352961654990784][303 ms][DEBUG] SU: done in 301 ms; outroot          4632     1 2332716  50104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:25:07][352961654990784][303 ms][DEBUG] check_frida: running
[2025-08-21 13:25:07][352961654990784][303 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 13:25:07][352961654990784][303 ms][DEBUG] START check_scloud
[2025-08-21 13:25:07][352961654990784][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:25:07][352961654990784][537 ms][DEBUG] SU: done in 234 ms; outu0_a118       7399 30745 23512436 111072 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:25:07][352961654990784][537 ms][DEBUG] targetPkg: running
[2025-08-21 13:25:07][352961654990784][537 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 13:25:07][352961654990784][537 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:25:07][352961654990784][537 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTYxNjU0OTkwNzg0IiwibW9kZWwiOiJTTS1NMzM2SyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMFYwUTdYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLVE8iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYzMSJ9'" -e "main()" -q"
[2025-08-21 13:25:07][352961654990784][537 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:25:07][352961654990784][537 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTYxNjU0OTkwNzg0IiwibW9kZWwiOiJTTS1NMzM2SyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMFYwUTdYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLVE8iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYzMSJ9'" -e "main()" -q"
[2025-08-21 13:25:10][352961654990784][3395 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTYxNjU0OTkwNzg0IiwibW9kZWwiOiJTTS1NMzM2SyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMFYwUTdYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLVE8iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYzMSJ9"\r\n
[2025-08-21 13:25:12][352961654990784][5629 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e517a6cb-c9d5-4437-b566-6b95247b2d9a","id":"QR_e517a6cb-c9d5-4437-b566-6b95247b2d9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:25:12][352961654990784][5630 ms][DEBUG] proc_open done in 5093 ms; code=0; res.len=3152
[2025-08-21 13:25:12][352961654990784][5630 ms][DEBUG] END   runCmdUntilRes#1 in 5093 ms
[2025-08-21 13:25:12][352961654990784][5630 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:25:18][350220434595567][0 ms][INFO] === Request start ===
[2025-08-21 13:25:18][350220434595567][1 ms][DEBUG] START check_frida
[2025-08-21 13:25:18][350220434595567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:25:18][350220434595567][304 ms][DEBUG] SU: done in 303 ms; outroot          4632     1 2349136  50104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:25:18][350220434595567][304 ms][DEBUG] check_frida: running
[2025-08-21 13:25:18][350220434595567][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 13:25:18][350220434595567][304 ms][DEBUG] START check_scloud
[2025-08-21 13:25:18][350220434595567][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:25:18][350220434595567][601 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512468 105636 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:25:18][350220434595567][601 ms][DEBUG] targetPkg: running
[2025-08-21 13:25:18][350220434595567][601 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:25:18][350220434595567][601 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:25:18][350220434595567][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjIwNDM0NTk1NTY3IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE5CMTFMSFpGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEwOCJ9'" -e "main()" -q"
[2025-08-21 13:25:18][350220434595567][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:25:18][350220434595567][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjIwNDM0NTk1NTY3IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE5CMTFMSFpGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEwOCJ9'" -e "main()" -q"
[2025-08-21 13:25:21][350220434595567][3413 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjIwNDM0NTk1NTY3IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE5CMTFMSFpGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEwOCJ9"\r\n
[2025-08-21 13:25:23][350220434595567][5131 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_114cf60a-49f8-4aa8-9c84-460a0ac550bf","id":"QR_114cf60a-49f8-4aa8-9c84-460a0ac550bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:25:23][350220434595567][5132 ms][DEBUG] proc_open done in 4531 ms; code=0; res.len=3152
[2025-08-21 13:25:23][350220434595567][5132 ms][DEBUG] END   runCmdUntilRes#1 in 4531 ms
[2025-08-21 13:25:23][350220434595567][5132 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:26:05][356413252253682][0 ms][INFO] === Request start ===
[2025-08-21 13:26:05][356413252253682][1 ms][DEBUG] START check_frida
[2025-08-21 13:26:05][356413252253682][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:26:05][356413252253682][291 ms][DEBUG] SU: done in 290 ms; outroot          4632     1 2332716  50124 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:26:05][356413252253682][291 ms][DEBUG] check_frida: running
[2025-08-21 13:26:05][356413252253682][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 13:26:05][356413252253682][291 ms][DEBUG] START check_internet
[2025-08-21 13:26:05][356413252253682][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:26:06][356413252253682][809 ms][DEBUG] SU: done in 518 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.107/203.107/203.107/0.000 ms\n
[2025-08-21 13:26:06][356413252253682][809 ms][DEBUG] check_internet: online
[2025-08-21 13:26:06][356413252253682][809 ms][DEBUG] END   check_internet in 518 ms
[2025-08-21 13:26:06][356413252253682][809 ms][DEBUG] START check_scloud
[2025-08-21 13:26:06][356413252253682][809 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:26:06][356413252253682][1041 ms][DEBUG] SU: done in 232 ms; outu0_a118       7399 30745 23512500 106188 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:26:06][356413252253682][1041 ms][DEBUG] targetPkg: running
[2025-08-21 13:26:06][356413252253682][1041 ms][DEBUG] END   check_scloud in 232 ms
[2025-08-21 13:26:06][356413252253682][1041 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:26:06][356413252253682][1041 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDEzMjUyMjUzNjgyIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJLOFcyMDVDRzVaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2OSJ9'" -e "main()" -q"
[2025-08-21 13:26:06][356413252253682][1041 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:26:06][356413252253682][1041 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDEzMjUyMjUzNjgyIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJLOFcyMDVDRzVaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2OSJ9'" -e "main()" -q"
[2025-08-21 13:26:09][356413252253682][3852 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDEzMjUyMjUzNjgyIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJLOFcyMDVDRzVaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2OSJ9"\r\n
[2025-08-21 13:26:11][356413252253682][5586 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c021ae8e-7c60-4948-a843-2d952549de85","id":"QR_c021ae8e-7c60-4948-a843-2d952549de85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:26:11][356413252253682][5586 ms][DEBUG] proc_open done in 4545 ms; code=0; res.len=3152
[2025-08-21 13:26:11][356413252253682][5586 ms][DEBUG] END   runCmdUntilRes#1 in 4545 ms
[2025-08-21 13:26:11][356413252253682][5586 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:27:08][353026644548594][1 ms][INFO] === Request start ===
[2025-08-21 13:27:08][353026644548594][1 ms][DEBUG] START check_frida
[2025-08-21 13:27:08][353026644548594][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:27:08][353026644548594][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2332716  50124 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:27:08][353026644548594][291 ms][DEBUG] check_frida: running
[2025-08-21 13:27:08][353026644548594][291 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 13:27:08][353026644548594][291 ms][DEBUG] START check_scloud
[2025-08-21 13:27:08][353026644548594][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:27:09][353026644548594][602 ms][DEBUG] SU: done in 311 ms; outu0_a118       7399 30745 23512532 106736 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:27:09][353026644548594][602 ms][DEBUG] targetPkg: running
[2025-08-21 13:27:09][353026644548594][602 ms][DEBUG] END   check_scloud in 311 ms
[2025-08-21 13:27:09][353026644548594][602 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:27:09][353026644548594][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI2NjQ0NTQ4NTk0IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzMTNLUUJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjA0In0='" -e "main()" -q"
[2025-08-21 13:27:09][353026644548594][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:27:09][353026644548594][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI2NjQ0NTQ4NTk0IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzMTNLUUJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjA0In0='" -e "main()" -q"
[2025-08-21 13:27:11][353026644548594][3429 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDI2NjQ0NTQ4NTk0IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzMTNLUUJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NjA0In0="\r\n
[2025-08-21 13:27:18][353026644548594][9771 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0333398-669c-4ec5-ba75-ab6883fedd8c","id":"QR_a0333398-669c-4ec5-ba75-ab6883fedd8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:27:18][353026644548594][9771 ms][DEBUG] proc_open done in 9169 ms; code=0; res.len=3152
[2025-08-21 13:27:18][353026644548594][9771 ms][DEBUG] END   runCmdUntilRes#1 in 9169 ms
[2025-08-21 13:27:18][353026644548594][9771 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:27:27][350167020597335][0 ms][INFO] === Request start ===
[2025-08-21 13:27:27][350167020597335][1 ms][DEBUG] START check_frida
[2025-08-21 13:27:27][350167020597335][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:27:27][350167020597335][257 ms][DEBUG] SU: done in 256 ms; outroot          4632     1 2332716  50116 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:27:27][350167020597335][257 ms][DEBUG] check_frida: running
[2025-08-21 13:27:27][350167020597335][257 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 13:27:27][350167020597335][257 ms][DEBUG] START check_scloud
[2025-08-21 13:27:27][350167020597335][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:27:27][350167020597335][554 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512564 107296 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:27:27][350167020597335][554 ms][DEBUG] targetPkg: running
[2025-08-21 13:27:27][350167020597335][554 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:27:27][350167020597335][554 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:27:27][350167020597335][554 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTY3MDIwNTk3MzM1IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzM0QzVlFFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQyOCJ9'" -e "main()" -q"
[2025-08-21 13:27:27][350167020597335][554 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:27:27][350167020597335][554 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTY3MDIwNTk3MzM1IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzM0QzVlFFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQyOCJ9'" -e "main()" -q"
[2025-08-21 13:27:30][350167020597335][3396 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTY3MDIwNTk3MzM1IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzM0QzVlFFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQyOCJ9"\r\n
[2025-08-21 13:27:32][350167020597335][5740 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5289a063-eb9c-4f06-9a79-9ad6a9c00b2e","id":"QR_5289a063-eb9c-4f06-9a79-9ad6a9c00b2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:27:32][350167020597335][5740 ms][DEBUG] proc_open done in 5186 ms; code=0; res.len=3152
[2025-08-21 13:27:32][350167020597335][5740 ms][DEBUG] END   runCmdUntilRes#1 in 5186 ms
[2025-08-21 13:27:32][350167020597335][5740 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:27:39][357651716355606][0 ms][INFO] === Request start ===
[2025-08-21 13:27:39][357651716355606][1 ms][DEBUG] START check_frida
[2025-08-21 13:27:39][357651716355606][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:27:39][357651716355606][244 ms][DEBUG] SU: done in 243 ms; outroot          4632     1 2349136  50136 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:27:39][357651716355606][244 ms][DEBUG] check_frida: running
[2025-08-21 13:27:39][357651716355606][244 ms][DEBUG] END   check_frida in 243 ms
[2025-08-21 13:27:39][357651716355606][244 ms][DEBUG] START check_scloud
[2025-08-21 13:27:39][357651716355606][244 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:27:39][357651716355606][555 ms][DEBUG] SU: done in 310 ms; outu0_a118       7399 30745 23512596 107852 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:27:39][357651716355606][555 ms][DEBUG] targetPkg: running
[2025-08-21 13:27:39][357651716355606][555 ms][DEBUG] END   check_scloud in 310 ms
[2025-08-21 13:27:39][357651716355606][555 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:27:39][357651716355606][555 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE2MzU1NjA2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ4MDBGQVZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzU0In0='" -e "main()" -q"
[2025-08-21 13:27:39][357651716355606][555 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:27:39][357651716355606][555 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE2MzU1NjA2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ4MDBGQVZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzU0In0='" -e "main()" -q"
[2025-08-21 13:27:42][357651716355606][3382 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzE2MzU1NjA2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ4MDBGQVZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzU0In0="\r\n
[2025-08-21 13:27:46][357651716355606][7709 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53c8231f-0d54-4be1-bdeb-23b026f43edf","id":"QR_53c8231f-0d54-4be1-bdeb-23b026f43edf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:27:46][357651716355606][7709 ms][DEBUG] proc_open done in 7155 ms; code=0; res.len=3152
[2025-08-21 13:27:46][357651716355606][7709 ms][DEBUG] END   runCmdUntilRes#1 in 7155 ms
[2025-08-21 13:27:46][357651716355606][7709 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:29:16][353607431155279][1 ms][INFO] === Request start ===
[2025-08-21 13:29:16][353607431155279][1 ms][DEBUG] START check_frida
[2025-08-21 13:29:16][353607431155279][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:29:17][353607431155279][301 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2332716  50144 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:29:17][353607431155279][302 ms][DEBUG] check_frida: running
[2025-08-21 13:29:17][353607431155279][302 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 13:29:17][353607431155279][302 ms][DEBUG] START check_scloud
[2025-08-21 13:29:17][353607431155279][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:29:17][353607431155279][598 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512628 108396 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:29:17][353607431155279][598 ms][DEBUG] targetPkg: running
[2025-08-21 13:29:17][353607431155279][599 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:29:17][353607431155279][599 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:29:17][353607431155279][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjA3NDMxMTU1Mjc5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMTJBMzhBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc5MyJ9'" -e "main()" -q"
[2025-08-21 13:29:17][353607431155279][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:29:17][353607431155279][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjA3NDMxMTU1Mjc5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMTJBMzhBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc5MyJ9'" -e "main()" -q"
[2025-08-21 13:29:20][353607431155279][3410 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjA3NDMxMTU1Mjc5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMTJBMzhBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc5MyJ9"\r\n
[2025-08-21 13:29:22][353607431155279][5488 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19aa70f5-bc33-472a-bd5e-5545fb008fb2","id":"QR_19aa70f5-bc33-472a-bd5e-5545fb008fb2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:29:22][353607431155279][5488 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 13:29:22][353607431155279][5488 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 13:29:22][353607431155279][5488 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:30:08][352469850018780][1 ms][INFO] === Request start ===
[2025-08-21 13:30:08][352469850018780][2 ms][DEBUG] START check_frida
[2025-08-21 13:30:08][352469850018780][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:30:08][352469850018780][245 ms][DEBUG] SU: done in 243 ms; outroot          4632     1 2332716  50096 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:30:08][352469850018780][245 ms][DEBUG] check_frida: running
[2025-08-21 13:30:08][352469850018780][245 ms][DEBUG] END   check_frida in 244 ms
[2025-08-21 13:30:08][352469850018780][245 ms][DEBUG] START check_internet
[2025-08-21 13:30:08][352469850018780][245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:30:09][352469850018780][747 ms][DEBUG] SU: done in 501 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.976/200.976/200.976/0.000 ms\n
[2025-08-21 13:30:09][352469850018780][747 ms][DEBUG] check_internet: online
[2025-08-21 13:30:09][352469850018780][747 ms][DEBUG] END   check_internet in 502 ms
[2025-08-21 13:30:09][352469850018780][747 ms][DEBUG] START check_scloud
[2025-08-21 13:30:09][352469850018780][747 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:30:09][352469850018780][1026 ms][DEBUG] SU: done in 279 ms; outu0_a118       7399 30745 23512660 109200 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:30:09][352469850018780][1026 ms][DEBUG] targetPkg: running
[2025-08-21 13:30:09][352469850018780][1026 ms][DEBUG] END   check_scloud in 279 ms
[2025-08-21 13:30:09][352469850018780][1026 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:30:09][352469850018780][1026 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODUwMDE4NzgwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzMzlLREhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc5OSJ9'" -e "main()" -q"
[2025-08-21 13:30:09][352469850018780][1026 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:30:09][352469850018780][1026 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODUwMDE4NzgwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzMzlLREhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc5OSJ9'" -e "main()" -q"
[2025-08-21 13:30:12][352469850018780][3869 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDY5ODUwMDE4NzgwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzMzlLREhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc5OSJ9"\r\n
[2025-08-21 13:30:14][352469850018780][5869 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a6f5575-1381-4e72-8716-aab77d37f513","id":"QR_7a6f5575-1381-4e72-8716-aab77d37f513","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:30:14][352469850018780][5869 ms][DEBUG] proc_open done in 4843 ms; code=0; res.len=3152
[2025-08-21 13:30:14][352469850018780][5869 ms][DEBUG] END   runCmdUntilRes#1 in 4843 ms
[2025-08-21 13:30:14][352469850018780][5869 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:31:08][351877477347690][0 ms][INFO] === Request start ===
[2025-08-21 13:31:08][351877477347690][1 ms][DEBUG] START check_frida
[2025-08-21 13:31:08][351877477347690][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:31:08][351877477347690][241 ms][DEBUG] SU: done in 239 ms; outroot          4632     1 2332716  50120 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:31:08][351877477347690][241 ms][DEBUG] check_frida: running
[2025-08-21 13:31:08][351877477347690][241 ms][DEBUG] END   check_frida in 240 ms
[2025-08-21 13:31:08][351877477347690][241 ms][DEBUG] START check_scloud
[2025-08-21 13:31:08][351877477347690][241 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:31:08][351877477347690][537 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512692 109760 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:31:08][351877477347690][537 ms][DEBUG] targetPkg: running
[2025-08-21 13:31:08][351877477347690][538 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:31:08][351877477347690][538 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:31:08][351877477347690][538 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc3MzQ3NjkwIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTMwMSJ9'" -e "main()" -q"
[2025-08-21 13:31:08][351877477347690][538 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:31:08][351877477347690][538 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc3MzQ3NjkwIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTMwMSJ9'" -e "main()" -q"
[2025-08-21 13:31:11][351877477347690][3380 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDc3MzQ3NjkwIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTMwMSJ9"\r\n
[2025-08-21 13:31:13][351877477347690][5224 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 13:31:13][351877477347690][5224 ms][DEBUG] proc_open done in 4686 ms; code=0; res.len=93
[2025-08-21 13:31:13][351877477347690][5224 ms][DEBUG] END   runCmdUntilRes#1 in 4686 ms
[2025-08-21 13:31:13][351877477347690][5224 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 13:31:13][][0 ms][INFO] === Request start ===
[2025-08-21 13:31:13][][1 ms][DEBUG] START check_frida
[2025-08-21 13:31:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:31:14][][302 ms][DEBUG] SU: done in 301 ms; outroot          4632     1 2349136  50132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:31:14][][302 ms][DEBUG] check_frida: running
[2025-08-21 13:31:14][][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 13:31:14][][302 ms][DEBUG] START check_scloud
[2025-08-21 13:31:14][][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:31:14][][599 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512724 110300 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:31:14][][599 ms][DEBUG] targetPkg: running
[2025-08-21 13:31:14][][599 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:31:14][][599 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:31:14][][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc2OSJ9'" -e "main()" -q"
[2025-08-21 13:31:14][][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:31:14][][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc2OSJ9'" -e "main()" -q"
[2025-08-21 13:31:17][][3411 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc2OSJ9"\r\n
[2025-08-21 13:31:18][][5035 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 13:31:18][][5035 ms][DEBUG] proc_open done in 4436 ms; code=0; res.len=107
[2025-08-21 13:31:18][][5035 ms][DEBUG] END   runCmdUntilRes#1 in 4436 ms
[2025-08-21 13:31:18][][5035 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 13:31:19][][1 ms][INFO] === Request start ===
[2025-08-21 13:31:19][][1 ms][DEBUG] START check_frida
[2025-08-21 13:31:19][][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:31:19][][295 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2349136  50132 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:31:19][][295 ms][DEBUG] check_frida: running
[2025-08-21 13:31:19][][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 13:31:19][][295 ms][DEBUG] START check_scloud
[2025-08-21 13:31:19][][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:31:19][][592 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512756 105916 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:31:19][][592 ms][DEBUG] targetPkg: running
[2025-08-21 13:31:19][][592 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:31:19][][592 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:31:19][][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE0NCJ9'" -e "main()" -q"
[2025-08-21 13:31:19][][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:31:19][][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE0NCJ9'" -e "main()" -q"
[2025-08-21 13:31:22][][3419 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE0NCJ9"\r\n
[2025-08-21 13:31:24][][5278 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 13:31:24][][5278 ms][DEBUG] proc_open done in 4686 ms; code=0; res.len=107
[2025-08-21 13:31:24][][5278 ms][DEBUG] END   runCmdUntilRes#1 in 4686 ms
[2025-08-21 13:31:24][][5278 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 13:31:26][351877477347690][0 ms][INFO] === Request start ===
[2025-08-21 13:31:26][351877477347690][1 ms][DEBUG] START check_frida
[2025-08-21 13:31:26][351877477347690][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:31:26][351877477347690][284 ms][DEBUG] SU: done in 283 ms; outroot          4632     1 2349136  50120 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:31:26][351877477347690][284 ms][DEBUG] check_frida: running
[2025-08-21 13:31:26][351877477347690][284 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 13:31:26][351877477347690][284 ms][DEBUG] START check_scloud
[2025-08-21 13:31:26][351877477347690][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:31:27][351877477347690][580 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512788 106468 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:31:27][351877477347690][581 ms][DEBUG] targetPkg: running
[2025-08-21 13:31:27][351877477347690][581 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:31:27][351877477347690][581 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:31:27][351877477347690][581 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc3MzQ3NjkwIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjY5In0='" -e "main()" -q"
[2025-08-21 13:31:27][351877477347690][581 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:31:27][351877477347690][581 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc3MzQ3NjkwIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjY5In0='" -e "main()" -q"
[2025-08-21 13:31:29][351877477347690][3408 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDc3MzQ3NjkwIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MEpKVkNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklOUyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjY5In0="\r\n
[2025-08-21 13:31:33][353684147912665][1 ms][INFO] === Request start ===
[2025-08-21 13:31:34][351877477347690][7688 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0d1cb43-0138-42ef-acd7-02072f6fd952","id":"QR_a0d1cb43-0138-42ef-acd7-02072f6fd952","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:31:34][351877477347690][7688 ms][DEBUG] proc_open done in 7108 ms; code=0; res.len=3152
[2025-08-21 13:31:34][351877477347690][7688 ms][DEBUG] END   runCmdUntilRes#1 in 7108 ms
[2025-08-21 13:31:34][351877477347690][7688 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:31:34][353684147912665][1008 ms][DEBUG] START check_frida
[2025-08-21 13:31:34][353684147912665][1008 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:31:35][353684147912665][1320 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2349136  50136 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:31:35][353684147912665][1320 ms][DEBUG] check_frida: running
[2025-08-21 13:31:35][353684147912665][1320 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 13:31:35][353684147912665][1320 ms][DEBUG] START check_scloud
[2025-08-21 13:31:35][353684147912665][1320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:31:35][353684147912665][1617 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512820 107004 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:31:35][353684147912665][1617 ms][DEBUG] targetPkg: running
[2025-08-21 13:31:35][353684147912665][1617 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:31:35][353684147912665][1618 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:31:35][353684147912665][1618 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQ3OTEyNjY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MEowMFlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc4NiJ9'" -e "main()" -q"
[2025-08-21 13:31:35][353684147912665][1618 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:31:35][353684147912665][1618 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQ3OTEyNjY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MEowMFlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc4NiJ9'" -e "main()" -q"
[2025-08-21 13:31:38][353684147912665][4460 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjg0MTQ3OTEyNjY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MEowMFlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzc4NiJ9"\r\n
[2025-08-21 13:31:40][353684147912665][6303 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ca8b225-3f8d-4527-beed-c3c2b9409902","id":"QR_2ca8b225-3f8d-4527-beed-c3c2b9409902","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:31:40][353684147912665][6304 ms][DEBUG] proc_open done in 4686 ms; code=0; res.len=3152
[2025-08-21 13:31:40][353684147912665][6304 ms][DEBUG] END   runCmdUntilRes#1 in 4686 ms
[2025-08-21 13:31:40][353684147912665][6304 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:33:07][354130546015907][0 ms][INFO] === Request start ===
[2025-08-21 13:33:07][354130546015907][1 ms][DEBUG] START check_frida
[2025-08-21 13:33:07][354130546015907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:33:08][354130546015907][263 ms][DEBUG] SU: done in 262 ms; outroot          4632     1 2332716  50120 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:33:08][354130546015907][263 ms][DEBUG] check_frida: running
[2025-08-21 13:33:08][354130546015907][263 ms][DEBUG] END   check_frida in 262 ms
[2025-08-21 13:33:08][354130546015907][263 ms][DEBUG] START check_scloud
[2025-08-21 13:33:08][354130546015907][263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:33:08][354130546015907][575 ms][DEBUG] SU: done in 312 ms; outu0_a118       7399 30745 23512852 107548 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:33:08][354130546015907][575 ms][DEBUG] targetPkg: running
[2025-08-21 13:33:08][354130546015907][575 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 13:33:08][354130546015907][575 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:33:08][354130546015907][575 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTMwNTQ2MDE1OTA3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDVGOU1YIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA1NCJ9'" -e "main()" -q"
[2025-08-21 13:33:08][354130546015907][575 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:33:08][354130546015907][575 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTMwNTQ2MDE1OTA3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDVGOU1YIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA1NCJ9'" -e "main()" -q"
[2025-08-21 13:33:11][354130546015907][3402 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTMwNTQ2MDE1OTA3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDVGOU1YIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA1NCJ9"\r\n
[2025-08-21 13:33:13][354130546015907][5324 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ff88f0b-a41d-4cf8-8d06-6ec8c5dd4c3f","id":"QR_5ff88f0b-a41d-4cf8-8d06-6ec8c5dd4c3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:33:13][354130546015907][5325 ms][DEBUG] proc_open done in 4749 ms; code=0; res.len=3152
[2025-08-21 13:33:13][354130546015907][5325 ms][DEBUG] END   runCmdUntilRes#1 in 4749 ms
[2025-08-21 13:33:13][354130546015907][5325 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:34:36][355731679341702][1 ms][INFO] === Request start ===
[2025-08-21 13:34:36][355731679341702][2 ms][DEBUG] START check_frida
[2025-08-21 13:34:36][355731679341702][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:34:37][355731679341702][297 ms][DEBUG] SU: done in 295 ms; outroot          4632     1 2332716  50112 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:34:37][355731679341702][297 ms][DEBUG] check_frida: running
[2025-08-21 13:34:37][355731679341702][297 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 13:34:37][355731679341702][297 ms][DEBUG] START check_internet
[2025-08-21 13:34:37][355731679341702][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:34:37][355731679341702][594 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.314/203.314/203.314/0.000 ms\n
[2025-08-21 13:34:37][355731679341702][594 ms][DEBUG] check_internet: online
[2025-08-21 13:34:37][355731679341702][594 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 13:34:37][355731679341702][594 ms][DEBUG] START check_scloud
[2025-08-21 13:34:37][355731679341702][594 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:34:37][355731679341702][891 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23512884 108092 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:34:37][355731679341702][891 ms][DEBUG] targetPkg: running
[2025-08-21 13:34:37][355731679341702][891 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:34:37][355731679341702][891 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:34:37][355731679341702][891 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NzMxNjc5MzQxNzAyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMFI2MUdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzMiJ9'" -e "main()" -q"
[2025-08-21 13:34:37][355731679341702][891 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:34:37][355731679341702][891 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NzMxNjc5MzQxNzAyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMFI2MUdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzMiJ9'" -e "main()" -q"
[2025-08-21 13:34:40][355731679341702][3733 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NzMxNjc5MzQxNzAyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMFI2MUdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzMiJ9"\r\n
[2025-08-21 13:34:43][355731679341702][6139 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02a7851d-827a-4b73-9b7a-f371fa507927","id":"QR_02a7851d-827a-4b73-9b7a-f371fa507927","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:34:43][355731679341702][6139 ms][DEBUG] proc_open done in 5248 ms; code=0; res.len=3152
[2025-08-21 13:34:43][355731679341702][6139 ms][DEBUG] END   runCmdUntilRes#1 in 5248 ms
[2025-08-21 13:34:43][355731679341702][6139 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:34:56][357651719843194][1 ms][INFO] === Request start ===
[2025-08-21 13:34:56][357651719843194][2 ms][DEBUG] START check_frida
[2025-08-21 13:34:56][357651719843194][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:34:56][357651719843194][245 ms][DEBUG] SU: done in 243 ms; outroot          4632     1 2332716  50088 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:34:56][357651719843194][245 ms][DEBUG] check_frida: running
[2025-08-21 13:34:56][357651719843194][245 ms][DEBUG] END   check_frida in 243 ms
[2025-08-21 13:34:56][357651719843194][245 ms][DEBUG] START check_internet
[2025-08-21 13:34:56][357651719843194][245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:34:57][357651719843194][558 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.779/206.779/206.779/0.000 ms\n
[2025-08-21 13:34:57][357651719843194][558 ms][DEBUG] check_internet: online
[2025-08-21 13:34:57][357651719843194][558 ms][DEBUG] END   check_internet in 313 ms
[2025-08-21 13:34:57][357651719843194][558 ms][DEBUG] START check_scloud
[2025-08-21 13:34:57][357651719843194][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:34:57][357651719843194][870 ms][DEBUG] SU: done in 311 ms; outu0_a118       7399 30745 23512916 108644 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:34:57][357651719843194][870 ms][DEBUG] targetPkg: running
[2025-08-21 13:34:57][357651719843194][870 ms][DEBUG] END   check_scloud in 311 ms
[2025-08-21 13:34:57][357651719843194][870 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:34:57][357651719843194][870 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE5ODQzMTk0IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRBMDVQSzBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NTk4In0='" -e "main()" -q"
[2025-08-21 13:34:57][357651719843194][870 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:34:57][357651719843194][870 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE5ODQzMTk0IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRBMDVQSzBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NTk4In0='" -e "main()" -q"
[2025-08-21 13:35:00][357651719843194][3681 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzE5ODQzMTk0IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRBMDVQSzBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NTk4In0="\r\n
[2025-08-21 13:35:03][357651719843194][6993 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f24e39f5-e0c0-4c4b-ad4e-cb518c8991d9","id":"QR_f24e39f5-e0c0-4c4b-ad4e-cb518c8991d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:35:03][357651719843194][6994 ms][DEBUG] proc_open done in 6123 ms; code=0; res.len=3152
[2025-08-21 13:35:03][357651719843194][6994 ms][DEBUG] END   runCmdUntilRes#1 in 6124 ms
[2025-08-21 13:35:03][357651719843194][6994 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:35:08][357518811432384][0 ms][INFO] === Request start ===
[2025-08-21 13:35:08][357518811432384][1 ms][DEBUG] START check_frida
[2025-08-21 13:35:08][357518811432384][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:35:08][357518811432384][313 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2349136  50096 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:35:08][357518811432384][313 ms][DEBUG] check_frida: running
[2025-08-21 13:35:08][357518811432384][313 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 13:35:08][357518811432384][314 ms][DEBUG] START check_scloud
[2025-08-21 13:35:08][357518811432384][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:35:08][357518811432384][594 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23512948 109196 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:35:08][357518811432384][594 ms][DEBUG] targetPkg: running
[2025-08-21 13:35:08][357518811432384][595 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 13:35:08][357518811432384][595 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:35:08][357518811432384][595 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTE4ODExNDMyMzg0IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q2MTJKNzdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQVUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTIzOCJ9'" -e "main()" -q"
[2025-08-21 13:35:08][357518811432384][595 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:35:08][357518811432384][595 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTE4ODExNDMyMzg0IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q2MTJKNzdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQVUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTIzOCJ9'" -e "main()" -q"
[2025-08-21 13:35:11][357518811432384][3422 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTE4ODExNDMyMzg0IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q2MTJKNzdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQVUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTIzOCJ9"\r\n
[2025-08-21 13:35:13][357518811432384][5359 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27448c6b-38c8-4356-bf7a-38d6d4a5fbc2","id":"QR_27448c6b-38c8-4356-bf7a-38d6d4a5fbc2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:35:13][357518811432384][5359 ms][DEBUG] proc_open done in 4765 ms; code=0; res.len=3152
[2025-08-21 13:35:13][357518811432384][5360 ms][DEBUG] END   runCmdUntilRes#1 in 4765 ms
[2025-08-21 13:35:13][357518811432384][5360 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:36:08][351240641078255][0 ms][INFO] === Request start ===
[2025-08-21 13:36:08][351240641078255][1 ms][DEBUG] START check_frida
[2025-08-21 13:36:08][351240641078255][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:36:08][351240641078255][257 ms][DEBUG] SU: done in 256 ms; outroot          4632     1 2332716  50092 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:36:08][351240641078255][257 ms][DEBUG] check_frida: running
[2025-08-21 13:36:08][351240641078255][257 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 13:36:08][351240641078255][257 ms][DEBUG] START check_internet
[2025-08-21 13:36:08][351240641078255][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:36:09][351240641078255][679 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.797/201.797/201.797/0.000 ms\n
[2025-08-21 13:36:09][351240641078255][679 ms][DEBUG] check_internet: online
[2025-08-21 13:36:09][351240641078255][679 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 13:36:09][351240641078255][679 ms][DEBUG] START check_scloud
[2025-08-21 13:36:09][351240641078255][679 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:36:09][351240641078255][960 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23512980 109744 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:36:09][351240641078255][960 ms][DEBUG] targetPkg: running
[2025-08-21 13:36:09][351240641078255][960 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 13:36:09][351240641078255][960 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:36:09][351240641078255][960 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQxMDc4MjU1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDJMM1hFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIwOCJ9'" -e "main()" -q"
[2025-08-21 13:36:09][351240641078255][960 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:36:09][351240641078255][960 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQxMDc4MjU1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDJMM1hFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIwOCJ9'" -e "main()" -q"
[2025-08-21 13:36:12][351240641078255][3803 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQxMDc4MjU1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDJMM1hFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIwOCJ9"\r\n
[2025-08-21 13:36:14][351240641078255][5865 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2d047bc-5b58-4eeb-9011-28d0ef895485","id":"QR_c2d047bc-5b58-4eeb-9011-28d0ef895485","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:36:14][351240641078255][5865 ms][DEBUG] proc_open done in 4906 ms; code=0; res.len=3152
[2025-08-21 13:36:14][351240641078255][5865 ms][DEBUG] END   runCmdUntilRes#1 in 4906 ms
[2025-08-21 13:36:14][351240641078255][5865 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:36:19][350704160198464][0 ms][INFO] === Request start ===
[2025-08-21 13:36:19][350704160198464][1 ms][DEBUG] START check_frida
[2025-08-21 13:36:19][350704160198464][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:36:19][350704160198464][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2349136  50104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:36:19][350704160198464][292 ms][DEBUG] check_frida: running
[2025-08-21 13:36:19][350704160198464][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 13:36:19][350704160198464][293 ms][DEBUG] START check_internet
[2025-08-21 13:36:19][350704160198464][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:36:20][350704160198464][652 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.654/242.654/242.654/0.000 ms\n
[2025-08-21 13:36:20][350704160198464][652 ms][DEBUG] check_internet: online
[2025-08-21 13:36:20][350704160198464][652 ms][DEBUG] END   check_internet in 360 ms
[2025-08-21 13:36:20][350704160198464][652 ms][DEBUG] START check_scloud
[2025-08-21 13:36:20][350704160198464][652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:36:20][350704160198464][948 ms][DEBUG] SU: done in 296 ms; outu0_a118       7399 30745 23513012 110304 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:36:20][350704160198464][948 ms][DEBUG] targetPkg: running
[2025-08-21 13:36:20][350704160198464][948 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 13:36:20][350704160198464][948 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:36:20][350704160198464][948 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzA0MTYwMTk4NDY0IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFJCMDNCRjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYSUQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM0MCJ9'" -e "main()" -q"
[2025-08-21 13:36:20][350704160198464][949 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:36:20][350704160198464][949 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzA0MTYwMTk4NDY0IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFJCMDNCRjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYSUQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM0MCJ9'" -e "main()" -q"
[2025-08-21 13:36:23][350704160198464][3791 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzA0MTYwMTk4NDY0IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFJCMDNCRjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYSUQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM0MCJ9"\r\n
[2025-08-21 13:36:25][350704160198464][5635 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5c321b6-3021-4386-b718-a110e13de828","id":"QR_a5c321b6-3021-4386-b718-a110e13de828","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:36:25][350704160198464][5635 ms][DEBUG] proc_open done in 4687 ms; code=0; res.len=3152
[2025-08-21 13:36:25][350704160198464][5636 ms][DEBUG] END   runCmdUntilRes#1 in 4687 ms
[2025-08-21 13:36:25][350704160198464][5636 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:37:06][353302728632061][1 ms][INFO] === Request start ===
[2025-08-21 13:37:06][353302728632061][2 ms][DEBUG] START check_frida
[2025-08-21 13:37:06][353302728632061][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:37:06][353302728632061][294 ms][DEBUG] SU: done in 292 ms; outroot          4632     1 2332716  50116 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:37:06][353302728632061][294 ms][DEBUG] check_frida: running
[2025-08-21 13:37:06][353302728632061][294 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 13:37:06][353302728632061][294 ms][DEBUG] START check_scloud
[2025-08-21 13:37:06][353302728632061][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:37:06][353302728632061][590 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23513044 106492 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:37:06][353302728632061][590 ms][DEBUG] targetPkg: running
[2025-08-21 13:37:06][353302728632061][590 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:37:06][353302728632061][590 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:37:06][353302728632061][590 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzAyNzI4NjMyMDYxIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MFpMTlhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg0MSJ9'" -e "main()" -q"
[2025-08-21 13:37:06][353302728632061][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:37:06][353302728632061][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzAyNzI4NjMyMDYxIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MFpMTlhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg0MSJ9'" -e "main()" -q"
[2025-08-21 13:37:09][353302728632061][3418 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzAyNzI4NjMyMDYxIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MFpMTlhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg0MSJ9"\r\n
[2025-08-21 13:37:11][353302728632061][5449 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6824fe68-f26e-45c4-a006-5cda596290e3","id":"QR_6824fe68-f26e-45c4-a006-5cda596290e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:37:11][353302728632061][5449 ms][DEBUG] proc_open done in 4858 ms; code=0; res.len=3152
[2025-08-21 13:37:11][353302728632061][5449 ms][DEBUG] END   runCmdUntilRes#1 in 4858 ms
[2025-08-21 13:37:11][353302728632061][5449 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:37:58][352967355368733][0 ms][INFO] === Request start ===
[2025-08-21 13:37:58][352967355368733][1 ms][DEBUG] START check_frida
[2025-08-21 13:37:58][352967355368733][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:37:58][352967355368733][309 ms][DEBUG] SU: done in 308 ms; outroot          4632     1 2349136  50076 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:37:58][352967355368733][309 ms][DEBUG] check_frida: running
[2025-08-21 13:37:58][352967355368733][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 13:37:58][352967355368733][309 ms][DEBUG] START check_scloud
[2025-08-21 13:37:58][352967355368733][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:37:58][352967355368733][606 ms][DEBUG] SU: done in 297 ms; outu0_a118       7399 30745 23513076 107068 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:37:58][352967355368733][606 ms][DEBUG] targetPkg: running
[2025-08-21 13:37:58][352967355368733][606 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:37:58][352967355368733][606 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:37:58][352967355368733][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzU1MzY4NzMzIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcyMDBXV1lUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTU3In0='" -e "main()" -q"
[2025-08-21 13:37:58][352967355368733][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:37:58][352967355368733][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzU1MzY4NzMzIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcyMDBXV1lUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTU3In0='" -e "main()" -q"
[2025-08-21 13:38:01][352967355368733][3433 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTY3MzU1MzY4NzMzIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcyMDBXV1lUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTU3In0="\r\n
[2025-08-21 13:38:05][352967355368733][7292 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_498b651a-c1c5-4abb-b898-9fb9510166a5","id":"QR_498b651a-c1c5-4abb-b898-9fb9510166a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:38:05][352967355368733][7292 ms][DEBUG] proc_open done in 6686 ms; code=0; res.len=3152
[2025-08-21 13:38:05][352967355368733][7292 ms][DEBUG] END   runCmdUntilRes#1 in 6686 ms
[2025-08-21 13:38:05][352967355368733][7292 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:39:21][350109210197286][0 ms][INFO] === Request start ===
[2025-08-21 13:39:21][350109210197286][0 ms][DEBUG] START check_frida
[2025-08-21 13:39:21][350109210197286][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:39:21][350109210197286][300 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2332716  50116 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:39:21][350109210197286][300 ms][DEBUG] check_frida: running
[2025-08-21 13:39:21][350109210197286][300 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 13:39:21][350109210197286][300 ms][DEBUG] START check_scloud
[2025-08-21 13:39:21][350109210197286][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:39:22][350109210197286][581 ms][DEBUG] SU: done in 281 ms; outu0_a118       7399 30745 23513108 107884 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:39:22][350109210197286][581 ms][DEBUG] targetPkg: running
[2025-08-21 13:39:22][350109210197286][581 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 13:39:22][350109210197286][581 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:39:22][350109210197286][581 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTA5MjEwMTk3Mjg2IiwibW9kZWwiOiJTTS1BMTY2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hDMUE0MFFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjEwIn0='" -e "main()" -q"
[2025-08-21 13:39:22][350109210197286][582 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:39:22][350109210197286][582 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTA5MjEwMTk3Mjg2IiwibW9kZWwiOiJTTS1BMTY2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hDMUE0MFFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjEwIn0='" -e "main()" -q"
[2025-08-21 13:39:25][350109210197286][3424 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTA5MjEwMTk3Mjg2IiwibW9kZWwiOiJTTS1BMTY2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hDMUE0MFFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjEwIn0="\r\n
[2025-08-21 13:39:30][350109210197286][8892 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45d17a99-3c99-431e-99fe-2c94e10ee900","id":"QR_45d17a99-3c99-431e-99fe-2c94e10ee900","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:39:30][350109210197286][8892 ms][DEBUG] proc_open done in 8310 ms; code=0; res.len=3152
[2025-08-21 13:39:30][350109210197286][8892 ms][DEBUG] END   runCmdUntilRes#1 in 8310 ms
[2025-08-21 13:39:30][350109210197286][8892 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:41:07][354747957514399][0 ms][INFO] === Request start ===
[2025-08-21 13:41:07][354747957514399][1 ms][DEBUG] START check_frida
[2025-08-21 13:41:07][354747957514399][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:41:07][354747957514399][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2332716  50112 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:41:07][354747957514399][292 ms][DEBUG] check_frida: running
[2025-08-21 13:41:07][354747957514399][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 13:41:07][354747957514399][293 ms][DEBUG] START check_scloud
[2025-08-21 13:41:07][354747957514399][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:41:07][354747957514399][588 ms][DEBUG] SU: done in 295 ms; outu0_a118       7399 30745 23513140 108444 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:41:07][354747957514399][588 ms][DEBUG] targetPkg: running
[2025-08-21 13:41:07][354747957514399][588 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 13:41:07][354747957514399][588 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:41:07][354747957514399][588 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTU3NTE0Mzk5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MFNUOTJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE3OCJ9'" -e "main()" -q"
[2025-08-21 13:41:07][354747957514399][588 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:41:07][354747957514399][588 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTU3NTE0Mzk5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MFNUOTJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE3OCJ9'" -e "main()" -q"
[2025-08-21 13:41:10][354747957514399][3446 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTU3NTE0Mzk5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MFNUOTJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE3OCJ9"\r\n
[2025-08-21 13:41:13][354747957514399][5664 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e29e93ce-9c4e-40ef-91dc-a8166e5f5bb6","id":"QR_e29e93ce-9c4e-40ef-91dc-a8166e5f5bb6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:41:13][354747957514399][5665 ms][DEBUG] proc_open done in 5076 ms; code=0; res.len=3152
[2025-08-21 13:41:13][354747957514399][5665 ms][DEBUG] END   runCmdUntilRes#1 in 5077 ms
[2025-08-21 13:41:13][354747957514399][5665 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:42:05][351942490700174][1 ms][INFO] === Request start ===
[2025-08-21 13:42:05][351942490700174][2 ms][DEBUG] START check_frida
[2025-08-21 13:42:05][351942490700174][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:42:05][351942490700174][288 ms][DEBUG] SU: done in 287 ms; outroot          4632     1 2332716  50096 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:42:05][351942490700174][288 ms][DEBUG] check_frida: running
[2025-08-21 13:42:05][351942490700174][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 13:42:05][351942490700174][288 ms][DEBUG] START check_internet
[2025-08-21 13:42:05][351942490700174][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:42:06][351942490700174][851 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.317/202.317/202.317/0.000 ms\n
[2025-08-21 13:42:06][351942490700174][851 ms][DEBUG] check_internet: online
[2025-08-21 13:42:06][351942490700174][851 ms][DEBUG] END   check_internet in 562 ms
[2025-08-21 13:42:06][351942490700174][851 ms][DEBUG] START check_scloud
[2025-08-21 13:42:06][351942490700174][851 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:42:06][351942490700174][1147 ms][DEBUG] SU: done in 296 ms; out
[2025-08-21 13:42:06][351942490700174][1148 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:42:06][351942490700174][1148 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:42:06][351942490700174][1288 ms][DEBUG] SU: done in 140 ms; out
[2025-08-21 13:42:06][351942490700174][1288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:42:06][351942490700174][1491 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:42:08][351942490700174][3506 ms][DEBUG] END   check_scloud in 2655 ms
[2025-08-21 13:42:08][351942490700174][3506 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:42:08][351942490700174][3506 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTQyNDkwNzAwMTc0IiwibW9kZWwiOiJTTS1NMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Wlk0MDBINDhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk0NyJ9'" -e "main()" -q"
[2025-08-21 13:42:08][351942490700174][3506 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:42:08][351942490700174][3506 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxOTQyNDkwNzAwMTc0IiwibW9kZWwiOiJTTS1NMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Wlk0MDBINDhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk0NyJ9'" -e "main()" -q"
[2025-08-21 13:42:11][351942490700174][6287 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxOTQyNDkwNzAwMTc0IiwibW9kZWwiOiJTTS1NMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Wlk0MDBINDhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk0NyJ9"\r\n
[2025-08-21 13:42:13][351942490700174][8552 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4863680b-3d3b-45d8-9d66-206b9995c121","id":"QR_4863680b-3d3b-45d8-9d66-206b9995c121","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:42:13][351942490700174][8552 ms][DEBUG] proc_open done in 5046 ms; code=0; res.len=3152
[2025-08-21 13:42:13][351942490700174][8553 ms][DEBUG] END   runCmdUntilRes#1 in 5046 ms
[2025-08-21 13:42:13][351942490700174][8553 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:42:22][355808981232827][0 ms][INFO] === Request start ===
[2025-08-21 13:42:22][355808981232827][1 ms][DEBUG] START check_frida
[2025-08-21 13:42:22][355808981232827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:42:22][355808981232827][263 ms][DEBUG] SU: done in 262 ms; outroot          4632     1 2366568  50140 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:42:22][355808981232827][263 ms][DEBUG] check_frida: running
[2025-08-21 13:42:22][355808981232827][263 ms][DEBUG] END   check_frida in 262 ms
[2025-08-21 13:42:22][355808981232827][263 ms][DEBUG] START check_internet
[2025-08-21 13:42:22][355808981232827][263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:42:22][355808981232827][575 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.601/208.601/208.601/0.000 ms\n
[2025-08-21 13:42:22][355808981232827][575 ms][DEBUG] check_internet: online
[2025-08-21 13:42:22][355808981232827][575 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 13:42:22][355808981232827][575 ms][DEBUG] START check_scloud
[2025-08-21 13:42:22][355808981232827][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:42:23][355808981232827][841 ms][DEBUG] SU: done in 265 ms; outu0_a118      20356 30745 23554464 127848 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:42:23][355808981232827][841 ms][DEBUG] targetPkg: running
[2025-08-21 13:42:23][355808981232827][841 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 13:42:23][355808981232827][841 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:42:23][355808981232827][841 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODA4OTgxMjMyODI3IiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjgzOSJ9'" -e "main()" -q"
[2025-08-21 13:42:23][355808981232827][841 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:42:23][355808981232827][841 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODA4OTgxMjMyODI3IiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjgzOSJ9'" -e "main()" -q"
[2025-08-21 13:42:25][355808981232827][3590 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODA4OTgxMjMyODI3IiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjgzOSJ9"\r\n
[2025-08-21 13:42:27][355808981232827][5386 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 13:42:27][355808981232827][5387 ms][DEBUG] proc_open done in 4545 ms; code=0; res.len=115
[2025-08-21 13:42:27][355808981232827][5387 ms][DEBUG] END   runCmdUntilRes#1 in 4545 ms
[2025-08-21 13:42:27][355808981232827][5387 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 13:42:27][][0 ms][INFO] === Request start ===
[2025-08-21 13:42:27][][1 ms][DEBUG] START check_frida
[2025-08-21 13:42:27][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:42:28][][296 ms][DEBUG] SU: done in 295 ms; outroot          4632     1 2366568  50136 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:42:28][][296 ms][DEBUG] check_frida: running
[2025-08-21 13:42:28][][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 13:42:28][][296 ms][DEBUG] START check_internet
[2025-08-21 13:42:28][][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:42:28][][546 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.073/142.073/142.073/0.000 ms\n
[2025-08-21 13:42:28][][546 ms][DEBUG] check_internet: online
[2025-08-21 13:42:28][][546 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 13:42:28][][546 ms][DEBUG] START check_scloud
[2025-08-21 13:42:28][][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:42:28][][843 ms][DEBUG] SU: done in 296 ms; outu0_a118      20356 30745 23589416 128908 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:42:28][][843 ms][DEBUG] targetPkg: running
[2025-08-21 13:42:28][][843 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 13:42:28][][843 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:42:28][][843 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkyMSJ9'" -e "main()" -q"
[2025-08-21 13:42:28][][843 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:42:28][][843 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkyMSJ9'" -e "main()" -q"
[2025-08-21 13:42:31][][3608 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkyMSJ9"\r\n
[2025-08-21 13:42:33][][5092 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 13:42:33][][5092 ms][DEBUG] proc_open done in 4249 ms; code=0; res.len=115
[2025-08-21 13:42:33][][5092 ms][DEBUG] END   runCmdUntilRes#1 in 4249 ms
[2025-08-21 13:42:33][][5092 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 13:42:33][][0 ms][INFO] === Request start ===
[2025-08-21 13:42:33][][1 ms][DEBUG] START check_frida
[2025-08-21 13:42:33][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:42:33][][325 ms][DEBUG] SU: done in 324 ms; outroot          4632     1 2366568  50148 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:42:33][][325 ms][DEBUG] check_frida: running
[2025-08-21 13:42:33][][325 ms][DEBUG] END   check_frida in 324 ms
[2025-08-21 13:42:33][][325 ms][DEBUG] START check_internet
[2025-08-21 13:42:33][][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:42:43][][10478 ms][DEBUG] SU: done in 10153 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, 100% packet loss, time 0ms\n\n
[2025-08-21 13:42:43][][10479 ms][WARN] check_internet: offline
[2025-08-21 13:42:43][][10479 ms][DEBUG] END   check_internet in 10154 ms
[2025-08-21 13:42:46][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:42:46][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:42:46][][41 ms][DEBUG] ADB: done in 40 ms; out
[2025-08-21 13:42:46][][41 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:42:46][][88 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:42:46][][88 ms][DEBUG] END   check_boot_completed in 88 ms
[2025-08-21 13:42:46][][88 ms][INFO] === Request start ===
[2025-08-21 13:42:46][][88 ms][DEBUG] START check_frida
[2025-08-21 13:42:46][][88 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:42:46][][369 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2350148  48548 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:42:46][][369 ms][DEBUG] check_frida: running
[2025-08-21 13:42:46][][369 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:42:46][][369 ms][DEBUG] START check_internet
[2025-08-21 13:42:46][][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:42:46][][480 ms][DEBUG] SU: done in 111 ms; out
[2025-08-21 13:42:46][][480 ms][WARN] check_internet: offline
[2025-08-21 13:42:46][][480 ms][DEBUG] END   check_internet in 111 ms
[2025-08-21 13:42:49][355808981232827][1 ms][INFO] === Request start ===
[2025-08-21 13:42:49][355808981232827][2 ms][DEBUG] START check_frida
[2025-08-21 13:42:49][355808981232827][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:42:50][355808981232827][251 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2333728  48064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:42:50][355808981232827][252 ms][DEBUG] check_frida: running
[2025-08-21 13:42:50][355808981232827][252 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:42:50][355808981232827][252 ms][DEBUG] START check_internet
[2025-08-21 13:42:50][355808981232827][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:42:50][355808981232827][345 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:42:50][355808981232827][345 ms][WARN] check_internet: offline
[2025-08-21 13:42:50][355808981232827][345 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:42:51][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:42:51][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:42:51][][50 ms][DEBUG] ADB: done in 50 ms; out
[2025-08-21 13:42:51][][50 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:42:51][][128 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:42:51][][128 ms][DEBUG] END   check_boot_completed in 128 ms
[2025-08-21 13:42:51][355808981232827][128 ms][INFO] === Request start ===
[2025-08-21 13:42:51][355808981232827][128 ms][DEBUG] START check_frida
[2025-08-21 13:42:51][355808981232827][128 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:42:52][355808981232827][581 ms][DEBUG] SU: done in 453 ms; outroot          4632     1 2333728  48068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:42:52][355808981232827][581 ms][DEBUG] check_frida: running
[2025-08-21 13:42:52][355808981232827][581 ms][DEBUG] END   check_frida in 453 ms
[2025-08-21 13:42:52][355808981232827][581 ms][DEBUG] START check_internet
[2025-08-21 13:42:52][355808981232827][581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:42:52][355808981232827][675 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:42:52][355808981232827][675 ms][WARN] check_internet: offline
[2025-08-21 13:42:52][355808981232827][675 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:42:54][][0 ms][INFO] === Request start ===
[2025-08-21 13:42:54][][1 ms][DEBUG] START check_frida
[2025-08-21 13:42:54][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:42:54][][272 ms][DEBUG] SU: done in 271 ms; outroot          4632     1 2333728  48068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:42:54][][272 ms][DEBUG] check_frida: running
[2025-08-21 13:42:54][][272 ms][DEBUG] END   check_frida in 271 ms
[2025-08-21 13:42:54][][272 ms][DEBUG] START check_internet
[2025-08-21 13:42:54][][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:42:54][][366 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:42:54][][366 ms][WARN] check_internet: offline
[2025-08-21 13:42:54][][366 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:42:55][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:42:55][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:43:02][][6131 ms][DEBUG] ADB: done in 6130 ms; out
[2025-08-21 13:43:02][][6131 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:43:02][][6193 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:43:02][][6193 ms][DEBUG] END   check_boot_completed in 6193 ms
[2025-08-21 13:43:02][][6194 ms][INFO] === Request start ===
[2025-08-21 13:43:02][][6194 ms][DEBUG] START check_frida
[2025-08-21 13:43:02][][6194 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:02][][6663 ms][DEBUG] SU: done in 469 ms; outroot          4632     1 2333728  47964 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:02][][6663 ms][DEBUG] check_frida: running
[2025-08-21 13:43:02][][6663 ms][DEBUG] END   check_frida in 469 ms
[2025-08-21 13:43:02][][6663 ms][DEBUG] START check_scloud
[2025-08-21 13:43:02][][6663 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:03][][7255 ms][DEBUG] SU: done in 592 ms; out
[2025-08-21 13:43:03][][7256 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:03][][7256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:03][][7583 ms][DEBUG] SU: done in 328 ms; out
[2025-08-21 13:43:03][][7584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:03][][7756 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:05][][9770 ms][DEBUG] END   check_scloud in 3107 ms
[2025-08-21 13:43:05][][9771 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:43:05][][9771 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTA3In0='" -e "main()" -q"
[2025-08-21 13:43:05][][9771 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:05][][9771 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTA3In0='" -e "main()" -q"
[2025-08-21 13:43:10][][14098 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:43:10][][14254 ms][DEBUG] proc_open done in 4483 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:43:10][][14254 ms][DEBUG] END   runCmdUntilRes#1 in 4483 ms
[2025-08-21 13:43:10][][14254 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:43:10][][14254 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:43:10][][14254 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:10][][14410 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:43:10][][14410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:10][][14535 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:12][][16550 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:43:14][][0 ms][INFO] === Request start ===
[2025-08-21 13:43:14][][1 ms][DEBUG] START check_frida
[2025-08-21 13:43:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:14][][253 ms][DEBUG] SU: done in 252 ms; outroot          4632     1 2348124  47824 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:14][][253 ms][DEBUG] check_frida: running
[2025-08-21 13:43:14][][253 ms][DEBUG] END   check_frida in 252 ms
[2025-08-21 13:43:14][][253 ms][DEBUG] START check_scloud
[2025-08-21 13:43:14][][253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:14][][474 ms][DEBUG] SU: done in 220 ms; out
[2025-08-21 13:43:14][][474 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:14][][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:14][][597 ms][DEBUG] SU: done in 123 ms; out
[2025-08-21 13:43:14][][597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:14][][722 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:16][][2737 ms][DEBUG] END   check_scloud in 2484 ms
[2025-08-21 13:43:16][][2737 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:43:16][][2737 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDMzIn0='" -e "main()" -q"
[2025-08-21 13:43:16][][2737 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:16][][2737 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDMzIn0='" -e "main()" -q"
[2025-08-21 13:43:17][351521287453997][1 ms][INFO] === Request start ===
[2025-08-21 13:43:18][][4174 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:43:18][][4330 ms][DEBUG] proc_open done in 1593 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:43:18][][4330 ms][DEBUG] END   runCmdUntilRes#1 in 1593 ms
[2025-08-21 13:43:18][][4330 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:43:18][][4330 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:43:18][][4330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:18][][4471 ms][DEBUG] SU: done in 140 ms; out
[2025-08-21 13:43:18][][4471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:18][][4612 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:20][][6626 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:43:21][351521287453997][4058 ms][DEBUG] START check_frida
[2025-08-21 13:43:21][351521287453997][4058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:21][351521287453997][4308 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136  47920 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:21][351521287453997][4308 ms][DEBUG] check_frida: running
[2025-08-21 13:43:21][351521287453997][4308 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:43:21][351521287453997][4308 ms][DEBUG] START check_scloud
[2025-08-21 13:43:21][351521287453997][4308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:22][351521287453997][4606 ms][DEBUG] SU: done in 298 ms; out
[2025-08-21 13:43:22][351521287453997][4607 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:22][351521287453997][4607 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:22][351521287453997][4730 ms][DEBUG] SU: done in 123 ms; out
[2025-08-21 13:43:22][351521287453997][4730 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:22][351521287453997][4839 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:22][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:43:22][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:43:22][][46 ms][DEBUG] ADB: done in 46 ms; out
[2025-08-21 13:43:22][][46 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:43:22][][93 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:43:22][][93 ms][DEBUG] END   check_boot_completed in 93 ms
[2025-08-21 13:43:22][][93 ms][INFO] === Request start ===
[2025-08-21 13:43:22][][94 ms][DEBUG] START check_frida
[2025-08-21 13:43:22][][94 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:22][][374 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136  47920 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:22][][374 ms][DEBUG] check_frida: running
[2025-08-21 13:43:22][][375 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:43:22][][375 ms][DEBUG] START check_scloud
[2025-08-21 13:43:22][][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:23][357450471592556][0 ms][INFO] === Request start ===
[2025-08-21 13:43:23][][640 ms][DEBUG] SU: done in 265 ms; out
[2025-08-21 13:43:23][][640 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:23][][640 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:23][][765 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:43:23][][765 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:23][][890 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:24][351521287453997][6854 ms][DEBUG] END   check_scloud in 2546 ms
[2025-08-21 13:43:24][351521287453997][6854 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:43:24][351521287453997][6854 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MUFIQUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE5OSJ9'" -e "main()" -q"
[2025-08-21 13:43:24][351521287453997][6855 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:24][351521287453997][6855 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MUFIQUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE5OSJ9'" -e "main()" -q"
[2025-08-21 13:43:25][][2905 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:43:25][][2905 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:43:25][][2905 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDMzIn0='" -e "main()" -q"
[2025-08-21 13:43:25][][2905 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:25][][2905 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1IzMEFGR0JIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDMzIn0='" -e "main()" -q"
[2025-08-21 13:43:25][351521287453997][8307 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:43:26][351521287453997][8463 ms][DEBUG] proc_open done in 1608 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:43:26][351521287453997][8463 ms][DEBUG] END   runCmdUntilRes#1 in 1609 ms
[2025-08-21 13:43:26][351521287453997][8463 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:43:26][351521287453997][8463 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:43:26][351521287453997][8464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:26][351521287453997][8620 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:43:26][351521287453997][8620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:26][351521287453997][8745 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:26][][4295 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:43:27][][4451 ms][DEBUG] proc_open done in 1546 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:43:27][][4451 ms][DEBUG] END   runCmdUntilRes#1 in 1546 ms
[2025-08-21 13:43:27][][4451 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:43:27][][4452 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:43:27][][4452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:27][][4576 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:43:27][][4577 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:27][][4686 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:28][351521287453997][10760 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:43:29][357450471592556][6080 ms][DEBUG] START check_frida
[2025-08-21 13:43:29][357450471592556][6080 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:29][][6701 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:43:29][357450471592556][6330 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136  47920 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:29][357450471592556][6330 ms][DEBUG] check_frida: running
[2025-08-21 13:43:29][357450471592556][6330 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:43:29][357450471592556][6330 ms][DEBUG] START check_scloud
[2025-08-21 13:43:29][357450471592556][6330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:29][357450471592556][6611 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:43:29][357450471592556][6611 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:29][357450471592556][6611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:29][357450471592556][6721 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:43:29][357450471592556][6721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:29][357450471592556][6830 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:30][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:43:30][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:43:30][][35 ms][DEBUG] ADB: done in 34 ms; out
[2025-08-21 13:43:30][][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:43:30][][82 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:43:30][][82 ms][DEBUG] END   check_boot_completed in 82 ms
[2025-08-21 13:43:30][351521287453997][82 ms][INFO] === Request start ===
[2025-08-21 13:43:30][351521287453997][82 ms][DEBUG] START check_frida
[2025-08-21 13:43:30][351521287453997][82 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:30][351521287453997][348 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2349136  47920 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:30][351521287453997][348 ms][DEBUG] check_frida: running
[2025-08-21 13:43:30][351521287453997][348 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 13:43:30][351521287453997][348 ms][DEBUG] START check_scloud
[2025-08-21 13:43:30][351521287453997][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:30][351521287453997][597 ms][DEBUG] SU: done in 249 ms; out
[2025-08-21 13:43:30][351521287453997][597 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:30][351521287453997][597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:30][351521287453997][707 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:43:30][351521287453997][707 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:30][351521287453997][832 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:31][357450471592556][8845 ms][DEBUG] END   check_scloud in 2515 ms
[2025-08-21 13:43:31][357450471592556][8845 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:43:31][357450471592556][8845 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDcxNTkyNTU2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg0MEY5WVdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTUxMSJ9'" -e "main()" -q"
[2025-08-21 13:43:31][357450471592556][8845 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:31][357450471592556][8845 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDcxNTkyNTU2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg0MEY5WVdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTUxMSJ9'" -e "main()" -q"
[2025-08-21 13:43:32][351521287453997][2847 ms][DEBUG] END   check_scloud in 2499 ms
[2025-08-21 13:43:32][351521287453997][2847 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:43:32][351521287453997][2847 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MUFIQUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE5OSJ9'" -e "main()" -q"
[2025-08-21 13:43:32][351521287453997][2847 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:32][351521287453997][2847 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MUFIQUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE5OSJ9'" -e "main()" -q"
[2025-08-21 13:43:33][357450471592556][10282 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:43:33][357450471592556][10438 ms][DEBUG] proc_open done in 1593 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:43:33][357450471592556][10439 ms][DEBUG] END   runCmdUntilRes#1 in 1593 ms
[2025-08-21 13:43:33][357450471592556][10439 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:43:33][357450471592556][10439 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:43:33][357450471592556][10439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:33][357450471592556][10581 ms][DEBUG] SU: done in 142 ms; out
[2025-08-21 13:43:33][357450471592556][10581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:33][357450471592556][10688 ms][DEBUG] SU: done in 107 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:34][351521287453997][4237 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:43:34][351521287453997][4393 ms][DEBUG] proc_open done in 1546 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:43:34][351521287453997][4393 ms][DEBUG] END   runCmdUntilRes#1 in 1546 ms
[2025-08-21 13:43:34][351521287453997][4393 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:43:34][351521287453997][4394 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:43:34][351521287453997][4394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:34][351521287453997][4518 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:43:34][351521287453997][4519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:34][351521287453997][4643 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:35][357450471592556][12703 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:43:36][351521287453997][6658 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:43:37][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:43:37][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:43:37][][44 ms][DEBUG] ADB: done in 44 ms; out
[2025-08-21 13:43:37][][44 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:43:37][][107 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:43:37][][107 ms][DEBUG] END   check_boot_completed in 107 ms
[2025-08-21 13:43:37][357450471592556][107 ms][INFO] === Request start ===
[2025-08-21 13:43:37][357450471592556][108 ms][DEBUG] START check_frida
[2025-08-21 13:43:37][357450471592556][108 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:37][357450471592556][404 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  47928 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:37][357450471592556][404 ms][DEBUG] check_frida: running
[2025-08-21 13:43:37][357450471592556][404 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:43:37][357450471592556][404 ms][DEBUG] START check_scloud
[2025-08-21 13:43:37][357450471592556][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:38][357450471592556][685 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:43:38][357450471592556][685 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:38][357450471592556][685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:38][357450471592556][810 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:43:38][357450471592556][810 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:38][357450471592556][919 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:40][357450471592556][2934 ms][DEBUG] END   check_scloud in 2531 ms
[2025-08-21 13:43:40][357450471592556][2934 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:43:40][357450471592556][2935 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDcxNTkyNTU2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg0MEY5WVdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTUxMSJ9'" -e "main()" -q"
[2025-08-21 13:43:40][357450471592556][2935 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:40][357450471592556][2935 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDcxNTkyNTU2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg0MEY5WVdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTUxMSJ9'" -e "main()" -q"
[2025-08-21 13:43:40][351521287453997][0 ms][INFO] === Request start ===
[2025-08-21 13:43:40][351521287453997][0 ms][DEBUG] START check_frida
[2025-08-21 13:43:40][351521287453997][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:41][351521287453997][281 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2349136  47928 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:41][351521287453997][281 ms][DEBUG] check_frida: running
[2025-08-21 13:43:41][351521287453997][281 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:43:41][351521287453997][281 ms][DEBUG] START check_scloud
[2025-08-21 13:43:41][351521287453997][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:41][351521287453997][560 ms][DEBUG] SU: done in 280 ms; out
[2025-08-21 13:43:41][351521287453997][561 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:41][351521287453997][561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:41][351521287453997][670 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:43:41][351521287453997][670 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:41][351521287453997][794 ms][DEBUG] SU: done in 124 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:41][357450471592556][4356 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:43:42][357450471592556][4512 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:43:42][357450471592556][4512 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:43:42][357450471592556][4512 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:43:42][357450471592556][4512 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:43:42][357450471592556][4512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:42][357450471592556][4637 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:43:42][357450471592556][4637 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:42][357450471592556][4746 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:43][351521287453997][2809 ms][DEBUG] END   check_scloud in 2528 ms
[2025-08-21 13:43:43][351521287453997][2809 ms][DEBUG] rawBody.length=1150
[2025-08-21 13:43:43][351521287453997][2809 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InJhcXVlbC4xQG9ubWFpbC5jb20iLCJjYXJyaWVyIjoiRVVFIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzk1MTkifQ=='" -e "main()" -q"
[2025-08-21 13:43:43][351521287453997][2809 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:43][351521287453997][2809 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InJhcXVlbC4xQG9ubWFpbC5jb20iLCJjYXJyaWVyIjoiRVVFIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzk1MTkifQ=='" -e "main()" -q"
[2025-08-21 13:43:44][357450471592556][6762 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:43:44][351521287453997][4231 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:43:45][351521287453997][4387 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:43:45][351521287453997][4387 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:43:45][351521287453997][4387 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:43:45][351521287453997][4387 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:43:45][351521287453997][4387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:45][351521287453997][4543 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:43:45][351521287453997][4543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:45][351521287453997][4652 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:46][][0 ms][INFO] === Request start ===
[2025-08-21 13:43:47][351521287453997][6667 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:43:48][][2028 ms][DEBUG] START check_frida
[2025-08-21 13:43:48][][2028 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:48][][2325 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136  47948 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:48][][2325 ms][DEBUG] check_frida: running
[2025-08-21 13:43:48][][2325 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:43:48][][2325 ms][DEBUG] START check_scloud
[2025-08-21 13:43:48][][2326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:48][][2560 ms][DEBUG] SU: done in 234 ms; out
[2025-08-21 13:43:48][][2560 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:48][][2560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:48][][2685 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:43:48][][2685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:48][][2810 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:49][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:43:49][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:43:49][][40 ms][DEBUG] ADB: done in 40 ms; out
[2025-08-21 13:43:49][][40 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:43:49][][87 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:43:49][][87 ms][DEBUG] END   check_boot_completed in 87 ms
[2025-08-21 13:43:49][351521287453997][87 ms][INFO] === Request start ===
[2025-08-21 13:43:49][351521287453997][87 ms][DEBUG] START check_frida
[2025-08-21 13:43:49][351521287453997][87 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:49][351521287453997][353 ms][DEBUG] SU: done in 266 ms; outroot          4632     1 2349136  47948 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:49][351521287453997][353 ms][DEBUG] check_frida: running
[2025-08-21 13:43:49][351521287453997][353 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 13:43:49][351521287453997][353 ms][DEBUG] START check_scloud
[2025-08-21 13:43:49][351521287453997][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:49][351521287453997][571 ms][DEBUG] SU: done in 219 ms; out
[2025-08-21 13:43:49][351521287453997][572 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:49][351521287453997][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:49][351521287453997][681 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:43:49][351521287453997][681 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:49][351521287453997][790 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:50][][4824 ms][DEBUG] END   check_scloud in 2499 ms
[2025-08-21 13:43:50][][4825 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:43:50][][4825 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg0MEY5WVdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM5NiJ9'" -e "main()" -q"
[2025-08-21 13:43:50][][4825 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:50][][4825 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg0MEY5WVdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM5NiJ9'" -e "main()" -q"
[2025-08-21 13:43:51][351521287453997][2805 ms][DEBUG] END   check_scloud in 2452 ms
[2025-08-21 13:43:51][351521287453997][2805 ms][DEBUG] rawBody.length=1150
[2025-08-21 13:43:51][351521287453997][2805 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InJhcXVlbC4xQG9ubWFpbC5jb20iLCJjYXJyaWVyIjoiRVVFIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzk1MTkifQ=='" -e "main()" -q"
[2025-08-21 13:43:51][351521287453997][2805 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:51][351521287453997][2806 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg3NDUzOTk3IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InJhcXVlbC4xQG9ubWFpbC5jb20iLCJjYXJyaWVyIjoiRVVFIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzk1MTkifQ=='" -e "main()" -q"
[2025-08-21 13:43:52][][6262 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:43:52][][6418 ms][DEBUG] proc_open done in 1593 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:43:52][][6418 ms][DEBUG] END   runCmdUntilRes#1 in 1593 ms
[2025-08-21 13:43:52][][6418 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:43:52][][6418 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:43:52][][6418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:52][][6559 ms][DEBUG] SU: done in 141 ms; out
[2025-08-21 13:43:52][][6559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:52][][6684 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:53][351521287453997][4196 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:43:53][351521287453997][4352 ms][DEBUG] proc_open done in 1546 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:43:53][351521287453997][4352 ms][DEBUG] END   runCmdUntilRes#1 in 1546 ms
[2025-08-21 13:43:53][351521287453997][4352 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:43:53][351521287453997][4352 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:43:53][351521287453997][4352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:53][351521287453997][4461 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:43:53][351521287453997][4461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:53][351521287453997][4571 ms][DEBUG] SU: done in 110 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:54][][8699 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:43:55][351521287453997][6586 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:43:56][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:43:56][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:43:56][][36 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:43:56][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:43:56][][83 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:43:56][][83 ms][DEBUG] END   check_boot_completed in 83 ms
[2025-08-21 13:43:56][][83 ms][INFO] === Request start ===
[2025-08-21 13:43:56][][83 ms][DEBUG] START check_frida
[2025-08-21 13:43:56][][83 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:56][][333 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136  47964 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:56][][333 ms][DEBUG] check_frida: running
[2025-08-21 13:43:56][][333 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:43:56][][333 ms][DEBUG] START check_scloud
[2025-08-21 13:43:56][][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:57][][630 ms][DEBUG] SU: done in 296 ms; out
[2025-08-21 13:43:57][][630 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:57][][630 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:57][][754 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:43:57][][755 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:57][][0 ms][INFO] === Request start ===
[2025-08-21 13:43:57][][0 ms][DEBUG] START check_frida
[2025-08-21 13:43:57][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:43:57][][864 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:57][][230 ms][DEBUG] SU: done in 230 ms; outroot          4632     1 2349136  47964 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:43:57][][230 ms][DEBUG] check_frida: running
[2025-08-21 13:43:57][][230 ms][DEBUG] END   check_frida in 230 ms
[2025-08-21 13:43:57][][230 ms][DEBUG] START check_scloud
[2025-08-21 13:43:57][][230 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:43:57][][527 ms][DEBUG] SU: done in 297 ms; out
[2025-08-21 13:43:57][][527 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:43:57][][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:43:57][][636 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:43:57][][636 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:43:58][][792 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:43:59][][2879 ms][DEBUG] END   check_scloud in 2546 ms
[2025-08-21 13:43:59][][2879 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:43:59][][2879 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg0MEY5WVdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM5NiJ9'" -e "main()" -q"
[2025-08-21 13:43:59][][2879 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:43:59][][2879 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg0MEY5WVdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM5NiJ9'" -e "main()" -q"
[2025-08-21 13:44:00][][2808 ms][DEBUG] END   check_scloud in 2577 ms
[2025-08-21 13:44:00][][2808 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:44:00][][2808 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MUFIQUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg1MiJ9'" -e "main()" -q"
[2025-08-21 13:44:00][][2808 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:44:00][][2808 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MUFIQUZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg1MiJ9'" -e "main()" -q"
[2025-08-21 13:44:00][][4316 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:44:00][][4472 ms][DEBUG] proc_open done in 1593 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:44:00][][4472 ms][DEBUG] END   runCmdUntilRes#1 in 1593 ms
[2025-08-21 13:44:00][][4473 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:44:00][][4473 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:44:00][][4473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:44:01][][4629 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:44:01][][4629 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:44:01][][4738 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:44:01][][4182 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:44:01][][4339 ms][DEBUG] proc_open done in 1531 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:44:01][][4339 ms][DEBUG] END   runCmdUntilRes#1 in 1531 ms
[2025-08-21 13:44:01][][4339 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:44:01][][4339 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:44:01][][4339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:44:01][][4448 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:44:01][][4448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:44:01][][4557 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:44:03][][6753 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:44:03][][6572 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:44:04][][0 ms][INFO] === Request start ===
[2025-08-21 13:44:04][][1 ms][DEBUG] START check_frida
[2025-08-21 13:44:04][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:05][][305 ms][DEBUG] SU: done in 304 ms; outroot          4632     1 2349136  47956 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:05][][305 ms][DEBUG] check_frida: running
[2025-08-21 13:44:05][][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 13:44:05][][305 ms][DEBUG] START check_internet
[2025-08-21 13:44:05][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:05][][399 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:44:05][][399 ms][WARN] check_internet: offline
[2025-08-21 13:44:05][][399 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:44:05][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:44:05][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:44:05][][44 ms][DEBUG] ADB: done in 44 ms; out
[2025-08-21 13:44:05][][44 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:44:05][][91 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:44:05][][91 ms][DEBUG] END   check_boot_completed in 91 ms
[2025-08-21 13:44:05][][91 ms][INFO] === Request start ===
[2025-08-21 13:44:05][][91 ms][DEBUG] START check_frida
[2025-08-21 13:44:05][][91 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:05][][372 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136  47956 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:05][][372 ms][DEBUG] check_frida: running
[2025-08-21 13:44:05][][372 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:44:05][][372 ms][DEBUG] START check_internet
[2025-08-21 13:44:05][][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:05][][482 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:44:05][][482 ms][WARN] check_internet: offline
[2025-08-21 13:44:05][][482 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:44:06][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:44:06][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:44:06][][34 ms][DEBUG] ADB: done in 33 ms; out
[2025-08-21 13:44:06][][34 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:44:07][][80 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:44:07][][80 ms][DEBUG] END   check_boot_completed in 80 ms
[2025-08-21 13:44:07][][80 ms][INFO] === Request start ===
[2025-08-21 13:44:07][][81 ms][DEBUG] START check_frida
[2025-08-21 13:44:07][][81 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:07][][362 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136  47956 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:07][][362 ms][DEBUG] check_frida: running
[2025-08-21 13:44:07][][362 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:44:07][][362 ms][DEBUG] START check_internet
[2025-08-21 13:44:07][][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:07][][455 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:44:07][][455 ms][WARN] check_internet: offline
[2025-08-21 13:44:07][][455 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:44:10][357450471592556][0 ms][INFO] === Request start ===
[2025-08-21 13:44:10][357450471592556][0 ms][DEBUG] START check_frida
[2025-08-21 13:44:10][357450471592556][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:10][357450471592556][279 ms][DEBUG] SU: done in 279 ms; outroot          4632     1 2349136  47956 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:10][357450471592556][279 ms][DEBUG] check_frida: running
[2025-08-21 13:44:10][357450471592556][279 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 13:44:10][357450471592556][279 ms][DEBUG] START check_internet
[2025-08-21 13:44:10][357450471592556][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:10][357450471592556][357 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:44:10][357450471592556][358 ms][WARN] check_internet: offline
[2025-08-21 13:44:10][357450471592556][358 ms][DEBUG] END   check_internet in 78 ms
[2025-08-21 13:44:12][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:44:12][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:44:12][][36 ms][DEBUG] ADB: done in 36 ms; out
[2025-08-21 13:44:12][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:44:12][][99 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:44:12][][99 ms][DEBUG] END   check_boot_completed in 99 ms
[2025-08-21 13:44:12][357450471592556][100 ms][INFO] === Request start ===
[2025-08-21 13:44:12][357450471592556][100 ms][DEBUG] START check_frida
[2025-08-21 13:44:12][357450471592556][100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:13][357450471592556][396 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  47956 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:13][357450471592556][396 ms][DEBUG] check_frida: running
[2025-08-21 13:44:13][357450471592556][396 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:44:13][357450471592556][396 ms][DEBUG] START check_internet
[2025-08-21 13:44:13][357450471592556][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:13][357450471592556][521 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:44:13][357450471592556][521 ms][WARN] check_internet: offline
[2025-08-21 13:44:13][357450471592556][521 ms][DEBUG] END   check_internet in 125 ms
[2025-08-21 13:44:15][][1 ms][INFO] === Request start ===
[2025-08-21 13:44:15][][1 ms][DEBUG] START check_frida
[2025-08-21 13:44:15][][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:15][][288 ms][DEBUG] SU: done in 286 ms; outroot          4632     1 2349136  47956 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:15][][288 ms][DEBUG] check_frida: running
[2025-08-21 13:44:15][][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 13:44:15][][288 ms][DEBUG] START check_internet
[2025-08-21 13:44:15][][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:15][][413 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:44:15][][413 ms][WARN] check_internet: offline
[2025-08-21 13:44:15][][413 ms][DEBUG] END   check_internet in 125 ms
[2025-08-21 13:44:17][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:44:17][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:44:17][][35 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:44:17][][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:44:17][][98 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:44:17][][98 ms][DEBUG] END   check_boot_completed in 98 ms
[2025-08-21 13:44:17][][98 ms][INFO] === Request start ===
[2025-08-21 13:44:17][][99 ms][DEBUG] START check_frida
[2025-08-21 13:44:17][][99 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:17][][426 ms][DEBUG] SU: done in 327 ms; outroot          4632     1 2332716  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:17][][426 ms][DEBUG] check_frida: running
[2025-08-21 13:44:17][][426 ms][DEBUG] END   check_frida in 327 ms
[2025-08-21 13:44:17][][426 ms][DEBUG] START check_internet
[2025-08-21 13:44:17][][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:17][][535 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:44:17][][535 ms][WARN] check_internet: offline
[2025-08-21 13:44:17][][535 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:44:19][][0 ms][INFO] === Request start ===
[2025-08-21 13:44:19][][1 ms][DEBUG] START check_frida
[2025-08-21 13:44:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:19][][291 ms][DEBUG] SU: done in 290 ms; outroot          4632     1 2332716  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:19][][291 ms][DEBUG] check_frida: running
[2025-08-21 13:44:19][][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 13:44:19][][291 ms][DEBUG] START check_internet
[2025-08-21 13:44:19][][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:19][][400 ms][DEBUG] SU: done in 108 ms; out
[2025-08-21 13:44:19][][400 ms][WARN] check_internet: offline
[2025-08-21 13:44:19][][400 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:44:21][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:44:21][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:44:21][][32 ms][DEBUG] ADB: done in 31 ms; out
[2025-08-21 13:44:21][][32 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:44:21][][94 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:44:21][][94 ms][DEBUG] END   check_boot_completed in 94 ms
[2025-08-21 13:44:21][][94 ms][INFO] === Request start ===
[2025-08-21 13:44:21][][95 ms][DEBUG] START check_frida
[2025-08-21 13:44:21][][95 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:21][][329 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2332716  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:21][][329 ms][DEBUG] check_frida: running
[2025-08-21 13:44:21][][329 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:44:21][][329 ms][DEBUG] START check_internet
[2025-08-21 13:44:21][][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:21][][422 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:44:21][][422 ms][WARN] check_internet: offline
[2025-08-21 13:44:21][][422 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:44:41][352773716134933][0 ms][INFO] === Request start ===
[2025-08-21 13:44:41][352773716134933][1 ms][DEBUG] START check_frida
[2025-08-21 13:44:41][352773716134933][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:41][352773716134933][288 ms][DEBUG] SU: done in 287 ms; outroot          4632     1 2332716  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:41][352773716134933][288 ms][DEBUG] check_frida: running
[2025-08-21 13:44:41][352773716134933][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 13:44:41][352773716134933][288 ms][DEBUG] START check_internet
[2025-08-21 13:44:41][352773716134933][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:41][352773716134933][382 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:44:41][352773716134933][382 ms][WARN] check_internet: offline
[2025-08-21 13:44:41][352773716134933][382 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:44:45][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:44:45][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:44:45][][43 ms][DEBUG] ADB: done in 42 ms; out
[2025-08-21 13:44:45][][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:44:45][][106 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:44:45][][106 ms][DEBUG] END   check_boot_completed in 106 ms
[2025-08-21 13:44:45][352773716134933][106 ms][INFO] === Request start ===
[2025-08-21 13:44:45][352773716134933][106 ms][DEBUG] START check_frida
[2025-08-21 13:44:45][352773716134933][106 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:46][352773716134933][403 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:46][352773716134933][403 ms][DEBUG] check_frida: running
[2025-08-21 13:44:46][352773716134933][404 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:44:46][352773716134933][404 ms][DEBUG] START check_internet
[2025-08-21 13:44:46][352773716134933][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:46][352773716134933][496 ms][DEBUG] SU: done in 92 ms; out
[2025-08-21 13:44:46][352773716134933][496 ms][WARN] check_internet: offline
[2025-08-21 13:44:46][352773716134933][496 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:44:50][][0 ms][INFO] === Request start ===
[2025-08-21 13:44:50][][1 ms][DEBUG] START check_frida
[2025-08-21 13:44:50][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:51][][281 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2332716  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:51][][282 ms][DEBUG] check_frida: running
[2025-08-21 13:44:51][][282 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:44:51][][282 ms][DEBUG] START check_internet
[2025-08-21 13:44:51][][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:51][][391 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:44:51][][391 ms][WARN] check_internet: offline
[2025-08-21 13:44:51][][391 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:44:55][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:44:55][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:44:55][][46 ms][DEBUG] ADB: done in 45 ms; out
[2025-08-21 13:44:55][][46 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:44:55][][108 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:44:55][][108 ms][DEBUG] END   check_boot_completed in 108 ms
[2025-08-21 13:44:55][][109 ms][INFO] === Request start ===
[2025-08-21 13:44:55][][109 ms][DEBUG] START check_frida
[2025-08-21 13:44:55][][109 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:44:55][][405 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2332716  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:44:55][][405 ms][DEBUG] check_frida: running
[2025-08-21 13:44:55][][405 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:44:55][][405 ms][DEBUG] START check_internet
[2025-08-21 13:44:55][][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:44:56][][499 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:44:56][][499 ms][WARN] check_internet: offline
[2025-08-21 13:44:56][][499 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:45:00][][0 ms][INFO] === Request start ===
[2025-08-21 13:45:00][][1 ms][DEBUG] START check_frida
[2025-08-21 13:45:00][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:00][][245 ms][DEBUG] SU: done in 244 ms; outroot          4632     1 2332716  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:00][][246 ms][DEBUG] check_frida: running
[2025-08-21 13:45:00][][246 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 13:45:00][][246 ms][DEBUG] START check_scloud
[2025-08-21 13:45:00][][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:01][][558 ms][DEBUG] SU: done in 312 ms; out
[2025-08-21 13:45:01][][558 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:01][][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:01][][683 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:45:01][][683 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:01][][808 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:03][][2823 ms][DEBUG] END   check_scloud in 2577 ms
[2025-08-21 13:45:03][][2823 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:45:03][][2823 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ1MCJ9'" -e "main()" -q"
[2025-08-21 13:45:03][][2823 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:45:03][][2823 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ1MCJ9'" -e "main()" -q"
[2025-08-21 13:45:04][][4260 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:45:04][][4416 ms][DEBUG] proc_open done in 1593 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:45:04][][4416 ms][DEBUG] END   runCmdUntilRes#1 in 1593 ms
[2025-08-21 13:45:04][][4416 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:45:04][][4416 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:45:04][][4416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:05][][4573 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:45:05][][4573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:05][][4698 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:07][][6712 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:45:08][354106248844075][0 ms][INFO] === Request start ===
[2025-08-21 13:45:08][354106248844075][1 ms][DEBUG] START check_frida
[2025-08-21 13:45:08][354106248844075][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:08][354106248844075][252 ms][DEBUG] SU: done in 251 ms; outroot          4632     1 2349136  48028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:08][354106248844075][252 ms][DEBUG] check_frida: running
[2025-08-21 13:45:08][354106248844075][252 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 13:45:08][354106248844075][252 ms][DEBUG] START check_scloud
[2025-08-21 13:45:08][354106248844075][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:09][354106248844075][548 ms][DEBUG] SU: done in 297 ms; out
[2025-08-21 13:45:09][354106248844075][549 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:09][354106248844075][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:09][354106248844075][658 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:45:09][354106248844075][658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:09][354106248844075][783 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:11][354106248844075][2798 ms][DEBUG] END   check_scloud in 2546 ms
[2025-08-21 13:45:11][354106248844075][2798 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:45:11][354106248844075][2798 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2MjQ4ODQ0MDc1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjYzUlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk4NyJ9'" -e "main()" -q"
[2025-08-21 13:45:11][354106248844075][2798 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:45:11][354106248844075][2798 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2MjQ4ODQ0MDc1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjYzUlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk4NyJ9'" -e "main()" -q"
[2025-08-21 13:45:11][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:45:11][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:45:11][][26 ms][DEBUG] ADB: done in 26 ms; out
[2025-08-21 13:45:11][][26 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:45:11][][88 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:45:11][][88 ms][DEBUG] END   check_boot_completed in 88 ms
[2025-08-21 13:45:11][][88 ms][INFO] === Request start ===
[2025-08-21 13:45:11][][89 ms][DEBUG] START check_frida
[2025-08-21 13:45:11][][89 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:11][][323 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2349136  48028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:11][][323 ms][DEBUG] check_frida: running
[2025-08-21 13:45:11][][323 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:45:11][][323 ms][DEBUG] START check_scloud
[2025-08-21 13:45:11][][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:12][][620 ms][DEBUG] SU: done in 296 ms; out
[2025-08-21 13:45:12][][620 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:12][][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:12][][729 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:45:12][][729 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:12][][841 ms][DEBUG] SU: done in 111 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:12][354106248844075][4204 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:45:13][354106248844075][4360 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:45:13][354106248844075][4360 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:45:13][354106248844075][4360 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:45:13][354106248844075][4360 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:45:13][354106248844075][4360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:13][354106248844075][4470 ms][DEBUG] SU: done in 110 ms; out
[2025-08-21 13:45:13][354106248844075][4470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:13][354106248844075][4579 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:14][][2853 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:45:14][][2854 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:45:14][][2854 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ1MCJ9'" -e "main()" -q"
[2025-08-21 13:45:14][][2854 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:45:14][][2854 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ1MCJ9'" -e "main()" -q"
[2025-08-21 13:45:15][354106248844075][6594 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:45:15][][4306 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:45:16][][4463 ms][DEBUG] proc_open done in 1609 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:45:16][][4463 ms][DEBUG] END   runCmdUntilRes#1 in 1609 ms
[2025-08-21 13:45:16][][4463 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:45:16][][4463 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:45:16][][4463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:16][][4619 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:45:16][][4619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:16][][4728 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:18][][6743 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:45:19][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:45:19][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:45:19][][48 ms][DEBUG] ADB: done in 48 ms; out
[2025-08-21 13:45:19][][48 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:45:19][][111 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:45:19][][111 ms][DEBUG] END   check_boot_completed in 111 ms
[2025-08-21 13:45:19][354106248844075][111 ms][INFO] === Request start ===
[2025-08-21 13:45:19][354106248844075][112 ms][DEBUG] START check_frida
[2025-08-21 13:45:19][354106248844075][112 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:20][354106248844075][361 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2349136  48036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:20][354106248844075][361 ms][DEBUG] check_frida: running
[2025-08-21 13:45:20][354106248844075][361 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 13:45:20][354106248844075][361 ms][DEBUG] START check_scloud
[2025-08-21 13:45:20][354106248844075][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:20][354106248844075][658 ms][DEBUG] SU: done in 296 ms; out
[2025-08-21 13:45:20][354106248844075][658 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:20][354106248844075][658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:20][354106248844075][783 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:45:20][354106248844075][783 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:20][354106248844075][892 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:22][354106248844075][2907 ms][DEBUG] END   check_scloud in 2546 ms
[2025-08-21 13:45:22][354106248844075][2907 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:45:22][354106248844075][2907 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2MjQ4ODQ0MDc1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjYzUlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk4NyJ9'" -e "main()" -q"
[2025-08-21 13:45:22][354106248844075][2907 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:45:22][354106248844075][2907 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2MjQ4ODQ0MDc1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjYzUlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk4NyJ9'" -e "main()" -q"
[2025-08-21 13:45:24][354106248844075][4360 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:45:24][354106248844075][4516 ms][DEBUG] proc_open done in 1608 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:45:24][354106248844075][4516 ms][DEBUG] END   runCmdUntilRes#1 in 1609 ms
[2025-08-21 13:45:24][354106248844075][4516 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:45:24][354106248844075][4516 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:45:24][354106248844075][4516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:24][354106248844075][4658 ms][DEBUG] SU: done in 141 ms; out
[2025-08-21 13:45:24][354106248844075][4658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:24][352773716134933][1 ms][INFO] === Request start ===
[2025-08-21 13:45:24][352773716134933][1 ms][DEBUG] START check_frida
[2025-08-21 13:45:24][352773716134933][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:24][354106248844075][4766 ms][DEBUG] SU: done in 108 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:24][352773716134933][267 ms][DEBUG] SU: done in 266 ms; outroot          4632     1 2349136  48000 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:24][352773716134933][267 ms][DEBUG] check_frida: running
[2025-08-21 13:45:24][352773716134933][267 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 13:45:24][352773716134933][267 ms][DEBUG] START check_scloud
[2025-08-21 13:45:24][352773716134933][267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:24][352773716134933][548 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:45:24][352773716134933][548 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:24][352773716134933][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:25][352773716134933][658 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:45:25][352773716134933][658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:25][352773716134933][767 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:26][354106248844075][6781 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:45:27][352773716134933][2782 ms][DEBUG] END   check_scloud in 2515 ms
[2025-08-21 13:45:27][352773716134933][2782 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:45:27][352773716134933][2782 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzczNzE2MTM0OTMzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MjYzIn0='" -e "main()" -q"
[2025-08-21 13:45:27][352773716134933][2782 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:45:27][352773716134933][2783 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzczNzE2MTM0OTMzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MjYzIn0='" -e "main()" -q"
[2025-08-21 13:45:28][352773716134933][4204 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:45:28][352773716134933][4360 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:45:28][352773716134933][4360 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:45:28][352773716134933][4360 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:45:28][352773716134933][4360 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:45:28][352773716134933][4360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:28][352773716134933][4501 ms][DEBUG] SU: done in 141 ms; out
[2025-08-21 13:45:28][352773716134933][4501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:29][352773716134933][4610 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:30][][0 ms][INFO] === Request start ===
[2025-08-21 13:45:31][352773716134933][6625 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:45:31][][1005 ms][DEBUG] START check_frida
[2025-08-21 13:45:31][][1005 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:32][][1286 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:32][][1286 ms][DEBUG] check_frida: running
[2025-08-21 13:45:32][][1286 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:45:32][][1286 ms][DEBUG] START check_scloud
[2025-08-21 13:45:32][][1286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:32][][1567 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:45:32][][1567 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:32][][1567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:32][][1677 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:45:32][][1677 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:32][][1802 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:34][][3817 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:45:34][][3817 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:45:34][][3817 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjYzUlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3MiJ9'" -e "main()" -q"
[2025-08-21 13:45:34][][3817 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:45:34][][3817 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjYzUlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3MiJ9'" -e "main()" -q"
[2025-08-21 13:45:35][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:45:35][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:45:35][][41 ms][DEBUG] ADB: done in 40 ms; out
[2025-08-21 13:45:35][][41 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:45:35][][103 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:45:35][][103 ms][DEBUG] END   check_boot_completed in 103 ms
[2025-08-21 13:45:35][352773716134933][103 ms][INFO] === Request start ===
[2025-08-21 13:45:35][352773716134933][104 ms][DEBUG] START check_frida
[2025-08-21 13:45:35][352773716134933][104 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:35][352773716134933][384 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2349136  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:35][352773716134933][384 ms][DEBUG] check_frida: running
[2025-08-21 13:45:35][352773716134933][384 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:45:35][352773716134933][384 ms][DEBUG] START check_scloud
[2025-08-21 13:45:35][352773716134933][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:36][][5223 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:45:36][352773716134933][665 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:45:36][352773716134933][665 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:36][352773716134933][666 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:36][352773716134933][775 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:45:36][352773716134933][775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:36][][5379 ms][DEBUG] proc_open done in 1561 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:45:36][][5379 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:45:36][][5379 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:45:36][][5379 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:45:36][][5379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:36][352773716134933][884 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:36][][5488 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:45:36][][5488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:36][][5598 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:38][352773716134933][2899 ms][DEBUG] END   check_scloud in 2515 ms
[2025-08-21 13:45:38][352773716134933][2899 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:45:38][352773716134933][2899 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzczNzE2MTM0OTMzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MjYzIn0='" -e "main()" -q"
[2025-08-21 13:45:38][352773716134933][2899 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:45:38][352773716134933][2900 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzczNzE2MTM0OTMzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MjYzIn0='" -e "main()" -q"
[2025-08-21 13:45:38][][7613 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:45:39][352773716134933][4321 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:45:39][352773716134933][4477 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:45:39][352773716134933][4477 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:45:39][352773716134933][4477 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:45:39][352773716134933][4477 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:45:39][352773716134933][4477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:40][352773716134933][4633 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:45:40][352773716134933][4633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:40][352773716134933][4774 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:42][352773716134933][6789 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:45:42][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:45:42][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:45:43][][46 ms][DEBUG] ADB: done in 46 ms; out
[2025-08-21 13:45:43][][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:45:43][][125 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:45:43][][125 ms][DEBUG] END   check_boot_completed in 125 ms
[2025-08-21 13:45:43][][125 ms][INFO] === Request start ===
[2025-08-21 13:45:43][][126 ms][DEBUG] START check_frida
[2025-08-21 13:45:43][][126 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:43][][421 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:43][][422 ms][DEBUG] check_frida: running
[2025-08-21 13:45:43][][422 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:45:43][][422 ms][DEBUG] START check_scloud
[2025-08-21 13:45:43][][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:43][][718 ms][DEBUG] SU: done in 296 ms; out
[2025-08-21 13:45:43][][718 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:43][][718 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:43][][843 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:45:43][][843 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:43][][968 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:45][][2983 ms][DEBUG] END   check_scloud in 2561 ms
[2025-08-21 13:45:45][][2983 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:45:45][][2983 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjYzUlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3MiJ9'" -e "main()" -q"
[2025-08-21 13:45:45][][2983 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:45:45][][2983 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjYzUlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3MiJ9'" -e "main()" -q"
[2025-08-21 13:45:46][][0 ms][INFO] === Request start ===
[2025-08-21 13:45:46][][1 ms][DEBUG] START check_frida
[2025-08-21 13:45:46][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:46][][277 ms][DEBUG] SU: done in 276 ms; outroot          4632     1 2349136  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:46][][277 ms][DEBUG] check_frida: running
[2025-08-21 13:45:46][][277 ms][DEBUG] END   check_frida in 276 ms
[2025-08-21 13:45:46][][277 ms][DEBUG] START check_scloud
[2025-08-21 13:45:46][][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:47][][573 ms][DEBUG] SU: done in 297 ms; out
[2025-08-21 13:45:47][][573 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:47][][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:47][][4358 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:45:47][][683 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:45:47][][683 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:47][][4514 ms][DEBUG] proc_open done in 1531 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:45:47][][4514 ms][DEBUG] END   runCmdUntilRes#1 in 1531 ms
[2025-08-21 13:45:47][][4514 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:45:47][][4514 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:45:47][][4514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:47][][808 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:47][][4655 ms][DEBUG] SU: done in 140 ms; out
[2025-08-21 13:45:47][][4655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:47][][4811 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:49][][2823 ms][DEBUG] END   check_scloud in 2546 ms
[2025-08-21 13:45:49][][2823 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:45:49][][2823 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTE0In0='" -e "main()" -q"
[2025-08-21 13:45:49][][2823 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:45:49][][2823 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTE0In0='" -e "main()" -q"
[2025-08-21 13:45:49][][6826 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:45:50][][4260 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:45:51][][4416 ms][DEBUG] proc_open done in 1593 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:45:51][][4416 ms][DEBUG] END   runCmdUntilRes#1 in 1593 ms
[2025-08-21 13:45:51][][4416 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:45:51][][4416 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:45:51][][4416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:51][][4572 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:45:51][][4573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:51][][4682 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:53][][6697 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:45:54][][0 ms][INFO] === Request start ===
[2025-08-21 13:45:54][][1 ms][DEBUG] START check_frida
[2025-08-21 13:45:54][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:54][][250 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2349136  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:54][][250 ms][DEBUG] check_frida: running
[2025-08-21 13:45:54][][250 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 13:45:54][][250 ms][DEBUG] START check_scloud
[2025-08-21 13:45:54][][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:54][][484 ms][DEBUG] SU: done in 234 ms; out
[2025-08-21 13:45:54][][484 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:54][][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:54][][593 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:45:54][][594 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:54][][750 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:56][][2765 ms][DEBUG] END   check_scloud in 2515 ms
[2025-08-21 13:45:56][][2765 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:45:56][][2765 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjYzUlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzOSJ9'" -e "main()" -q"
[2025-08-21 13:45:56][][2765 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:45:56][][2765 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjYzUlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgzOSJ9'" -e "main()" -q"
[2025-08-21 13:45:57][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:45:57][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:45:57][][44 ms][DEBUG] ADB: done in 43 ms; out
[2025-08-21 13:45:57][][44 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:45:57][][106 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:45:57][][106 ms][DEBUG] END   check_boot_completed in 106 ms
[2025-08-21 13:45:57][][106 ms][INFO] === Request start ===
[2025-08-21 13:45:57][][107 ms][DEBUG] START check_frida
[2025-08-21 13:45:57][][107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:45:58][][356 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2349136  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:45:58][][356 ms][DEBUG] check_frida: running
[2025-08-21 13:45:58][][356 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:45:58][][356 ms][DEBUG] START check_scloud
[2025-08-21 13:45:58][][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:45:58][][4171 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:45:58][][653 ms][DEBUG] SU: done in 296 ms; out
[2025-08-21 13:45:58][][653 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:45:58][][653 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:58][][4327 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:45:58][][4327 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:45:58][][4327 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:45:58][][4327 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:45:58][][4327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:45:58][][778 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:45:58][][778 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:58][][4436 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:45:58][][4436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:45:58][][903 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:45:58][][4561 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:46:00][][2918 ms][DEBUG] END   check_scloud in 2561 ms
[2025-08-21 13:46:00][][2918 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:46:00][][2918 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTE0In0='" -e "main()" -q"
[2025-08-21 13:46:00][][2918 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:46:00][][2918 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMVYzTUpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTE0In0='" -e "main()" -q"
[2025-08-21 13:46:00][][6576 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:46:02][][4371 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:46:02][][4527 ms][DEBUG] proc_open done in 1609 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:46:02][][4527 ms][DEBUG] END   runCmdUntilRes#1 in 1609 ms
[2025-08-21 13:46:02][][4527 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:46:02][][4527 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:46:02][][4527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:46:02][][4668 ms][DEBUG] SU: done in 141 ms; out
[2025-08-21 13:46:02][][4669 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:46:02][][4778 ms][DEBUG] SU: done in 110 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:46:04][][6792 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:46:05][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:46:05][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:46:05][][48 ms][DEBUG] ADB: done in 47 ms; out
[2025-08-21 13:46:05][][48 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:46:05][][110 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:46:05][][110 ms][DEBUG] END   check_boot_completed in 110 ms
[2025-08-21 13:46:05][][111 ms][INFO] === Request start ===
[2025-08-21 13:46:05][][111 ms][DEBUG] START check_frida
[2025-08-21 13:46:05][][111 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:05][][391 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:05][][391 ms][DEBUG] check_frida: running
[2025-08-21 13:46:05][][391 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:46:05][][391 ms][DEBUG] START check_internet
[2025-08-21 13:46:05][][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:05][][485 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:46:05][][485 ms][WARN] check_internet: offline
[2025-08-21 13:46:05][][485 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:46:09][][0 ms][INFO] === Request start ===
[2025-08-21 13:46:09][][1 ms][DEBUG] START check_frida
[2025-08-21 13:46:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:09][][298 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:09][][298 ms][DEBUG] check_frida: running
[2025-08-21 13:46:09][][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:46:09][][298 ms][DEBUG] START check_internet
[2025-08-21 13:46:09][][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:09][][391 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:46:09][][391 ms][WARN] check_internet: offline
[2025-08-21 13:46:09][][392 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:46:09][358090100890929][0 ms][INFO] === Request start ===
[2025-08-21 13:46:09][358090100890929][1 ms][DEBUG] START check_frida
[2025-08-21 13:46:09][358090100890929][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:10][358090100890929][291 ms][DEBUG] SU: done in 290 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:10][358090100890929][291 ms][DEBUG] check_frida: running
[2025-08-21 13:46:10][358090100890929][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 13:46:10][358090100890929][291 ms][DEBUG] START check_internet
[2025-08-21 13:46:10][358090100890929][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:10][358090100890929][400 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:46:10][358090100890929][400 ms][WARN] check_internet: offline
[2025-08-21 13:46:10][358090100890929][400 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:46:11][354106248844075][0 ms][INFO] === Request start ===
[2025-08-21 13:46:11][354106248844075][1 ms][DEBUG] START check_frida
[2025-08-21 13:46:11][354106248844075][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:12][354106248844075][242 ms][DEBUG] SU: done in 240 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:12][354106248844075][242 ms][DEBUG] check_frida: running
[2025-08-21 13:46:12][354106248844075][242 ms][DEBUG] END   check_frida in 241 ms
[2025-08-21 13:46:12][354106248844075][242 ms][DEBUG] START check_internet
[2025-08-21 13:46:12][354106248844075][242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:12][354106248844075][334 ms][DEBUG] SU: done in 92 ms; out
[2025-08-21 13:46:12][354106248844075][334 ms][WARN] check_internet: offline
[2025-08-21 13:46:12][354106248844075][334 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:46:13][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:46:13][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:46:13][][37 ms][DEBUG] ADB: done in 37 ms; out
[2025-08-21 13:46:13][][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:46:13][][100 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:46:13][][100 ms][DEBUG] END   check_boot_completed in 100 ms
[2025-08-21 13:46:13][][100 ms][INFO] === Request start ===
[2025-08-21 13:46:13][][100 ms][DEBUG] START check_frida
[2025-08-21 13:46:13][][100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:14][][381 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:14][][381 ms][DEBUG] check_frida: running
[2025-08-21 13:46:14][][381 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:46:14][][381 ms][DEBUG] START check_internet
[2025-08-21 13:46:14][][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:14][][490 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:46:14][][490 ms][WARN] check_internet: offline
[2025-08-21 13:46:14][][490 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:46:14][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:46:14][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:46:14][][32 ms][DEBUG] ADB: done in 32 ms; out
[2025-08-21 13:46:14][][32 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:46:14][][79 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:46:14][][79 ms][DEBUG] END   check_boot_completed in 79 ms
[2025-08-21 13:46:14][358090100890929][79 ms][INFO] === Request start ===
[2025-08-21 13:46:14][358090100890929][79 ms][DEBUG] START check_frida
[2025-08-21 13:46:14][358090100890929][79 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:15][358090100890929][345 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:15][358090100890929][345 ms][DEBUG] check_frida: running
[2025-08-21 13:46:15][358090100890929][345 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 13:46:15][358090100890929][345 ms][DEBUG] START check_internet
[2025-08-21 13:46:15][358090100890929][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:15][358090100890929][454 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:46:15][358090100890929][454 ms][WARN] check_internet: offline
[2025-08-21 13:46:15][358090100890929][454 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:46:16][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:46:16][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:46:16][][35 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:46:16][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:46:16][][98 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:46:16][][98 ms][DEBUG] END   check_boot_completed in 98 ms
[2025-08-21 13:46:16][354106248844075][98 ms][INFO] === Request start ===
[2025-08-21 13:46:16][354106248844075][98 ms][DEBUG] START check_frida
[2025-08-21 13:46:16][354106248844075][98 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:16][354106248844075][333 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:16][354106248844075][333 ms][DEBUG] check_frida: running
[2025-08-21 13:46:16][354106248844075][333 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:46:16][354106248844075][333 ms][DEBUG] START check_internet
[2025-08-21 13:46:16][354106248844075][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:16][354106248844075][410 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:46:16][354106248844075][410 ms][WARN] check_internet: offline
[2025-08-21 13:46:16][354106248844075][410 ms][DEBUG] END   check_internet in 78 ms
[2025-08-21 13:46:19][][0 ms][INFO] === Request start ===
[2025-08-21 13:46:19][][1 ms][DEBUG] START check_frida
[2025-08-21 13:46:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:19][][293 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:19][][293 ms][DEBUG] check_frida: running
[2025-08-21 13:46:19][][293 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 13:46:19][][293 ms][DEBUG] START check_internet
[2025-08-21 13:46:19][][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:19][][387 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:46:19][][387 ms][WARN] check_internet: offline
[2025-08-21 13:46:19][][387 ms][DEBUG] END   check_internet in 95 ms
[2025-08-21 13:46:21][][0 ms][INFO] === Request start ===
[2025-08-21 13:46:21][][1 ms][DEBUG] START check_frida
[2025-08-21 13:46:21][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:21][][241 ms][DEBUG] SU: done in 240 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:21][][241 ms][DEBUG] check_frida: running
[2025-08-21 13:46:21][][242 ms][DEBUG] END   check_frida in 241 ms
[2025-08-21 13:46:21][][242 ms][DEBUG] START check_internet
[2025-08-21 13:46:21][][242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:21][][335 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:46:21][][335 ms][WARN] check_internet: offline
[2025-08-21 13:46:21][][335 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:46:24][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:46:24][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:46:24][][36 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:46:24][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:46:24][][98 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:46:24][][98 ms][DEBUG] END   check_boot_completed in 98 ms
[2025-08-21 13:46:24][][98 ms][INFO] === Request start ===
[2025-08-21 13:46:24][][99 ms][DEBUG] START check_frida
[2025-08-21 13:46:24][][99 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:24][][380 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:24][][380 ms][DEBUG] check_frida: running
[2025-08-21 13:46:24][][380 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:46:24][][380 ms][DEBUG] START check_internet
[2025-08-21 13:46:24][][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:24][][473 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:46:24][][473 ms][WARN] check_internet: offline
[2025-08-21 13:46:24][][474 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:46:26][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:46:26][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:46:26][][45 ms][DEBUG] ADB: done in 45 ms; out
[2025-08-21 13:46:26][][45 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:46:26][][123 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:46:26][][123 ms][DEBUG] END   check_boot_completed in 123 ms
[2025-08-21 13:46:26][][124 ms][INFO] === Request start ===
[2025-08-21 13:46:26][][124 ms][DEBUG] START check_frida
[2025-08-21 13:46:26][][124 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:26][][451 ms][DEBUG] SU: done in 327 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:26][][451 ms][DEBUG] check_frida: running
[2025-08-21 13:46:26][][451 ms][DEBUG] END   check_frida in 327 ms
[2025-08-21 13:46:26][][451 ms][DEBUG] START check_internet
[2025-08-21 13:46:26][][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:26][][545 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:46:26][][545 ms][WARN] check_internet: offline
[2025-08-21 13:46:26][][545 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:46:29][][0 ms][INFO] === Request start ===
[2025-08-21 13:46:29][][1 ms][DEBUG] START check_frida
[2025-08-21 13:46:29][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:29][][282 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:29][][283 ms][DEBUG] check_frida: running
[2025-08-21 13:46:29][][283 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 13:46:29][][283 ms][DEBUG] START check_internet
[2025-08-21 13:46:29][][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:29][][392 ms][DEBUG] SU: done in 110 ms; out
[2025-08-21 13:46:29][][392 ms][WARN] check_internet: offline
[2025-08-21 13:46:29][][392 ms][DEBUG] END   check_internet in 110 ms
[2025-08-21 13:46:31][][0 ms][INFO] === Request start ===
[2025-08-21 13:46:31][][1 ms][DEBUG] START check_frida
[2025-08-21 13:46:31][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:31][][251 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:31][][252 ms][DEBUG] check_frida: running
[2025-08-21 13:46:31][][252 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 13:46:31][][252 ms][DEBUG] START check_internet
[2025-08-21 13:46:31][][252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:31][][345 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:46:31][][345 ms][WARN] check_internet: offline
[2025-08-21 13:46:31][][345 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:46:34][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:46:34][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:46:34][][36 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:46:34][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:46:34][][98 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:46:34][][98 ms][DEBUG] END   check_boot_completed in 98 ms
[2025-08-21 13:46:34][][98 ms][INFO] === Request start ===
[2025-08-21 13:46:34][][98 ms][DEBUG] START check_frida
[2025-08-21 13:46:34][][98 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:34][][348 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:34][][348 ms][DEBUG] check_frida: running
[2025-08-21 13:46:34][][348 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:46:34][][348 ms][DEBUG] START check_internet
[2025-08-21 13:46:34][][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:34][][442 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:46:34][][442 ms][WARN] check_internet: offline
[2025-08-21 13:46:34][][442 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:46:35][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:46:35][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:46:35][][43 ms][DEBUG] ADB: done in 43 ms; out
[2025-08-21 13:46:35][][44 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:46:35][][106 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:46:35][][106 ms][DEBUG] END   check_boot_completed in 106 ms
[2025-08-21 13:46:35][][106 ms][INFO] === Request start ===
[2025-08-21 13:46:35][][106 ms][DEBUG] START check_frida
[2025-08-21 13:46:35][][106 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:36][][371 ms][DEBUG] SU: done in 266 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:36][][372 ms][DEBUG] check_frida: running
[2025-08-21 13:46:36][][372 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 13:46:36][][372 ms][DEBUG] START check_internet
[2025-08-21 13:46:36][][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:36][][496 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:46:36][][496 ms][WARN] check_internet: offline
[2025-08-21 13:46:36][][497 ms][DEBUG] END   check_internet in 125 ms
[2025-08-21 13:46:39][358090100890929][0 ms][INFO] === Request start ===
[2025-08-21 13:46:39][358090100890929][1 ms][DEBUG] START check_frida
[2025-08-21 13:46:39][358090100890929][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:39][358090100890929][253 ms][DEBUG] SU: done in 252 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:39][358090100890929][254 ms][DEBUG] check_frida: running
[2025-08-21 13:46:39][358090100890929][254 ms][DEBUG] END   check_frida in 253 ms
[2025-08-21 13:46:39][358090100890929][254 ms][DEBUG] START check_internet
[2025-08-21 13:46:39][358090100890929][254 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:39][358090100890929][347 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:46:39][358090100890929][347 ms][WARN] check_internet: offline
[2025-08-21 13:46:39][358090100890929][347 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:46:44][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:46:44][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:46:44][][41 ms][DEBUG] ADB: done in 40 ms; out
[2025-08-21 13:46:44][][41 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:46:44][][103 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:46:44][][103 ms][DEBUG] END   check_boot_completed in 103 ms
[2025-08-21 13:46:44][358090100890929][103 ms][INFO] === Request start ===
[2025-08-21 13:46:44][358090100890929][103 ms][DEBUG] START check_frida
[2025-08-21 13:46:44][358090100890929][103 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:44][358090100890929][400 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:44][358090100890929][400 ms][DEBUG] check_frida: running
[2025-08-21 13:46:44][358090100890929][400 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:46:44][358090100890929][400 ms][DEBUG] START check_internet
[2025-08-21 13:46:44][358090100890929][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:44][358090100890929][494 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:46:44][358090100890929][494 ms][WARN] check_internet: offline
[2025-08-21 13:46:44][358090100890929][494 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:46:49][][0 ms][INFO] === Request start ===
[2025-08-21 13:46:49][][0 ms][DEBUG] START check_frida
[2025-08-21 13:46:49][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:49][][247 ms][DEBUG] SU: done in 246 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:49][][247 ms][DEBUG] check_frida: running
[2025-08-21 13:46:49][][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 13:46:49][][247 ms][DEBUG] START check_internet
[2025-08-21 13:46:49][][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:49][][342 ms][DEBUG] SU: done in 95 ms; out
[2025-08-21 13:46:49][][342 ms][WARN] check_internet: offline
[2025-08-21 13:46:49][][342 ms][DEBUG] END   check_internet in 95 ms
[2025-08-21 13:46:53][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:46:53][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:46:53][][47 ms][DEBUG] ADB: done in 46 ms; out
[2025-08-21 13:46:53][][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:46:54][][109 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:46:54][][109 ms][DEBUG] END   check_boot_completed in 109 ms
[2025-08-21 13:46:54][][110 ms][INFO] === Request start ===
[2025-08-21 13:46:54][][110 ms][DEBUG] START check_frida
[2025-08-21 13:46:54][][110 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:54][][344 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:54][][344 ms][DEBUG] check_frida: running
[2025-08-21 13:46:54][][344 ms][DEBUG] END   check_frida in 235 ms
[2025-08-21 13:46:54][][344 ms][DEBUG] START check_internet
[2025-08-21 13:46:54][][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:54][][438 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:46:54][][438 ms][WARN] check_internet: offline
[2025-08-21 13:46:54][][438 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:46:58][][0 ms][INFO] === Request start ===
[2025-08-21 13:46:58][][1 ms][DEBUG] START check_frida
[2025-08-21 13:46:58][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:46:59][][284 ms][DEBUG] SU: done in 283 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:46:59][][284 ms][DEBUG] check_frida: running
[2025-08-21 13:46:59][][284 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 13:46:59][][284 ms][DEBUG] START check_internet
[2025-08-21 13:46:59][][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:46:59][][377 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:46:59][][377 ms][WARN] check_internet: offline
[2025-08-21 13:46:59][][377 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:47:03][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:47:03][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:47:03][][45 ms][DEBUG] ADB: done in 45 ms; out
[2025-08-21 13:47:03][][45 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:47:03][][107 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:47:03][][107 ms][DEBUG] END   check_boot_completed in 107 ms
[2025-08-21 13:47:03][][107 ms][INFO] === Request start ===
[2025-08-21 13:47:03][][108 ms][DEBUG] START check_frida
[2025-08-21 13:47:03][][108 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:47:03][][404 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:47:03][][404 ms][DEBUG] check_frida: running
[2025-08-21 13:47:03][][404 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 13:47:03][][404 ms][DEBUG] START check_scloud
[2025-08-21 13:47:03][][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:47:04][][623 ms][DEBUG] SU: done in 219 ms; out
[2025-08-21 13:47:04][][623 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:47:04][][623 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:04][][748 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:47:04][][748 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:04][][873 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:06][][2888 ms][DEBUG] END   check_scloud in 2484 ms
[2025-08-21 13:47:06][][2888 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:47:06][][2888 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1HOTczVSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzOE1BMEJBSjZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJWWlciLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzA3NiJ9'" -e "main()" -q"
[2025-08-21 13:47:06][][2889 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:47:06][][2889 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1HOTczVSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzOE1BMEJBSjZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJWWlciLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzA3NiJ9'" -e "main()" -q"
[2025-08-21 13:47:07][][4310 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:47:08][][4466 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:47:08][][4466 ms][DEBUG] END   runCmdUntilRes#1 in 1577 ms
[2025-08-21 13:47:08][][4466 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:47:08][][4466 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:47:08][][4466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:08][][4622 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:47:08][][4622 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:08][][4731 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:10][][6746 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:47:11][351642486956638][0 ms][INFO] === Request start ===
[2025-08-21 13:47:11][351642486956638][1 ms][DEBUG] START check_frida
[2025-08-21 13:47:11][351642486956638][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:47:11][351642486956638][289 ms][DEBUG] SU: done in 288 ms; outroot          4632     1 2349136  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:47:11][351642486956638][289 ms][DEBUG] check_frida: running
[2025-08-21 13:47:11][351642486956638][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 13:47:11][351642486956638][289 ms][DEBUG] START check_scloud
[2025-08-21 13:47:11][351642486956638][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:47:11][351642486956638][585 ms][DEBUG] SU: done in 297 ms; out
[2025-08-21 13:47:11][351642486956638][585 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:47:11][351642486956638][586 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:11][351642486956638][710 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:47:11][351642486956638][710 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:11][351642486956638][835 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:13][351642486956638][2850 ms][DEBUG] END   check_scloud in 2561 ms
[2025-08-21 13:47:13][351642486956638][2851 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:47:13][351642486956638][2851 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDg2OTU2NjM4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk0OCJ9'" -e "main()" -q"
[2025-08-21 13:47:13][351642486956638][2851 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:47:13][351642486956638][2851 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDg2OTU2NjM4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk0OCJ9'" -e "main()" -q"
[2025-08-21 13:47:15][351642486956638][4272 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:47:15][351642486956638][4428 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:47:15][351642486956638][4428 ms][DEBUG] END   runCmdUntilRes#1 in 1577 ms
[2025-08-21 13:47:15][351642486956638][4428 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:47:15][351642486956638][4428 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:47:15][351642486956638][4428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:15][351642486956638][4584 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:47:15][351642486956638][4585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:15][351642486956638][4709 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:17][351642486956638][6724 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:47:22][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:47:22][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:47:22][][42 ms][DEBUG] ADB: done in 41 ms; out
[2025-08-21 13:47:22][][42 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:47:22][][104 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:47:22][][104 ms][DEBUG] END   check_boot_completed in 104 ms
[2025-08-21 13:47:22][351642486956638][104 ms][INFO] === Request start ===
[2025-08-21 13:47:22][351642486956638][105 ms][DEBUG] START check_frida
[2025-08-21 13:47:22][351642486956638][105 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:47:22][351642486956638][386 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136  47984 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:47:22][351642486956638][386 ms][DEBUG] check_frida: running
[2025-08-21 13:47:22][351642486956638][386 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:47:22][351642486956638][386 ms][DEBUG] START check_scloud
[2025-08-21 13:47:22][351642486956638][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:47:22][351642486956638][667 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:47:22][351642486956638][668 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:47:22][351642486956638][668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:23][351642486956638][792 ms][DEBUG] SU: done in 124 ms; out
[2025-08-21 13:47:23][351642486956638][792 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:23][351642486956638][901 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:25][351642486956638][2916 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:47:25][351642486956638][2916 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:47:25][351642486956638][2916 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDg2OTU2NjM4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk0OCJ9'" -e "main()" -q"
[2025-08-21 13:47:25][351642486956638][2917 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:47:25][351642486956638][2917 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDg2OTU2NjM4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk0OCJ9'" -e "main()" -q"
[2025-08-21 13:47:26][351642486956638][4338 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:47:26][351642486956638][4494 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:47:26][351642486956638][4494 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:47:26][351642486956638][4494 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:47:26][351642486956638][4494 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:47:26][351642486956638][4494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:26][351642486956638][4650 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:47:26][351642486956638][4650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:27][351642486956638][4760 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:29][351642486956638][6775 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:47:33][][1 ms][INFO] === Request start ===
[2025-08-21 13:47:33][][2 ms][DEBUG] START check_frida
[2025-08-21 13:47:33][][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:47:33][352549936360734][1 ms][INFO] === Request start ===
[2025-08-21 13:47:33][][302 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2349136  47992 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:47:33][][302 ms][DEBUG] check_frida: running
[2025-08-21 13:47:33][][302 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 13:47:33][][302 ms][DEBUG] START check_scloud
[2025-08-21 13:47:33][][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:47:34][][598 ms][DEBUG] SU: done in 297 ms; out
[2025-08-21 13:47:34][][599 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:47:34][][599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:34][][723 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:47:34][][724 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:34][][848 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:36][][2863 ms][DEBUG] END   check_scloud in 2562 ms
[2025-08-21 13:47:36][][2864 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:47:36][][2864 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMyMCJ9'" -e "main()" -q"
[2025-08-21 13:47:36][][2864 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:47:36][][2864 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMyMCJ9'" -e "main()" -q"
[2025-08-21 13:47:37][][4285 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:47:37][][4441 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:47:37][][4441 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:47:37][][4441 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:47:37][][4441 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:47:37][][4441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:38][][4597 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:47:38][][4597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:38][][4707 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:40][][6722 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:47:40][352549936360734][7094 ms][DEBUG] START check_frida
[2025-08-21 13:47:40][352549936360734][7094 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:47:41][352549936360734][7344 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136  48004 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:47:41][352549936360734][7344 ms][DEBUG] check_frida: running
[2025-08-21 13:47:41][352549936360734][7344 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:47:41][352549936360734][7344 ms][DEBUG] START check_scloud
[2025-08-21 13:47:41][352549936360734][7345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:47:41][352549936360734][7625 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:47:41][352549936360734][7626 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:47:41][352549936360734][7626 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:41][352549936360734][7735 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:47:41][352549936360734][7735 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:41][352549936360734][7860 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:43][352549936360734][9875 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:47:43][352549936360734][9875 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:47:43][352549936360734][9875 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM2MzYwNzM0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDlWN1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMwNCJ9'" -e "main()" -q"
[2025-08-21 13:47:43][352549936360734][9875 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:47:43][352549936360734][9875 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM2MzYwNzM0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDlWN1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMwNCJ9'" -e "main()" -q"
[2025-08-21 13:47:44][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 13:47:44][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:47:44][][32 ms][DEBUG] ADB: done in 31 ms; out
[2025-08-21 13:47:44][][32 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:47:44][][95 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:47:44][][95 ms][DEBUG] END   check_boot_completed in 95 ms
[2025-08-21 13:47:44][][95 ms][INFO] === Request start ===
[2025-08-21 13:47:44][][96 ms][DEBUG] START check_frida
[2025-08-21 13:47:44][][96 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:47:44][][376 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2349136  48004 poll_schedule_timeout 0 S frida-server\n
oudmdm.smdms'\r\n
[2025-08-21 13:47:44][][376 ms][DEBUG] check_frida: running
[2025-08-21 13:47:44][][376 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:47:44][][376 ms][DEBUG] START check_scloud
[2025-08-21 13:47:44][][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:47:45][352549936360734][11437 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:47:45][352549936360734][11437 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:47:45][352549936360734][11437 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:47:45][352549936360734][11437 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:47:45][352549936360734][11437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:45][][657 ms][DEBUG] SU: done in 281 ms; out
e in 125 ms; out
[2025-08-21 13:47:45][352549936360734][11562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:45][][657 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:47:45][][657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:45][352549936360734][11687 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:45][][782 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:45][][938 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:47][352549936360734][13702 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:47:47][][2953 ms][DEBUG] END   check_scloud in 2577 ms
[2025-08-21 13:47:47][][2953 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:47:47][][2954 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMyMCJ9'" -e "main()" -q"
[2025-08-21 13:47:47][][2954 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:47:47][][2954 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMyMCJ9'" -e "main()" -q"
[2025-08-21 13:47:48][][4375 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:47:49][][4531 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:47:49][][4531 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:47:49][][4531 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:47:49][][4531 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:47:49][][4531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:49][][4687 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:47:49][][4687 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:49][][4797 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:51][][6812 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:47:51][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:47:51][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:47:51][][42 ms][DEBUG] ADB: done in 42 ms; out
[2025-08-21 13:47:51][][42 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:47:51][][105 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:47:51][][105 ms][DEBUG] END   check_boot_completed in 105 ms
[2025-08-21 13:47:51][352549936360734][105 ms][INFO] === Request start ===
[2025-08-21 13:47:51][352549936360734][106 ms][DEBUG] START check_frida
[2025-08-21 13:47:51][352549936360734][106 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:47:52][352549936360734][402 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:47:52][352549936360734][402 ms][DEBUG] check_frida: running
[2025-08-21 13:47:52][352549936360734][402 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:47:52][352549936360734][402 ms][DEBUG] START check_scloud
[2025-08-21 13:47:52][352549936360734][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:47:52][352549936360734][620 ms][DEBUG] SU: done in 219 ms; out
[2025-08-21 13:47:52][352549936360734][620 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:47:52][352549936360734][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:52][352549936360734][730 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:47:52][352549936360734][730 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:52][352549936360734][855 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:54][352549936360734][2870 ms][DEBUG] END   check_scloud in 2468 ms
[2025-08-21 13:47:54][352549936360734][2870 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:47:54][352549936360734][2870 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM2MzYwNzM0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDlWN1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMwNCJ9'" -e "main()" -q"
[2025-08-21 13:47:54][352549936360734][2870 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:47:54][352549936360734][2870 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM2MzYwNzM0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDlWN1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMwNCJ9'" -e "main()" -q"
[2025-08-21 13:47:55][][1 ms][INFO] === Request start ===
[2025-08-21 13:47:55][][1 ms][DEBUG] START check_frida
[2025-08-21 13:47:55][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:47:56][][279 ms][DEBUG] SU: done in 277 ms; outroot          4632     1 2349136  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:47:56][][279 ms][DEBUG] check_frida: running
[2025-08-21 13:47:56][][279 ms][DEBUG] END   check_frida in 278 ms
[2025-08-21 13:47:56][][279 ms][DEBUG] START check_scloud
[2025-08-21 13:47:56][][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:47:56][352549936360734][4275 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:47:56][352549936360734][4432 ms][DEBUG] proc_open done in 1561 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:47:56][352549936360734][4432 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:47:56][352549936360734][4432 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:47:56][352549936360734][4432 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:47:56][352549936360734][4432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:56][][560 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:47:56][][560 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:47:56][][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:47:56][352549936360734][4557 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:47:56][352549936360734][4557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:56][][669 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:47:56][][669 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:47:56][352549936360734][4682 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:56][][794 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:47:58][352549936360734][6697 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:47:58][][2809 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:47:58][][2810 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:47:58][][2810 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA4NiJ9'" -e "main()" -q"
[2025-08-21 13:47:58][][2810 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:47:58][][2810 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA4NiJ9'" -e "main()" -q"
[2025-08-21 13:48:00][][4247 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:48:00][][4403 ms][DEBUG] proc_open done in 1593 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:48:00][][4403 ms][DEBUG] END   runCmdUntilRes#1 in 1593 ms
[2025-08-21 13:48:00][][4403 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:48:00][][4403 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:48:00][][4403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:48:00][][4559 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:48:00][][4559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:48:00][][4684 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:48:02][][6699 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:48:02][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:02][][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:02][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:03][][247 ms][DEBUG] SU: done in 246 ms; outroot          4632     1 2349136  47992 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:03][][247 ms][DEBUG] check_frida: running
[2025-08-21 13:48:03][][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 13:48:03][][247 ms][DEBUG] START check_internet
[2025-08-21 13:48:03][][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:03][][340 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:48:03][][340 ms][WARN] check_internet: offline
[2025-08-21 13:48:03][][340 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:48:06][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:06][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:06][][48 ms][DEBUG] ADB: done in 47 ms; out
[2025-08-21 13:48:06][][48 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:07][][110 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:48:07][][111 ms][DEBUG] END   check_boot_completed in 111 ms
[2025-08-21 13:48:07][][111 ms][INFO] === Request start ===
[2025-08-21 13:48:07][][111 ms][DEBUG] START check_frida
[2025-08-21 13:48:07][][111 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:07][][391 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2349136  47992 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:07][][391 ms][DEBUG] check_frida: running
[2025-08-21 13:48:07][][391 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:48:07][][391 ms][DEBUG] START check_internet
[2025-08-21 13:48:07][][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:07][][501 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:48:07][][501 ms][WARN] check_internet: offline
[2025-08-21 13:48:07][][501 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:48:07][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:07][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:07][][29 ms][DEBUG] ADB: done in 29 ms; out
[2025-08-21 13:48:07][][29 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:07][][76 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:48:07][][76 ms][DEBUG] END   check_boot_completed in 76 ms
[2025-08-21 13:48:07][][76 ms][INFO] === Request start ===
[2025-08-21 13:48:07][][77 ms][DEBUG] START check_frida
[2025-08-21 13:48:07][][77 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:08][][341 ms][DEBUG] SU: done in 264 ms; outroot          4632     1 2349136  47992 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:08][][341 ms][DEBUG] check_frida: running
[2025-08-21 13:48:08][][341 ms][DEBUG] END   check_frida in 264 ms
[2025-08-21 13:48:08][][341 ms][DEBUG] START check_internet
[2025-08-21 13:48:08][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:08][][450 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:48:08][][451 ms][WARN] check_internet: offline
[2025-08-21 13:48:08][][451 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:48:12][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:12][][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:12][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:12][][259 ms][DEBUG] SU: done in 258 ms; outroot          4632     1 2349136  47992 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:12][][260 ms][DEBUG] check_frida: running
[2025-08-21 13:48:12][][260 ms][DEBUG] END   check_frida in 259 ms
[2025-08-21 13:48:12][][260 ms][DEBUG] START check_internet
[2025-08-21 13:48:12][][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:12][][353 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:48:12][][353 ms][WARN] check_internet: offline
[2025-08-21 13:48:12][][353 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:48:13][351642486956638][0 ms][INFO] === Request start ===
[2025-08-21 13:48:13][351642486956638][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:13][351642486956638][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:13][351642486956638][280 ms][DEBUG] SU: done in 279 ms; outroot          4632     1 2349136  47992 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:13][351642486956638][280 ms][DEBUG] check_frida: running
[2025-08-21 13:48:13][351642486956638][280 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 13:48:13][351642486956638][280 ms][DEBUG] START check_internet
[2025-08-21 13:48:13][351642486956638][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:13][351642486956638][389 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:48:13][351642486956638][389 ms][WARN] check_internet: offline
[2025-08-21 13:48:13][351642486956638][389 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:48:15][350731012814436][0 ms][INFO] === Request start ===
[2025-08-21 13:48:15][350731012814436][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:15][350731012814436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:15][350731012814436][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:15][350731012814436][292 ms][DEBUG] check_frida: running
[2025-08-21 13:48:15][350731012814436][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 13:48:15][350731012814436][292 ms][DEBUG] START check_internet
[2025-08-21 13:48:15][350731012814436][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:15][350731012814436][386 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:48:15][350731012814436][386 ms][WARN] check_internet: offline
[2025-08-21 13:48:15][350731012814436][386 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:48:17][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:17][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:17][][36 ms][DEBUG] ADB: done in 36 ms; out
[2025-08-21 13:48:17][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:17][][99 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:48:17][][99 ms][DEBUG] END   check_boot_completed in 99 ms
[2025-08-21 13:48:17][][99 ms][INFO] === Request start ===
[2025-08-21 13:48:17][][100 ms][DEBUG] START check_frida
[2025-08-21 13:48:17][][100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:17][][364 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:17][][364 ms][DEBUG] check_frida: running
[2025-08-21 13:48:17][][364 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 13:48:17][][364 ms][DEBUG] START check_internet
[2025-08-21 13:48:17][][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:17][][458 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:48:17][][458 ms][WARN] check_internet: offline
[2025-08-21 13:48:17][][458 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:48:18][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:18][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:18][][39 ms][DEBUG] ADB: done in 38 ms; out
[2025-08-21 13:48:18][][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:18][][101 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:48:18][][102 ms][DEBUG] END   check_boot_completed in 102 ms
[2025-08-21 13:48:18][351642486956638][102 ms][INFO] === Request start ===
[2025-08-21 13:48:18][351642486956638][102 ms][DEBUG] START check_frida
[2025-08-21 13:48:18][351642486956638][102 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:18][351642486956638][383 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:18][351642486956638][383 ms][DEBUG] check_frida: running
[2025-08-21 13:48:18][351642486956638][383 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:48:18][351642486956638][383 ms][DEBUG] START check_internet
[2025-08-21 13:48:18][351642486956638][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:18][351642486956638][476 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:48:18][351642486956638][476 ms][WARN] check_internet: offline
[2025-08-21 13:48:18][351642486956638][476 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:48:20][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:20][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:20][][44 ms][DEBUG] ADB: done in 44 ms; out
[2025-08-21 13:48:20][][45 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:20][][107 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:48:20][][107 ms][DEBUG] END   check_boot_completed in 107 ms
[2025-08-21 13:48:20][350731012814436][107 ms][INFO] === Request start ===
[2025-08-21 13:48:20][350731012814436][107 ms][DEBUG] START check_frida
[2025-08-21 13:48:20][350731012814436][107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:20][350731012814436][342 ms][DEBUG] SU: done in 235 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:20][350731012814436][342 ms][DEBUG] check_frida: running
[2025-08-21 13:48:20][350731012814436][342 ms][DEBUG] END   check_frida in 236 ms
[2025-08-21 13:48:20][350731012814436][342 ms][DEBUG] START check_internet
[2025-08-21 13:48:20][350731012814436][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:20][350731012814436][435 ms][DEBUG] SU: done in 92 ms; out
[2025-08-21 13:48:20][350731012814436][435 ms][WARN] check_internet: offline
[2025-08-21 13:48:20][350731012814436][435 ms][DEBUG] END   check_internet in 92 ms
[2025-08-21 13:48:23][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:23][][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:23][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:23][][283 ms][DEBUG] SU: done in 282 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:23][][284 ms][DEBUG] check_frida: running
[2025-08-21 13:48:23][][284 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 13:48:23][][284 ms][DEBUG] START check_internet
[2025-08-21 13:48:23][][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:23][][407 ms][DEBUG] SU: done in 123 ms; out
[2025-08-21 13:48:23][][407 ms][WARN] check_internet: offline
[2025-08-21 13:48:23][][407 ms][DEBUG] END   check_internet in 124 ms
[2025-08-21 13:48:23][352549936360734][0 ms][INFO] === Request start ===
[2025-08-21 13:48:23][352549936360734][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:23][352549936360734][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:24][352549936360734][280 ms][DEBUG] SU: done in 279 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:24][352549936360734][280 ms][DEBUG] check_frida: running
[2025-08-21 13:48:24][352549936360734][280 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 13:48:24][352549936360734][280 ms][DEBUG] START check_internet
[2025-08-21 13:48:24][352549936360734][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:24][352549936360734][374 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:48:24][352549936360734][374 ms][WARN] check_internet: offline
[2025-08-21 13:48:24][352549936360734][374 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:48:25][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:25][][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:25][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:25][][300 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:25][][300 ms][DEBUG] check_frida: running
[2025-08-21 13:48:25][][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 13:48:25][][300 ms][DEBUG] START check_internet
[2025-08-21 13:48:25][][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:25][][409 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:48:25][][409 ms][WARN] check_internet: offline
[2025-08-21 13:48:25][][409 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:48:28][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:28][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:28][][46 ms][DEBUG] ADB: done in 46 ms; out
[2025-08-21 13:48:28][][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:28][][111 ms][DEBUG] SU: done in 64 ms; out
[2025-08-21 13:48:28][][111 ms][DEBUG] END   check_boot_completed in 111 ms
[2025-08-21 13:48:28][][111 ms][INFO] === Request start ===
[2025-08-21 13:48:28][][111 ms][DEBUG] START check_frida
[2025-08-21 13:48:28][][112 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:28][][390 ms][DEBUG] SU: done in 279 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:28][][390 ms][DEBUG] check_frida: running
[2025-08-21 13:48:28][][390 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 13:48:28][][390 ms][DEBUG] START check_internet
[2025-08-21 13:48:28][][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:28][][485 ms][DEBUG] SU: done in 95 ms; out
[2025-08-21 13:48:28][][485 ms][WARN] check_internet: offline
[2025-08-21 13:48:28][][485 ms][DEBUG] END   check_internet in 95 ms
[2025-08-21 13:48:28][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:28][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:28][][29 ms][DEBUG] ADB: done in 29 ms; out
[2025-08-21 13:48:28][][29 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:28][][76 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:48:28][][76 ms][DEBUG] END   check_boot_completed in 76 ms
[2025-08-21 13:48:28][352549936360734][76 ms][INFO] === Request start ===
[2025-08-21 13:48:28][352549936360734][76 ms][DEBUG] START check_frida
[2025-08-21 13:48:28][352549936360734][76 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:29][352549936360734][295 ms][DEBUG] SU: done in 219 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:29][352549936360734][295 ms][DEBUG] check_frida: running
[2025-08-21 13:48:29][352549936360734][295 ms][DEBUG] END   check_frida in 219 ms
[2025-08-21 13:48:29][352549936360734][295 ms][DEBUG] START check_internet
[2025-08-21 13:48:29][352549936360734][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:29][352549936360734][388 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:48:29][352549936360734][389 ms][WARN] check_internet: offline
[2025-08-21 13:48:29][352549936360734][389 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:48:29][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:29][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:29][][37 ms][DEBUG] ADB: done in 37 ms; out
[2025-08-21 13:48:29][][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:29][][84 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:48:29][][84 ms][DEBUG] END   check_boot_completed in 84 ms
[2025-08-21 13:48:29][][84 ms][INFO] === Request start ===
[2025-08-21 13:48:29][][84 ms][DEBUG] START check_frida
[2025-08-21 13:48:29][][84 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:30][][365 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:30][][365 ms][DEBUG] check_frida: running
[2025-08-21 13:48:30][][365 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:48:30][][365 ms][DEBUG] START check_internet
[2025-08-21 13:48:30][][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:30][350700341084284][0 ms][INFO] === Request start ===
[2025-08-21 13:48:30][350700341084284][0 ms][DEBUG] START check_frida
[2025-08-21 13:48:30][350700341084284][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:30][][459 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:48:30][][459 ms][WARN] check_internet: offline
[2025-08-21 13:48:30][][459 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:48:30][350700341084284][234 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:30][350700341084284][234 ms][DEBUG] check_frida: running
[2025-08-21 13:48:30][350700341084284][234 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:48:30][350700341084284][234 ms][DEBUG] START check_internet
[2025-08-21 13:48:30][350700341084284][234 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:30][350700341084284][326 ms][DEBUG] SU: done in 92 ms; out
[2025-08-21 13:48:30][350700341084284][326 ms][WARN] check_internet: offline
[2025-08-21 13:48:30][350700341084284][326 ms][DEBUG] END   check_internet in 92 ms
[2025-08-21 13:48:32][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:32][][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:32][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:33][][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:33][][290 ms][DEBUG] check_frida: running
[2025-08-21 13:48:33][][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 13:48:33][][290 ms][DEBUG] START check_internet
[2025-08-21 13:48:33][][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:33][][399 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:48:33][][399 ms][WARN] check_internet: offline
[2025-08-21 13:48:33][][399 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:48:33][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:33][][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:33][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:33][][278 ms][DEBUG] SU: done in 277 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:33][][278 ms][DEBUG] check_frida: running
[2025-08-21 13:48:33][][278 ms][DEBUG] END   check_frida in 277 ms
[2025-08-21 13:48:33][][278 ms][DEBUG] START check_internet
[2025-08-21 13:48:33][][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:33][][387 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:48:33][][387 ms][WARN] check_internet: offline
[2025-08-21 13:48:33][][388 ms][DEBUG] END   check_internet in 110 ms
[2025-08-21 13:48:34][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:34][][0 ms][DEBUG] START check_frida
[2025-08-21 13:48:34][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:35][][245 ms][DEBUG] SU: done in 244 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:35][][245 ms][DEBUG] check_frida: running
[2025-08-21 13:48:35][][245 ms][DEBUG] END   check_frida in 244 ms
[2025-08-21 13:48:35][][245 ms][DEBUG] START check_internet
[2025-08-21 13:48:35][][245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:35][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:35][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:35][][36 ms][DEBUG] ADB: done in 36 ms; out
[2025-08-21 13:48:35][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:35][][338 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:48:35][][83 ms][DEBUG] END   check_boot_completed in 83 ms
[2025-08-21 13:48:35][][338 ms][WARN] check_internet: offline
[2025-08-21 13:48:35][][338 ms][DEBUG] END   check_internet in 93 ms
 ===
[2025-08-21 13:48:35][350700341084284][83 ms][DEBUG] START check_frida
[2025-08-21 13:48:35][350700341084284][83 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:35][350700341084284][349 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:35][350700341084284][349 ms][DEBUG] check_frida: running
[2025-08-21 13:48:35][350700341084284][349 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 13:48:35][350700341084284][349 ms][DEBUG] START check_internet
[2025-08-21 13:48:35][350700341084284][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:35][350700341084284][442 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:48:35][350700341084284][442 ms][WARN] check_internet: offline
[2025-08-21 13:48:35][350700341084284][442 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:48:37][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:37][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:37][][35 ms][DEBUG] ADB: done in 34 ms; out
[2025-08-21 13:48:37][][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:37][][98 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:48:37][][98 ms][DEBUG] END   check_boot_completed in 98 ms
[2025-08-21 13:48:37][][98 ms][INFO] === Request start ===
[2025-08-21 13:48:37][][98 ms][DEBUG] START check_frida
[2025-08-21 13:48:37][][98 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:38][][379 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:38][][379 ms][DEBUG] check_frida: running
[2025-08-21 13:48:38][][379 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:48:38][][379 ms][DEBUG] START check_internet
[2025-08-21 13:48:38][][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:38][][488 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:48:38][][488 ms][WARN] check_internet: offline
[2025-08-21 13:48:38][][488 ms][DEBUG] END   check_internet in 110 ms
[2025-08-21 13:48:38][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:38][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:38][][37 ms][DEBUG] ADB: done in 37 ms; out
[2025-08-21 13:48:38][][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:38][][84 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:48:38][][84 ms][DEBUG] END   check_boot_completed in 84 ms
[2025-08-21 13:48:38][][84 ms][INFO] === Request start ===
[2025-08-21 13:48:38][][85 ms][DEBUG] START check_frida
[2025-08-21 13:48:38][][85 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:38][][303 ms][DEBUG] SU: done in 218 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:38][][303 ms][DEBUG] check_frida: running
[2025-08-21 13:48:38][][303 ms][DEBUG] END   check_frida in 219 ms
[2025-08-21 13:48:38][][303 ms][DEBUG] START check_internet
[2025-08-21 13:48:38][][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:38][][382 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:48:38][][382 ms][WARN] check_internet: offline
[2025-08-21 13:48:38][][382 ms][DEBUG] END   check_internet in 78 ms
[2025-08-21 13:48:39][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:39][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:39][][41 ms][DEBUG] ADB: done in 40 ms; out
[2025-08-21 13:48:39][][41 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:39][][104 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:48:39][][104 ms][DEBUG] END   check_boot_completed in 104 ms
[2025-08-21 13:48:39][][104 ms][INFO] === Request start ===
[2025-08-21 13:48:39][][104 ms][DEBUG] START check_frida
[2025-08-21 13:48:39][][105 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:39][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:39][][0 ms][DEBUG] START check_frida
[2025-08-21 13:48:39][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:39][][353 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:39][][353 ms][DEBUG] check_frida: running
[2025-08-21 13:48:39][][353 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 13:48:39][][353 ms][DEBUG] START check_internet
[2025-08-21 13:48:39][][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:40][][447 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:48:40][][447 ms][WARN] check_internet: offline
[2025-08-21 13:48:40][][447 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:48:40][][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:40][][292 ms][DEBUG] check_frida: running
[2025-08-21 13:48:40][][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 13:48:40][][292 ms][DEBUG] START check_internet
[2025-08-21 13:48:40][][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:40][][385 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:48:40][][385 ms][WARN] check_internet: offline
[2025-08-21 13:48:40][][385 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:48:43][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:43][][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:43][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:43][][280 ms][DEBUG] SU: done in 279 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:43][][280 ms][DEBUG] check_frida: running
[2025-08-21 13:48:43][][280 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 13:48:43][][280 ms][DEBUG] START check_internet
[2025-08-21 13:48:43][][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:43][][389 ms][DEBUG] SU: done in 108 ms; out
[2025-08-21 13:48:43][][389 ms][WARN] check_internet: offline
[2025-08-21 13:48:43][][389 ms][DEBUG] END   check_internet in 108 ms
[2025-08-21 13:48:44][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:44][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:44][][34 ms][DEBUG] ADB: done in 33 ms; out
[2025-08-21 13:48:44][][34 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:44][][96 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:48:44][][96 ms][DEBUG] END   check_boot_completed in 96 ms
[2025-08-21 13:48:44][][97 ms][INFO] === Request start ===
[2025-08-21 13:48:44][][97 ms][DEBUG] START check_frida
[2025-08-21 13:48:44][][97 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:45][][362 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:45][][362 ms][DEBUG] check_frida: running
[2025-08-21 13:48:45][][362 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 13:48:45][][362 ms][DEBUG] START check_internet
[2025-08-21 13:48:45][][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:45][][456 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:48:45][][456 ms][WARN] check_internet: offline
[2025-08-21 13:48:45][][456 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:48:46][350731012814436][0 ms][INFO] === Request start ===
[2025-08-21 13:48:46][350731012814436][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:46][350731012814436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:46][350731012814436][262 ms][DEBUG] SU: done in 261 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:46][350731012814436][262 ms][DEBUG] check_frida: running
[2025-08-21 13:48:46][350731012814436][262 ms][DEBUG] END   check_frida in 261 ms
[2025-08-21 13:48:46][350731012814436][262 ms][DEBUG] START check_internet
[2025-08-21 13:48:46][350731012814436][262 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:46][350731012814436][356 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:48:46][350731012814436][356 ms][WARN] check_internet: offline
[2025-08-21 13:48:46][350731012814436][356 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:48:47][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:47][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:48][][36 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:48:48][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:48][][99 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:48:48][][99 ms][DEBUG] END   check_boot_completed in 99 ms
[2025-08-21 13:48:48][][99 ms][INFO] === Request start ===
[2025-08-21 13:48:48][][99 ms][DEBUG] START check_frida
[2025-08-21 13:48:48][][99 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:48][][333 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:48][][334 ms][DEBUG] check_frida: running
[2025-08-21 13:48:48][][334 ms][DEBUG] END   check_frida in 235 ms
[2025-08-21 13:48:48][][334 ms][DEBUG] START check_internet
[2025-08-21 13:48:48][][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:48][][427 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:48:48][][427 ms][WARN] check_internet: offline
[2025-08-21 13:48:48][][427 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:48:49][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:49][][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:49][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:49][][303 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:49][][303 ms][DEBUG] check_frida: running
[2025-08-21 13:48:49][][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 13:48:49][][303 ms][DEBUG] START check_internet
[2025-08-21 13:48:49][][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:50][][412 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:48:50][][412 ms][WARN] check_internet: offline
[2025-08-21 13:48:50][][412 ms][DEBUG] END   check_internet in 110 ms
[2025-08-21 13:48:50][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:50][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:50][][40 ms][DEBUG] ADB: done in 39 ms; out
[2025-08-21 13:48:50][][40 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:50][][102 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:48:50][][102 ms][DEBUG] END   check_boot_completed in 102 ms
[2025-08-21 13:48:50][350731012814436][102 ms][INFO] === Request start ===
[2025-08-21 13:48:50][350731012814436][102 ms][DEBUG] START check_frida
[2025-08-21 13:48:50][350731012814436][102 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:51][350731012814436][368 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:51][350731012814436][368 ms][DEBUG] check_frida: running
[2025-08-21 13:48:51][350731012814436][368 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 13:48:51][350731012814436][368 ms][DEBUG] START check_internet
[2025-08-21 13:48:51][350731012814436][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:51][350731012814436][462 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:48:51][350731012814436][462 ms][WARN] check_internet: offline
[2025-08-21 13:48:51][350731012814436][462 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:48:54][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:48:54][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:48:54][][47 ms][DEBUG] ADB: done in 47 ms; out
[2025-08-21 13:48:54][][48 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:48:54][][110 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:48:54][][110 ms][DEBUG] END   check_boot_completed in 110 ms
[2025-08-21 13:48:54][][110 ms][INFO] === Request start ===
[2025-08-21 13:48:54][][110 ms][DEBUG] START check_frida
[2025-08-21 13:48:54][][110 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:54][][391 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:54][][391 ms][DEBUG] check_frida: running
[2025-08-21 13:48:54][][391 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:48:54][][392 ms][DEBUG] START check_internet
[2025-08-21 13:48:54][][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:54][][485 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:48:54][][485 ms][WARN] check_internet: offline
[2025-08-21 13:48:54][][485 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:48:55][][0 ms][INFO] === Request start ===
[2025-08-21 13:48:55][][1 ms][DEBUG] START check_frida
[2025-08-21 13:48:55][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:48:55][][238 ms][DEBUG] SU: done in 237 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:48:55][][238 ms][DEBUG] check_frida: running
[2025-08-21 13:48:55][][238 ms][DEBUG] END   check_frida in 237 ms
[2025-08-21 13:48:55][][238 ms][DEBUG] START check_internet
[2025-08-21 13:48:55][][238 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:48:56][][332 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:48:56][][332 ms][WARN] check_internet: offline
[2025-08-21 13:48:56][][332 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:49:00][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:49:00][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:49:00][][43 ms][DEBUG] ADB: done in 43 ms; out
[2025-08-21 13:49:00][][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:49:00][][106 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:49:00][][106 ms][DEBUG] END   check_boot_completed in 106 ms
[2025-08-21 13:49:00][][106 ms][INFO] === Request start ===
[2025-08-21 13:49:00][][107 ms][DEBUG] START check_frida
[2025-08-21 13:49:00][][107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:49:00][][388 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:49:00][][388 ms][DEBUG] check_frida: running
[2025-08-21 13:49:00][][388 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 13:49:00][][388 ms][DEBUG] START check_scloud
[2025-08-21 13:49:00][][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:49:01][350700341084284][1 ms][INFO] === Request start ===
[2025-08-21 13:49:01][350700341084284][1 ms][DEBUG] START check_frida
[2025-08-21 13:49:01][350700341084284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:49:01][][684 ms][DEBUG] SU: done in 295 ms; out
[2025-08-21 13:49:01][][684 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:49:01][][684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:01][][809 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:49:01][][809 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:01][350700341084284][271 ms][DEBUG] SU: done in 269 ms; outroot          4632     1 2332716  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:49:01][350700341084284][271 ms][DEBUG] check_frida: running
[2025-08-21 13:49:01][350700341084284][271 ms][DEBUG] END   check_frida in 270 ms
[2025-08-21 13:49:01][350700341084284][271 ms][DEBUG] START check_scloud
[2025-08-21 13:49:01][350700341084284][271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:49:01][][934 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:01][350700341084284][521 ms][DEBUG] SU: done in 250 ms; out
[2025-08-21 13:49:01][350700341084284][521 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:49:01][350700341084284][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:01][350700341084284][662 ms][DEBUG] SU: done in 141 ms; out
[2025-08-21 13:49:01][350700341084284][662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:01][350700341084284][865 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:03][][2949 ms][DEBUG] END   check_scloud in 2560 ms
[2025-08-21 13:49:03][][2949 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:49:03][][2949 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q2MEdHR1pCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODkwIn0='" -e "main()" -q"
[2025-08-21 13:49:03][][2949 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:49:03][][2949 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q2MEdHR1pCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODkwIn0='" -e "main()" -q"
[2025-08-21 13:49:03][350700341084284][2880 ms][DEBUG] END   check_scloud in 2609 ms
[2025-08-21 13:49:03][350700341084284][2880 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:49:03][350700341084284][2880 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAwMzQxMDg0Mjg0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDA3In0='" -e "main()" -q"
[2025-08-21 13:49:03][350700341084284][2880 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:49:03][350700341084284][2880 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAwMzQxMDg0Mjg0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDA3In0='" -e "main()" -q"
[2025-08-21 13:49:04][][4370 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:49:05][][4527 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:49:05][][4527 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:49:05][][4527 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:49:05][][4527 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:49:05][][4527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:05][][4667 ms][DEBUG] SU: done in 140 ms; out
[2025-08-21 13:49:05][][4667 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:05][350700341084284][4270 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:49:05][][4823 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:05][350700341084284][4426 ms][DEBUG] proc_open done in 1546 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:49:05][350700341084284][4426 ms][DEBUG] END   runCmdUntilRes#1 in 1546 ms
[2025-08-21 13:49:05][350700341084284][4426 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:49:05][350700341084284][4427 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:49:05][350700341084284][4427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:05][350700341084284][4552 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:49:05][350700341084284][4552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:05][350700341084284][4676 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:07][][6839 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:49:07][350700341084284][6691 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:49:11][][0 ms][INFO] === Request start ===
[2025-08-21 13:49:11][][1 ms][DEBUG] START check_frida
[2025-08-21 13:49:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:49:12][][285 ms][DEBUG] SU: done in 284 ms; outroot          4632     1 2349136  48000 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:49:12][][285 ms][DEBUG] check_frida: running
[2025-08-21 13:49:12][][285 ms][DEBUG] END   check_frida in 284 ms
[2025-08-21 13:49:12][][285 ms][DEBUG] START check_scloud
[2025-08-21 13:49:12][][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:49:12][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:49:12][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:49:12][][48 ms][DEBUG] ADB: done in 48 ms; out
[2025-08-21 13:49:12][][49 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:49:12][][535 ms][DEBUG] SU: done in 250 ms; out
[2025-08-21 13:49:12][][535 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:49:12][][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:12][][142 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:49:12][][142 ms][DEBUG] END   check_boot_completed in 142 ms
[2025-08-21 13:49:12][350700341084284][142 ms][INFO] === Request start ===
[2025-08-21 13:49:12][350700341084284][142 ms][DEBUG] START check_frida
[2025-08-21 13:49:12][350700341084284][142 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:49:12][][644 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:49:12][][644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:12][][785 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:12][350700341084284][423 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136  48000 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:49:12][350700341084284][423 ms][DEBUG] check_frida: running
[2025-08-21 13:49:12][350700341084284][423 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:49:12][350700341084284][423 ms][DEBUG] START check_scloud
[2025-08-21 13:49:12][350700341084284][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:49:12][350700341084284][720 ms][DEBUG] SU: done in 297 ms; out
[2025-08-21 13:49:12][350700341084284][720 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:49:12][350700341084284][720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:13][350700341084284][845 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:49:13][350700341084284][845 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:13][350700341084284][985 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:14][][2800 ms][DEBUG] END   check_scloud in 2515 ms
[2025-08-21 13:49:14][][2800 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:49:14][][2800 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q2MEdHR1pCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NTU3In0='" -e "main()" -q"
[2025-08-21 13:49:14][][2800 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:49:14][][2800 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q2MEdHR1pCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NTU3In0='" -e "main()" -q"
[2025-08-21 13:49:15][350700341084284][3001 ms][DEBUG] END   check_scloud in 2577 ms
[2025-08-21 13:49:15][350700341084284][3001 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:49:15][350700341084284][3001 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAwMzQxMDg0Mjg0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDA3In0='" -e "main()" -q"
[2025-08-21 13:49:15][350700341084284][3001 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:49:15][350700341084284][3001 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAwMzQxMDg0Mjg0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDA3In0='" -e "main()" -q"
[2025-08-21 13:49:15][][4237 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:49:16][][4393 ms][DEBUG] proc_open done in 1593 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:49:16][][4393 ms][DEBUG] END   runCmdUntilRes#1 in 1593 ms
[2025-08-21 13:49:16][][4394 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:49:16][][4394 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:49:16][][4394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:16][][4534 ms][DEBUG] SU: done in 140 ms; out
[2025-08-21 13:49:16][][4534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:16][][4643 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:16][350700341084284][4406 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:49:16][350700341084284][4563 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:49:16][350700341084284][4563 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:49:16][350700341084284][4563 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:49:16][350700341084284][4563 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:49:16][350700341084284][4563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:16][350700341084284][4688 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:49:16][350700341084284][4688 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:16][350700341084284][4797 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:18][][6658 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:49:18][350700341084284][6812 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:49:22][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:49:22][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:49:22][][32 ms][DEBUG] ADB: done in 31 ms; out
[2025-08-21 13:49:22][][32 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:49:22][][94 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:49:22][][94 ms][DEBUG] END   check_boot_completed in 94 ms
[2025-08-21 13:49:22][][95 ms][INFO] === Request start ===
[2025-08-21 13:49:22][][95 ms][DEBUG] START check_frida
[2025-08-21 13:49:22][][95 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:49:23][][375 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2349136  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:49:23][][375 ms][DEBUG] check_frida: running
[2025-08-21 13:49:23][][375 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:49:23][][375 ms][DEBUG] START check_scloud
[2025-08-21 13:49:23][][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:49:23][][0 ms][INFO] === Request start ===
[2025-08-21 13:49:23][][1 ms][DEBUG] START check_frida
[2025-08-21 13:49:23][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:49:23][][657 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:49:23][][657 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:49:23][][657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:23][][782 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:49:23][][782 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:23][][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2349136  47988 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:49:23][][290 ms][DEBUG] check_frida: running
[2025-08-21 13:49:23][][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 13:49:23][][290 ms][DEBUG] START check_scloud
[2025-08-21 13:49:23][][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:49:23][][938 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:23][][540 ms][DEBUG] SU: done in 250 ms; out
[2025-08-21 13:49:23][][540 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:49:23][][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:24][][680 ms][DEBUG] SU: done in 140 ms; out
[2025-08-21 13:49:24][][680 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:24][][852 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:25][][2953 ms][DEBUG] END   check_scloud in 2577 ms
[2025-08-21 13:49:25][][2953 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:49:25][][2953 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q2MEdHR1pCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NTU3In0='" -e "main()" -q"
[2025-08-21 13:49:25][][2953 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:49:25][][2953 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q2MEdHR1pCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NTU3In0='" -e "main()" -q"
[2025-08-21 13:49:26][][2867 ms][DEBUG] END   check_scloud in 2577 ms
[2025-08-21 13:49:26][][2867 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:49:26][][2867 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzQ4In0='" -e "main()" -q"
[2025-08-21 13:49:26][][2867 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:49:26][][2867 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzQ4In0='" -e "main()" -q"
[2025-08-21 13:49:27][][4421 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:49:27][][4577 ms][DEBUG] proc_open done in 1624 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:49:27][][4578 ms][DEBUG] END   runCmdUntilRes#1 in 1624 ms
[2025-08-21 13:49:27][][4578 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:49:27][][4578 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:49:27][][4578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:27][][4734 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:49:27][][4734 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:27][][4289 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:49:27][][4845 ms][DEBUG] SU: done in 111 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:27][][4445 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:49:27][][4445 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:49:27][][4445 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:49:27][][4445 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:49:27][][4445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:27][][4556 ms][DEBUG] SU: done in 111 ms; out
[2025-08-21 13:49:27][][4556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:28][][4664 ms][DEBUG] SU: done in 107 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:29][][6858 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:49:30][][6679 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:49:34][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:49:34][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:49:34][][36 ms][DEBUG] ADB: done in 36 ms; out
[2025-08-21 13:49:34][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:49:34][][83 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:49:34][][84 ms][DEBUG] END   check_boot_completed in 84 ms
[2025-08-21 13:49:34][][84 ms][INFO] === Request start ===
[2025-08-21 13:49:34][][84 ms][DEBUG] START check_frida
[2025-08-21 13:49:34][][84 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:49:34][][318 ms][DEBUG] SU: done in 233 ms; outroot          4632     1 2349136  48008 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:49:34][][318 ms][DEBUG] check_frida: running
[2025-08-21 13:49:34][][318 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:49:34][][318 ms][DEBUG] START check_scloud
[2025-08-21 13:49:34][][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:49:35][][599 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:49:35][][599 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:49:35][][599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:35][][724 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:49:35][][724 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:35][][850 ms][DEBUG] SU: done in 126 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:37][][2864 ms][DEBUG] END   check_scloud in 2546 ms
[2025-08-21 13:49:37][][2864 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:49:37][][2864 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzQ4In0='" -e "main()" -q"
[2025-08-21 13:49:37][][2864 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:49:37][][2864 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzQ4In0='" -e "main()" -q"
[2025-08-21 13:49:38][][4239 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:49:38][][4395 ms][DEBUG] proc_open done in 1530 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:49:38][][4395 ms][DEBUG] END   runCmdUntilRes#1 in 1531 ms
[2025-08-21 13:49:38][][4395 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:49:38][][4395 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:49:38][][4395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:39][][4520 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:49:39][][4520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:39][][4645 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:41][][6660 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:49:45][][0 ms][INFO] === Request start ===
[2025-08-21 13:49:45][][1 ms][DEBUG] START check_frida
[2025-08-21 13:49:45][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:49:45][][229 ms][DEBUG] SU: done in 228 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:49:45][][229 ms][DEBUG] check_frida: running
[2025-08-21 13:49:45][][229 ms][DEBUG] END   check_frida in 228 ms
[2025-08-21 13:49:45][][229 ms][DEBUG] START check_scloud
[2025-08-21 13:49:45][][229 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:49:46][][495 ms][DEBUG] SU: done in 266 ms; out
[2025-08-21 13:49:46][][495 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:49:46][][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:46][][618 ms][DEBUG] SU: done in 123 ms; out
[2025-08-21 13:49:46][][618 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:46][][727 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:48][][2743 ms][DEBUG] END   check_scloud in 2513 ms
[2025-08-21 13:49:48][][2743 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:49:48][][2743 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDMzIn0='" -e "main()" -q"
[2025-08-21 13:49:48][][2743 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:49:48][][2743 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDMzIn0='" -e "main()" -q"
[2025-08-21 13:49:49][][4133 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:49:49][][4289 ms][DEBUG] proc_open done in 1546 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:49:49][][4289 ms][DEBUG] END   runCmdUntilRes#1 in 1546 ms
[2025-08-21 13:49:49][][4289 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:49:49][][4289 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:49:49][][4289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:50][][4414 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:49:50][][4414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:50][][4539 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:52][][6554 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:49:56][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:49:56][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:49:56][][46 ms][DEBUG] ADB: done in 45 ms; out
[2025-08-21 13:49:56][][46 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:49:56][][93 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:49:56][][93 ms][DEBUG] END   check_boot_completed in 93 ms
[2025-08-21 13:49:56][][93 ms][INFO] === Request start ===
[2025-08-21 13:49:56][][94 ms][DEBUG] START check_frida
[2025-08-21 13:49:56][][94 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:49:56][][327 ms][DEBUG] SU: done in 233 ms; outroot          4632     1 2349136  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:49:56][][327 ms][DEBUG] check_frida: running
[2025-08-21 13:49:56][][327 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:49:56][][327 ms][DEBUG] START check_scloud
[2025-08-21 13:49:56][][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:49:57][][561 ms][DEBUG] SU: done in 234 ms; out
[2025-08-21 13:49:57][][561 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:49:57][][561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:49:57][][671 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:49:57][][671 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:49:57][][796 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:49:59][][2811 ms][DEBUG] END   check_scloud in 2483 ms
[2025-08-21 13:49:59][][2811 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:49:59][][2811 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDMzIn0='" -e "main()" -q"
[2025-08-21 13:49:59][][2811 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:49:59][][2811 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MDRORktXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDMzIn0='" -e "main()" -q"
[2025-08-21 13:50:00][][4201 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:50:00][][4357 ms][DEBUG] proc_open done in 1546 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:50:00][][4357 ms][DEBUG] END   runCmdUntilRes#1 in 1546 ms
[2025-08-21 13:50:00][][4358 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:50:00][][4358 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:50:00][][4358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:50:01][][4482 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:50:01][][4482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:50:01][][4592 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:50:03][][6607 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:50:09][353600815784699][0 ms][INFO] === Request start ===
[2025-08-21 13:50:09][353600815784699][1 ms][DEBUG] START check_frida
[2025-08-21 13:50:09][353600815784699][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:09][353600815784699][257 ms][DEBUG] SU: done in 256 ms; outroot          4632     1 2349136  48000 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:09][353600815784699][257 ms][DEBUG] check_frida: running
[2025-08-21 13:50:09][353600815784699][257 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 13:50:09][353600815784699][257 ms][DEBUG] START check_internet
[2025-08-21 13:50:09][353600815784699][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:09][353600815784699][351 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:50:09][353600815784699][351 ms][WARN] check_internet: offline
[2025-08-21 13:50:09][353600815784699][351 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:50:13][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:50:13][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:50:13][][38 ms][DEBUG] ADB: done in 37 ms; out
[2025-08-21 13:50:13][][38 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:50:13][][85 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:50:13][][85 ms][DEBUG] END   check_boot_completed in 85 ms
[2025-08-21 13:50:13][353600815784699][85 ms][INFO] === Request start ===
[2025-08-21 13:50:13][353600815784699][85 ms][DEBUG] START check_frida
[2025-08-21 13:50:13][353600815784699][85 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:14][353600815784699][305 ms][DEBUG] SU: done in 220 ms; outroot          4632     1 2349136  48000 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:14][353600815784699][305 ms][DEBUG] check_frida: running
[2025-08-21 13:50:14][353600815784699][305 ms][DEBUG] END   check_frida in 220 ms
[2025-08-21 13:50:14][353600815784699][305 ms][DEBUG] START check_internet
[2025-08-21 13:50:14][353600815784699][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:14][353600815784699][397 ms][DEBUG] SU: done in 92 ms; out
[2025-08-21 13:50:14][353600815784699][397 ms][WARN] check_internet: offline
[2025-08-21 13:50:14][353600815784699][397 ms][DEBUG] END   check_internet in 92 ms
[2025-08-21 13:50:18][][0 ms][INFO] === Request start ===
[2025-08-21 13:50:18][][1 ms][DEBUG] START check_frida
[2025-08-21 13:50:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:18][][249 ms][DEBUG] SU: done in 248 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:18][][249 ms][DEBUG] check_frida: running
[2025-08-21 13:50:18][][249 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 13:50:18][][249 ms][DEBUG] START check_internet
[2025-08-21 13:50:18][][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:19][][327 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:50:19][][327 ms][WARN] check_internet: offline
[2025-08-21 13:50:19][][327 ms][DEBUG] END   check_internet in 78 ms
[2025-08-21 13:50:23][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:50:23][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:50:23][][47 ms][DEBUG] ADB: done in 46 ms; out
[2025-08-21 13:50:23][][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:50:23][][109 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:50:23][][109 ms][DEBUG] END   check_boot_completed in 109 ms
[2025-08-21 13:50:23][][109 ms][INFO] === Request start ===
[2025-08-21 13:50:23][][109 ms][DEBUG] START check_frida
[2025-08-21 13:50:23][][109 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:23][351642486956638][1 ms][INFO] === Request start ===
[2025-08-21 13:50:23][351642486956638][1 ms][DEBUG] START check_frida
[2025-08-21 13:50:23][351642486956638][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:23][][359 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:23][][359 ms][DEBUG] check_frida: running
[2025-08-21 13:50:23][][359 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:50:23][][359 ms][DEBUG] START check_internet
[2025-08-21 13:50:23][][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:23][][453 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:50:23][][453 ms][WARN] check_internet: offline
[2025-08-21 13:50:23][][453 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:50:23][351642486956638][281 ms][DEBUG] SU: done in 279 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:23][351642486956638][281 ms][DEBUG] check_frida: running
[2025-08-21 13:50:23][351642486956638][281 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:50:23][351642486956638][281 ms][DEBUG] START check_internet
[2025-08-21 13:50:23][351642486956638][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:24][351642486956638][375 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:50:24][351642486956638][375 ms][WARN] check_internet: offline
[2025-08-21 13:50:24][351642486956638][375 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:50:28][][0 ms][INFO] === Request start ===
[2025-08-21 13:50:28][][1 ms][DEBUG] START check_frida
[2025-08-21 13:50:28][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:28][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:50:28][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:50:28][][39 ms][DEBUG] ADB: done in 38 ms; out
[2025-08-21 13:50:28][][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:50:28][][86 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:50:28][][86 ms][DEBUG] END   check_boot_completed in 86 ms
[2025-08-21 13:50:28][351642486956638][86 ms][INFO] === Request start ===
[2025-08-21 13:50:28][351642486956638][87 ms][DEBUG] START check_frida
[2025-08-21 13:50:28][351642486956638][87 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:28][][276 ms][DEBUG] SU: done in 275 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:28][][276 ms][DEBUG] check_frida: running
[2025-08-21 13:50:28][][276 ms][DEBUG] END   check_frida in 275 ms
[2025-08-21 13:50:28][][276 ms][DEBUG] START check_internet
[2025-08-21 13:50:28][][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:28][][383 ms][DEBUG] SU: done in 108 ms; out
[2025-08-21 13:50:28][][384 ms][WARN] check_internet: offline
[2025-08-21 13:50:28][][384 ms][DEBUG] END   check_internet in 108 ms
[2025-08-21 13:50:28][351642486956638][398 ms][DEBUG] SU: done in 311 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:28][351642486956638][398 ms][DEBUG] check_frida: running
[2025-08-21 13:50:28][351642486956638][398 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 13:50:28][351642486956638][398 ms][DEBUG] START check_internet
[2025-08-21 13:50:28][351642486956638][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:28][351642486956638][492 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:50:28][351642486956638][492 ms][WARN] check_internet: offline
[2025-08-21 13:50:28][351642486956638][492 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:50:33][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:50:33][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:50:33][][47 ms][DEBUG] ADB: done in 46 ms; out
[2025-08-21 13:50:33][][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:50:33][][109 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:50:33][][109 ms][DEBUG] END   check_boot_completed in 109 ms
[2025-08-21 13:50:33][][109 ms][INFO] === Request start ===
[2025-08-21 13:50:33][][109 ms][DEBUG] START check_frida
[2025-08-21 13:50:33][][109 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:33][][0 ms][INFO] === Request start ===
[2025-08-21 13:50:33][][1 ms][DEBUG] START check_frida
[2025-08-21 13:50:33][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:33][][328 ms][DEBUG] SU: done in 218 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:33][][328 ms][DEBUG] check_frida: running
[2025-08-21 13:50:33][][328 ms][DEBUG] END   check_frida in 219 ms
[2025-08-21 13:50:33][][328 ms][DEBUG] START check_internet
[2025-08-21 13:50:33][][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:33][][422 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:50:33][][422 ms][WARN] check_internet: offline
[2025-08-21 13:50:33][][422 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:50:33][][275 ms][DEBUG] SU: done in 274 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:33][][275 ms][DEBUG] check_frida: running
[2025-08-21 13:50:33][][275 ms][DEBUG] END   check_frida in 274 ms
[2025-08-21 13:50:33][][275 ms][DEBUG] START check_internet
[2025-08-21 13:50:33][][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:33][][369 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:50:33][][369 ms][WARN] check_internet: offline
[2025-08-21 13:50:33][][369 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:50:38][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:50:38][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:50:38][][46 ms][DEBUG] ADB: done in 45 ms; out
[2025-08-21 13:50:38][][46 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:50:38][][123 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:50:38][][124 ms][DEBUG] END   check_boot_completed in 123 ms
[2025-08-21 13:50:38][][124 ms][INFO] === Request start ===
[2025-08-21 13:50:38][][124 ms][DEBUG] START check_frida
[2025-08-21 13:50:38][][124 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:38][353600815784699][0 ms][INFO] === Request start ===
[2025-08-21 13:50:38][353600815784699][1 ms][DEBUG] START check_frida
[2025-08-21 13:50:38][353600815784699][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:38][][373 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:38][][373 ms][DEBUG] check_frida: running
[2025-08-21 13:50:38][][373 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:50:38][][373 ms][DEBUG] START check_internet
[2025-08-21 13:50:38][][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:38][][467 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:50:38][][467 ms][WARN] check_internet: offline
[2025-08-21 13:50:38][][467 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:50:38][353600815784699][270 ms][DEBUG] SU: done in 269 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:38][353600815784699][270 ms][DEBUG] check_frida: running
[2025-08-21 13:50:38][353600815784699][270 ms][DEBUG] END   check_frida in 269 ms
[2025-08-21 13:50:38][353600815784699][270 ms][DEBUG] START check_internet
[2025-08-21 13:50:38][353600815784699][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:38][353600815784699][364 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:50:38][353600815784699][364 ms][WARN] check_internet: offline
[2025-08-21 13:50:38][353600815784699][364 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:50:43][][0 ms][INFO] === Request start ===
[2025-08-21 13:50:43][][1 ms][DEBUG] START check_frida
[2025-08-21 13:50:43][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:43][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:50:43][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:50:43][][37 ms][DEBUG] ADB: done in 36 ms; out
[2025-08-21 13:50:43][][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:50:43][][84 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:50:43][][84 ms][DEBUG] END   check_boot_completed in 84 ms
[2025-08-21 13:50:43][353600815784699][84 ms][INFO] === Request start ===
[2025-08-21 13:50:43][353600815784699][85 ms][DEBUG] START check_frida
[2025-08-21 13:50:43][353600815784699][85 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:43][][236 ms][DEBUG] SU: done in 235 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:43][][236 ms][DEBUG] check_frida: running
[2025-08-21 13:50:43][][236 ms][DEBUG] END   check_frida in 235 ms
[2025-08-21 13:50:43][][236 ms][DEBUG] START check_internet
[2025-08-21 13:50:43][][236 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:43][][314 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:50:43][][314 ms][WARN] check_internet: offline
[2025-08-21 13:50:43][][314 ms][DEBUG] END   check_internet in 78 ms
[2025-08-21 13:50:43][353600815784699][396 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:43][353600815784699][397 ms][DEBUG] check_frida: running
[2025-08-21 13:50:43][353600815784699][397 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 13:50:43][353600815784699][397 ms][DEBUG] START check_internet
[2025-08-21 13:50:43][353600815784699][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:43][353600815784699][506 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:50:43][353600815784699][506 ms][WARN] check_internet: offline
[2025-08-21 13:50:43][353600815784699][506 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:50:47][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 13:50:47][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:50:47][][35 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:50:47][][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:50:47][][98 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:50:47][][98 ms][DEBUG] END   check_boot_completed in 98 ms
[2025-08-21 13:50:47][][98 ms][INFO] === Request start ===
[2025-08-21 13:50:47][][98 ms][DEBUG] START check_frida
[2025-08-21 13:50:47][][98 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:48][][0 ms][INFO] === Request start ===
[2025-08-21 13:50:48][][1 ms][DEBUG] START check_frida
[2025-08-21 13:50:48][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:48][][333 ms][DEBUG] SU: done in 235 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:48][][333 ms][DEBUG] check_frida: running
[2025-08-21 13:50:48][][333 ms][DEBUG] END   check_frida in 235 ms
[2025-08-21 13:50:48][][333 ms][DEBUG] START check_internet
[2025-08-21 13:50:48][][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:48][][267 ms][DEBUG] SU: done in 266 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:48][][267 ms][DEBUG] check_frida: running
e
[2025-08-21 13:50:48][][598 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 13:50:48][][267 ms][DEBUG] END   check_frida in 267 ms
[2025-08-21 13:50:48][][268 ms][DEBUG] START check_internet
[2025-08-21 13:50:48][][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:48][][360 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:50:48][][360 ms][WARN] check_internet: offline
[2025-08-21 13:50:48][][360 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:50:52][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:50:52][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:50:53][][37 ms][DEBUG] ADB: done in 36 ms; out
[2025-08-21 13:50:53][][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:50:53][][99 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:50:53][][99 ms][DEBUG] END   check_boot_completed in 99 ms
[2025-08-21 13:50:53][][100 ms][INFO] === Request start ===
[2025-08-21 13:50:53][][100 ms][DEBUG] START check_frida
[2025-08-21 13:50:53][][100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:53][][380 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:53][][381 ms][DEBUG] check_frida: running
[2025-08-21 13:50:53][][381 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:50:53][][381 ms][DEBUG] START check_internet
[2025-08-21 13:50:53][][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:53][][490 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:50:53][][490 ms][WARN] check_internet: offline
[2025-08-21 13:50:53][][490 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:50:54][351642486956638][0 ms][INFO] === Request start ===
[2025-08-21 13:50:54][351642486956638][1 ms][DEBUG] START check_frida
[2025-08-21 13:50:54][351642486956638][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:54][351642486956638][280 ms][DEBUG] SU: done in 279 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:54][351642486956638][280 ms][DEBUG] check_frida: running
[2025-08-21 13:50:54][351642486956638][280 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 13:50:54][351642486956638][280 ms][DEBUG] START check_internet
[2025-08-21 13:50:54][351642486956638][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:54][351642486956638][389 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:50:54][351642486956638][389 ms][WARN] check_internet: offline
[2025-08-21 13:50:54][351642486956638][389 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:50:57][][0 ms][INFO] === Request start ===
[2025-08-21 13:50:57][][1 ms][DEBUG] START check_frida
[2025-08-21 13:50:57][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:58][][270 ms][DEBUG] SU: done in 269 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:58][][271 ms][DEBUG] check_frida: running
[2025-08-21 13:50:58][][271 ms][DEBUG] END   check_frida in 270 ms
[2025-08-21 13:50:58][][271 ms][DEBUG] START check_internet
[2025-08-21 13:50:58][][271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:58][][394 ms][DEBUG] SU: done in 123 ms; out
[2025-08-21 13:50:58][][394 ms][WARN] check_internet: offline
[2025-08-21 13:50:58][][394 ms][DEBUG] END   check_internet in 123 ms
[2025-08-21 13:50:59][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:50:59][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:50:59][][47 ms][DEBUG] ADB: done in 47 ms; out
[2025-08-21 13:50:59][][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:50:59][][141 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:50:59][][141 ms][DEBUG] END   check_boot_completed in 141 ms
[2025-08-21 13:50:59][351642486956638][141 ms][INFO] === Request start ===
[2025-08-21 13:50:59][351642486956638][141 ms][DEBUG] START check_frida
[2025-08-21 13:50:59][351642486956638][141 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:50:59][351642486956638][407 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:50:59][351642486956638][407 ms][DEBUG] check_frida: running
[2025-08-21 13:50:59][351642486956638][407 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 13:50:59][351642486956638][407 ms][DEBUG] START check_internet
[2025-08-21 13:50:59][351642486956638][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:50:59][351642486956638][516 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:50:59][351642486956638][516 ms][WARN] check_internet: offline
[2025-08-21 13:50:59][351642486956638][516 ms][DEBUG] END   check_internet in 110 ms
[2025-08-21 13:51:02][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:51:02][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:51:02][][42 ms][DEBUG] ADB: done in 42 ms; out
[2025-08-21 13:51:02][][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:51:02][][105 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:51:02][][105 ms][DEBUG] END   check_boot_completed in 105 ms
[2025-08-21 13:51:02][][105 ms][INFO] === Request start ===
[2025-08-21 13:51:02][][105 ms][DEBUG] START check_frida
[2025-08-21 13:51:02][][105 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:03][][339 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:03][][339 ms][DEBUG] check_frida: running
[2025-08-21 13:51:03][][339 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:51:03][][339 ms][DEBUG] START check_scloud
[2025-08-21 13:51:03][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:03][][620 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:51:03][][620 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:03][][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:03][][776 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:51:03][][776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:03][][886 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:04][][0 ms][INFO] === Request start ===
[2025-08-21 13:51:04][][1 ms][DEBUG] START check_frida
[2025-08-21 13:51:04][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:04][][247 ms][DEBUG] SU: done in 246 ms; outroot          4632     1 2332716  47996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:04][][247 ms][DEBUG] check_frida: running
[2025-08-21 13:51:04][][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 13:51:04][][247 ms][DEBUG] START check_scloud
[2025-08-21 13:51:04][][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:04][][499 ms][DEBUG] SU: done in 251 ms; out
[2025-08-21 13:51:04][][499 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:04][][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:04][][622 ms][DEBUG] SU: done in 123 ms; out
[2025-08-21 13:51:04][][623 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:05][][779 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:05][][2901 ms][DEBUG] END   check_scloud in 2562 ms
[2025-08-21 13:51:05][][2901 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:51:05][][2901 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDIwQktNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODYwMCJ9'" -e "main()" -q"
[2025-08-21 13:51:05][][2901 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:05][][2901 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDIwQktNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODYwMCJ9'" -e "main()" -q"
[2025-08-21 13:51:06][][4276 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:07][][4432 ms][DEBUG] proc_open done in 1530 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:07][][4432 ms][DEBUG] END   runCmdUntilRes#1 in 1531 ms
[2025-08-21 13:51:07][][4432 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:07][][4432 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:07][][4432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:07][][2794 ms][DEBUG] END   check_scloud in 2546 ms
[2025-08-21 13:51:07][][2794 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:51:07][][2794 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Mjc0In0='" -e "main()" -q"
[2025-08-21 13:51:07][][2794 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:07][][2794 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Mjc0In0='" -e "main()" -q"
[2025-08-21 13:51:07][][4572 ms][DEBUG] SU: done in 140 ms; out
[2025-08-21 13:51:07][][4572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:07][][4682 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:08][][4168 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:08][][4325 ms][DEBUG] proc_open done in 1531 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:08][][4325 ms][DEBUG] END   runCmdUntilRes#1 in 1531 ms
[2025-08-21 13:51:08][][4325 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:08][][4325 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:08][][4325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:08][][4450 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:51:08][][4450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:08][][4590 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:09][][6697 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:51:10][351537276055197][0 ms][INFO] === Request start ===
[2025-08-21 13:51:10][][6605 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:51:11][351537276055197][1016 ms][DEBUG] START check_frida
[2025-08-21 13:51:11][351537276055197][1016 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:11][351537276055197][1266 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:11][351537276055197][1266 ms][DEBUG] check_frida: running
[2025-08-21 13:51:11][351537276055197][1266 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:51:11][351537276055197][1266 ms][DEBUG] START check_scloud
[2025-08-21 13:51:11][351537276055197][1266 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:12][351537276055197][1547 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:51:12][351537276055197][1547 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:12][351537276055197][1547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:12][351537276055197][1672 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:51:12][351537276055197][1672 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:12][351537276055197][1781 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:14][351537276055197][3796 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:51:14][351537276055197][3796 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:51:14][351537276055197][3797 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc2MDU1MTk3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNjU3In0='" -e "main()" -q"
[2025-08-21 13:51:14][351537276055197][3797 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:14][351537276055197][3797 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc2MDU1MTk3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNjU3In0='" -e "main()" -q"
[2025-08-21 13:51:15][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:51:15][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:51:15][][36 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:51:15][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:51:15][][98 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:51:15][][99 ms][DEBUG] END   check_boot_completed in 98 ms
[2025-08-21 13:51:15][][99 ms][INFO] === Request start ===
[2025-08-21 13:51:15][][99 ms][DEBUG] START check_frida
[2025-08-21 13:51:15][][99 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:15][351537276055197][5202 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:15][][395 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2365556  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:15][][395 ms][DEBUG] check_frida: running
[2025-08-21 13:51:15][][395 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:51:15][][395 ms][DEBUG] START check_scloud
[2025-08-21 13:51:15][][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:15][351537276055197][5359 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:15][351537276055197][5359 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:51:15][351537276055197][5359 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:15][351537276055197][5359 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:15][351537276055197][5359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:16][351537276055197][5515 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:51:16][351537276055197][5515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:16][][692 ms][DEBUG] SU: done in 297 ms; out
[2025-08-21 13:51:16][][692 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:16][][692 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:16][351537276055197][5655 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:16][][817 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:51:16][][817 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:16][][958 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:18][351537276055197][7670 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:51:18][][2973 ms][DEBUG] END   check_scloud in 2577 ms
[2025-08-21 13:51:18][][2973 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:51:18][][2973 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Mjc0In0='" -e "main()" -q"
[2025-08-21 13:51:18][][2973 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:18][][2973 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Mjc0In0='" -e "main()" -q"
[2025-08-21 13:51:19][][4378 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:19][][4535 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:19][][4535 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:51:19][][4535 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:19][][4535 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:19][][4535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:20][][4676 ms][DEBUG] SU: done in 141 ms; out
[2025-08-21 13:51:20][][4676 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:20][][4784 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:22][][6800 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:51:22][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:51:22][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:51:22][][48 ms][DEBUG] ADB: done in 48 ms; out
[2025-08-21 13:51:22][][48 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:51:22][][111 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:51:22][][111 ms][DEBUG] END   check_boot_completed in 111 ms
[2025-08-21 13:51:22][351537276055197][111 ms][INFO] === Request start ===
[2025-08-21 13:51:22][351537276055197][111 ms][DEBUG] START check_frida
[2025-08-21 13:51:22][351537276055197][111 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:22][351537276055197][361 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136  48028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:22][351537276055197][361 ms][DEBUG] check_frida: running
[2025-08-21 13:51:22][351537276055197][361 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:51:22][351537276055197][361 ms][DEBUG] START check_scloud
[2025-08-21 13:51:22][351537276055197][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:23][351537276055197][642 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:51:23][351537276055197][642 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:23][351537276055197][642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:23][351537276055197][751 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:51:23][351537276055197][752 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:23][351537276055197][876 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:25][351537276055197][2891 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:51:25][351537276055197][2891 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:51:25][351537276055197][2892 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc2MDU1MTk3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNjU3In0='" -e "main()" -q"
[2025-08-21 13:51:25][351537276055197][2892 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:25][351537276055197][2892 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc2MDU1MTk3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNjU3In0='" -e "main()" -q"
[2025-08-21 13:51:26][][1 ms][INFO] === Request start ===
[2025-08-21 13:51:26][][1 ms][DEBUG] START check_frida
[2025-08-21 13:51:26][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:26][][242 ms][DEBUG] SU: done in 240 ms; outroot          4632     1 2349136  48028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:26][][242 ms][DEBUG] check_frida: running
[2025-08-21 13:51:26][][242 ms][DEBUG] END   check_frida in 240 ms
[2025-08-21 13:51:26][][242 ms][DEBUG] START check_scloud
[2025-08-21 13:51:26][][242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:26][351537276055197][4297 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:27][351537276055197][4453 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:27][351537276055197][4454 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:51:27][351537276055197][4454 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:27][351537276055197][4454 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:27][351537276055197][4454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:27][][523 ms][DEBUG] SU: done in 281 ms; out
 in 109 ms; out
[2025-08-21 13:51:27][351537276055197][4563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:27][][523 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:27][][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:27][351537276055197][4688 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:27][][648 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:51:27][][648 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:27][][774 ms][DEBUG] SU: done in 126 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:29][351537276055197][6703 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:51:29][][2788 ms][DEBUG] END   check_scloud in 2546 ms
[2025-08-21 13:51:29][][2788 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:51:29][][2788 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NzM3In0='" -e "main()" -q"
[2025-08-21 13:51:29][][2788 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:29][][2788 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NzM3In0='" -e "main()" -q"
[2025-08-21 13:51:30][][4178 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:30][][4334 ms][DEBUG] proc_open done in 1546 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:30][][4335 ms][DEBUG] END   runCmdUntilRes#1 in 1547 ms
[2025-08-21 13:51:30][][4335 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:30][][4335 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:30][][4335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:31][][4459 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:51:31][][4460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:31][][4616 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:31][353684143626897][0 ms][INFO] === Request start ===
[2025-08-21 13:51:33][][6631 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:51:33][353684143626897][2019 ms][DEBUG] START check_frida
[2025-08-21 13:51:33][353684143626897][2019 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:33][][0 ms][INFO] === Request start ===
[2025-08-21 13:51:33][353684143626897][2300 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:33][353684143626897][2300 ms][DEBUG] check_frida: running
[2025-08-21 13:51:33][353684143626897][2300 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:51:33][353684143626897][2300 ms][DEBUG] START check_scloud
[2025-08-21 13:51:33][353684143626897][2300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:34][353684143626897][2535 ms][DEBUG] SU: done in 234 ms; out
[2025-08-21 13:51:34][353684143626897][2535 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:34][353684143626897][2535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:34][353684143626897][2659 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:51:34][353684143626897][2660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:34][353684143626897][2800 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:36][353684143626897][4815 ms][DEBUG] END   check_scloud in 2515 ms
[2025-08-21 13:51:36][353684143626897][4815 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:51:36][353684143626897][4815 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQzNjI2ODk3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFdFNzRBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU2NSJ9'" -e "main()" -q"
[2025-08-21 13:51:36][353684143626897][4815 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:36][353684143626897][4815 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQzNjI2ODk3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFdFNzRBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU2NSJ9'" -e "main()" -q"
[2025-08-21 13:51:37][353684143626897][6190 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:37][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 13:51:37][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:51:37][][37 ms][DEBUG] ADB: done in 36 ms; out
[2025-08-21 13:51:37][][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:51:37][][83 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:51:37][][83 ms][DEBUG] END   check_boot_completed in 83 ms
[2025-08-21 13:51:37][][83 ms][INFO] === Request start ===
[2025-08-21 13:51:37][][84 ms][DEBUG] START check_frida
[2025-08-21 13:51:37][][84 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:37][353684143626897][6346 ms][DEBUG] proc_open done in 1531 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:37][353684143626897][6346 ms][DEBUG] END   runCmdUntilRes#1 in 1531 ms
[2025-08-21 13:51:37][353684143626897][6346 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:37][353684143626897][6346 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:37][353684143626897][6346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:38][353684143626897][6502 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:51:38][353684143626897][6502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:38][][333 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2365556  48008 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:38][][333 ms][DEBUG] check_frida: running
[2025-08-21 13:51:38][][333 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:51:38][][333 ms][DEBUG] START check_scloud
[2025-08-21 13:51:38][][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:38][353684143626897][6611 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:38][][616 ms][DEBUG] SU: done in 283 ms; out
[2025-08-21 13:51:38][][616 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:38][][616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:38][][739 ms][DEBUG] SU: done in 123 ms; out
[2025-08-21 13:51:38][][739 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:38][][865 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:40][353684143626897][8627 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:51:40][][2879 ms][DEBUG] END   check_scloud in 2546 ms
[2025-08-21 13:51:40][][2880 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:51:40][][2880 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NzM3In0='" -e "main()" -q"
[2025-08-21 13:51:40][][2880 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:40][][2880 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEc1RUdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NzM3In0='" -e "main()" -q"
[2025-08-21 13:51:40][][7096 ms][DEBUG] START check_frida
[2025-08-21 13:51:40][][7096 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:41][][7377 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:41][][7377 ms][DEBUG] check_frida: running
[2025-08-21 13:51:41][][7377 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 13:51:41][][7377 ms][DEBUG] START check_scloud
[2025-08-21 13:51:41][][7377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:41][][7627 ms][DEBUG] SU: done in 250 ms; out
[2025-08-21 13:51:41][][7627 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:41][][7627 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:41][][7736 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:51:41][][7736 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:41][][7847 ms][DEBUG] SU: done in 111 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:41][][4285 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:42][][4442 ms][DEBUG] proc_open done in 1561 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:42][][4442 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:51:42][][4442 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:42][][4442 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:42][][4442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:42][][4551 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:51:42][][4551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:42][][4660 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:43][][9861 ms][DEBUG] END   check_scloud in 2483 ms
[2025-08-21 13:51:43][][9861 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:51:43][][9861 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDEzIn0='" -e "main()" -q"
[2025-08-21 13:51:43][][9861 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:43][][9861 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDEzIn0='" -e "main()" -q"
[2025-08-21 13:51:44][][6676 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:51:44][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:51:44][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:51:44][][35 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:51:44][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:51:44][][83 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:51:44][][83 ms][DEBUG] END   check_boot_completed in 82 ms
[2025-08-21 13:51:44][353684143626897][83 ms][INFO] === Request start ===
[2025-08-21 13:51:44][353684143626897][83 ms][DEBUG] START check_frida
[2025-08-21 13:51:44][353684143626897][83 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:44][353684143626897][317 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2349136  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:44][353684143626897][317 ms][DEBUG] check_frida: running
[2025-08-21 13:51:44][353684143626897][317 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:51:44][353684143626897][317 ms][DEBUG] START check_scloud
[2025-08-21 13:51:44][353684143626897][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:45][][11267 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:45][][11423 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:45][][11423 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:51:45][][11423 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:45][][11423 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:45][][11423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:45][353684143626897][584 ms][DEBUG] SU: done in 266 ms; out
[2025-08-21 13:51:45][353684143626897][584 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:45][353684143626897][584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:45][353684143626897][707 ms][DEBUG] SU: done in 124 ms; out
[2025-08-21 13:51:45][353684143626897][707 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:45][][11688 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:45][353684143626897][848 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:47][][13704 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
s
[2025-08-21 13:51:47][353684143626897][2863 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:51:47][353684143626897][2863 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQzNjI2ODk3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFdFNzRBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU2NSJ9'" -e "main()" -q"
[2025-08-21 13:51:47][353684143626897][2863 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:47][353684143626897][2863 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQzNjI2ODk3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFdFNzRBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU2NSJ9'" -e "main()" -q"
[2025-08-21 13:51:48][353684143626897][4285 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:49][353684143626897][4441 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:49][353684143626897][4441 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:51:49][353684143626897][4441 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:49][353684143626897][4441 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:49][353684143626897][4441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:49][353684143626897][4597 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:51:49][353684143626897][4597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:49][353684143626897][4722 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:51][353684143626897][6737 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:51:51][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:51:51][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:51:51][][49 ms][DEBUG] ADB: done in 48 ms; out
[2025-08-21 13:51:51][][49 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:51:52][][142 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:51:52][][142 ms][DEBUG] END   check_boot_completed in 142 ms
[2025-08-21 13:51:52][][142 ms][INFO] === Request start ===
[2025-08-21 13:51:52][][143 ms][DEBUG] START check_frida
[2025-08-21 13:51:52][][143 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:52][][408 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2349136  48000 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:52][][408 ms][DEBUG] check_frida: running
[2025-08-21 13:51:52][][408 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 13:51:52][][408 ms][DEBUG] START check_scloud
[2025-08-21 13:51:52][][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:52][][705 ms][DEBUG] SU: done in 297 ms; out
[2025-08-21 13:51:52][][705 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:52][][705 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:52][][845 ms][DEBUG] SU: done in 140 ms; out
[2025-08-21 13:51:52][][845 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:52][][955 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:54][][2970 ms][DEBUG] END   check_scloud in 2561 ms
[2025-08-21 13:51:54][][2970 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:51:54][][2970 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDEzIn0='" -e "main()" -q"
[2025-08-21 13:51:54][][2970 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:54][][2970 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDEzIn0='" -e "main()" -q"
[2025-08-21 13:51:55][][0 ms][INFO] === Request start ===
[2025-08-21 13:51:55][][1 ms][DEBUG] START check_frida
[2025-08-21 13:51:55][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:51:56][][258 ms][DEBUG] SU: done in 257 ms; outroot          4632     1 2349136  48000 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:51:56][][258 ms][DEBUG] check_frida: running
[2025-08-21 13:51:56][][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 13:51:56][][258 ms][DEBUG] START check_scloud
[2025-08-21 13:51:56][][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:51:56][][4376 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:51:56][][539 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:51:56][][539 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:51:56][][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:56][][648 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:51:56][][648 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:56][][4532 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:51:56][][4532 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:51:56][][4532 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:51:56][][4532 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:51:56][][4532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:51:56][][773 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:51:56][][4766 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:51:58][][2788 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:51:58][][2788 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:51:58][][2788 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFdFNzRBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY5NSJ9'" -e "main()" -q"
[2025-08-21 13:51:58][][2788 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:51:58][][2788 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFdFNzRBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY5NSJ9'" -e "main()" -q"
[2025-08-21 13:51:58][][6781 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:51:59][][4225 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:52:00][][4381 ms][DEBUG] proc_open done in 1593 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:52:00][][4382 ms][DEBUG] END   runCmdUntilRes#1 in 1593 ms
[2025-08-21 13:52:00][][4382 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:52:00][][4382 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:52:00][][4382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:52:00][][4524 ms][DEBUG] SU: done in 142 ms; out
[2025-08-21 13:52:00][][4524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:52:00][][4647 ms][DEBUG] SU: done in 124 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:52:02][][6662 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:52:03][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:03][][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:03][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:03][][301 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2349136  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:03][][301 ms][DEBUG] check_frida: running
[2025-08-21 13:52:03][][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 13:52:03][][301 ms][DEBUG] START check_internet
[2025-08-21 13:52:03][][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:03][][395 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:52:03][][395 ms][WARN] check_internet: offline
[2025-08-21 13:52:03][][395 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:06][357450471592556][0 ms][INFO] === Request start ===
[2025-08-21 13:52:06][357450471592556][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:06][357450471592556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:06][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:06][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:06][][46 ms][DEBUG] ADB: done in 46 ms; out
[2025-08-21 13:52:06][][46 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:06][][109 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:52:06][][109 ms][DEBUG] END   check_boot_completed in 109 ms
[2025-08-21 13:52:06][][109 ms][INFO] === Request start ===
[2025-08-21 13:52:06][][109 ms][DEBUG] START check_frida
[2025-08-21 13:52:06][][109 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:07][357450471592556][287 ms][DEBUG] SU: done in 286 ms; outroot          4632     1 2349136  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:07][357450471592556][287 ms][DEBUG] check_frida: running
[2025-08-21 13:52:07][357450471592556][287 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 13:52:07][357450471592556][287 ms][DEBUG] START check_internet
[2025-08-21 13:52:07][357450471592556][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:07][357450471592556][381 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:52:07][357450471592556][381 ms][WARN] check_internet: offline
[2025-08-21 13:52:07][357450471592556][381 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:07][][390 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2349136  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:07][][390 ms][DEBUG] check_frida: running
[2025-08-21 13:52:07][][390 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 13:52:07][][390 ms][DEBUG] START check_internet
[2025-08-21 13:52:07][][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:07][][483 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:52:07][][483 ms][WARN] check_internet: offline
[2025-08-21 13:52:07][][483 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:52:07][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:07][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:07][][76 ms][DEBUG] ADB: done in 76 ms; out
[2025-08-21 13:52:07][][76 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:08][][154 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:52:08][][154 ms][DEBUG] END   check_boot_completed in 154 ms
[2025-08-21 13:52:08][][155 ms][INFO] === Request start ===
[2025-08-21 13:52:08][][155 ms][DEBUG] START check_frida
[2025-08-21 13:52:08][][155 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:08][][404 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2349136  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:08][][404 ms][DEBUG] check_frida: running
[2025-08-21 13:52:08][][404 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 13:52:08][][404 ms][DEBUG] START check_internet
[2025-08-21 13:52:08][][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:08][][498 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:52:08][][498 ms][WARN] check_internet: offline
[2025-08-21 13:52:08][][498 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:11][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:11][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:11][][46 ms][DEBUG] ADB: done in 46 ms; out
[2025-08-21 13:52:11][][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:11][][125 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:52:11][][125 ms][DEBUG] END   check_boot_completed in 125 ms
[2025-08-21 13:52:11][357450471592556][125 ms][INFO] === Request start ===
[2025-08-21 13:52:11][357450471592556][125 ms][DEBUG] START check_frida
[2025-08-21 13:52:11][357450471592556][125 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:11][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:11][][0 ms][DEBUG] START check_frida
[2025-08-21 13:52:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:12][][248 ms][DEBUG] SU: done in 247 ms; outroot          4632     1 2349136  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:12][][248 ms][DEBUG] check_frida: running
[2025-08-21 13:52:12][][248 ms][DEBUG] END   check_frida in 247 ms
[2025-08-21 13:52:12][][248 ms][DEBUG] START check_internet
[2025-08-21 13:52:12][][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:12][357450471592556][421 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:12][357450471592556][421 ms][DEBUG] check_frida: running
[2025-08-21 13:52:12][357450471592556][421 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:52:12][357450471592556][421 ms][DEBUG] START check_internet
[2025-08-21 13:52:12][357450471592556][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:12][][357 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:12][][357 ms][WARN] check_internet: offline
[2025-08-21 13:52:12][][357 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:12][357450471592556][530 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:12][357450471592556][531 ms][WARN] check_internet: offline
[2025-08-21 13:52:12][357450471592556][531 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:13][351537276055197][0 ms][INFO] === Request start ===
[2025-08-21 13:52:13][351537276055197][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:13][351537276055197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:13][351537276055197][274 ms][DEBUG] SU: done in 273 ms; outroot          4632     1 2349136  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:13][351537276055197][275 ms][DEBUG] check_frida: running
[2025-08-21 13:52:13][351537276055197][275 ms][DEBUG] END   check_frida in 273 ms
[2025-08-21 13:52:13][351537276055197][275 ms][DEBUG] START check_internet
[2025-08-21 13:52:13][351537276055197][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:13][351537276055197][384 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:13][351537276055197][384 ms][WARN] check_internet: offline
[2025-08-21 13:52:13][351537276055197][384 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:16][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:16][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:16][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:16][][0 ms][DEBUG] START check_frida
[2025-08-21 13:52:16][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:16][][46 ms][DEBUG] ADB: done in 46 ms; out
[2025-08-21 13:52:16][][46 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:16][][93 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:52:16][][93 ms][DEBUG] END   check_boot_completed in 93 ms
[2025-08-21 13:52:16][][93 ms][INFO] === Request start ===
[2025-08-21 13:52:16][][93 ms][DEBUG] START check_frida
[2025-08-21 13:52:16][][93 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:16][][277 ms][DEBUG] SU: done in 277 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:16][][277 ms][DEBUG] check_frida: running
[2025-08-21 13:52:16][][312 ms][DEBUG] SU: done in 219 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:16][][277 ms][DEBUG] START check_internet
[2025-08-21 13:52:16][][312 ms][DEBUG] check_frida: running
[2025-08-21 13:52:16][][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:16][][313 ms][DEBUG] START check_internet
[2025-08-21 13:52:16][][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:16][][386 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:16][][421 ms][WARN] check_internet: offline
[2025-08-21 13:52:16][][421 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:16][][386 ms][WARN] check_internet: offline
[2025-08-21 13:52:16][][386 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:18][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:18][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:18][][41 ms][DEBUG] ADB: done in 41 ms; out
[2025-08-21 13:52:18][][41 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:18][][104 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:52:18][][104 ms][DEBUG] END   check_boot_completed in 104 ms
[2025-08-21 13:52:18][351537276055197][104 ms][INFO] === Request start ===
[2025-08-21 13:52:18][351537276055197][104 ms][DEBUG] START check_frida
[2025-08-21 13:52:18][351537276055197][104 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:18][351537276055197][385 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:18][351537276055197][385 ms][DEBUG] check_frida: running
[2025-08-21 13:52:18][351537276055197][385 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:52:18][351537276055197][385 ms][DEBUG] START check_internet
[2025-08-21 13:52:18][351537276055197][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:18][351537276055197][478 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:52:18][351537276055197][479 ms][WARN] check_internet: offline
[2025-08-21 13:52:18][351537276055197][479 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:20][350973422170468][0 ms][INFO] === Request start ===
[2025-08-21 13:52:20][350973422170468][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:20][350973422170468][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:20][350973422170468][287 ms][DEBUG] SU: done in 286 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:20][350973422170468][287 ms][DEBUG] check_frida: running
[2025-08-21 13:52:20][350973422170468][287 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 13:52:20][350973422170468][287 ms][DEBUG] START check_internet
[2025-08-21 13:52:20][350973422170468][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:20][350973422170468][396 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:20][350973422170468][396 ms][WARN] check_internet: offline
[2025-08-21 13:52:20][350973422170468][396 ms][DEBUG] END   check_internet in 110 ms
[2025-08-21 13:52:21][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:21][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:21][][41 ms][DEBUG] ADB: done in 41 ms; out
[2025-08-21 13:52:21][][42 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:21][][104 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:52:21][][104 ms][DEBUG] END   check_boot_completed in 104 ms
[2025-08-21 13:52:21][][104 ms][INFO] === Request start ===
[2025-08-21 13:52:21][][105 ms][DEBUG] START check_frida
[2025-08-21 13:52:21][][105 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:21][][416 ms][DEBUG] SU: done in 311 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:21][][416 ms][DEBUG] check_frida: running
[2025-08-21 13:52:21][][416 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 13:52:21][][416 ms][DEBUG] START check_internet
[2025-08-21 13:52:21][][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:21][][526 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:21][][526 ms][WARN] check_internet: offline
[2025-08-21 13:52:21][][526 ms][DEBUG] END   check_internet in 110 ms
[2025-08-21 13:52:22][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:22][][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:22][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:22][353684143626897][0 ms][INFO] === Request start ===
[2025-08-21 13:52:23][][236 ms][DEBUG] SU: done in 235 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:23][][236 ms][DEBUG] check_frida: running
[2025-08-21 13:52:23][][236 ms][DEBUG] END   check_frida in 235 ms
[2025-08-21 13:52:23][][236 ms][DEBUG] START check_internet
[2025-08-21 13:52:23][][236 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:23][][330 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:52:23][][330 ms][WARN] check_internet: offline
[2025-08-21 13:52:23][][330 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:52:23][353684143626897][1012 ms][DEBUG] START check_frida
[2025-08-21 13:52:23][353684143626897][1012 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:24][353684143626897][1294 ms][DEBUG] SU: done in 283 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:24][353684143626897][1295 ms][DEBUG] check_frida: running
[2025-08-21 13:52:24][353684143626897][1295 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 13:52:24][353684143626897][1295 ms][DEBUG] START check_internet
[2025-08-21 13:52:24][353684143626897][1295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:24][353684143626897][1387 ms][DEBUG] SU: done in 92 ms; out
[2025-08-21 13:52:24][353684143626897][1387 ms][WARN] check_internet: offline
[2025-08-21 13:52:24][353684143626897][1387 ms][DEBUG] END   check_internet in 92 ms
[2025-08-21 13:52:24][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:24][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:24][][30 ms][DEBUG] ADB: done in 30 ms; out
[2025-08-21 13:52:24][][30 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:24][][93 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:52:24][][93 ms][DEBUG] END   check_boot_completed in 93 ms
[2025-08-21 13:52:24][350973422170468][93 ms][INFO] === Request start ===
[2025-08-21 13:52:24][350973422170468][93 ms][DEBUG] START check_frida
[2025-08-21 13:52:24][350973422170468][93 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:25][350973422170468][327 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:25][350973422170468][327 ms][DEBUG] check_frida: running
[2025-08-21 13:52:25][350973422170468][327 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:52:25][350973422170468][327 ms][DEBUG] START check_internet
[2025-08-21 13:52:25][350973422170468][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:25][350973422170468][421 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:52:25][350973422170468][421 ms][WARN] check_internet: offline
[2025-08-21 13:52:25][350973422170468][421 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:26][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:26][][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:26][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:26][][233 ms][DEBUG] SU: done in 232 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:26][][233 ms][DEBUG] check_frida: running
[2025-08-21 13:52:26][][233 ms][DEBUG] END   check_frida in 232 ms
[2025-08-21 13:52:26][][233 ms][DEBUG] START check_internet
[2025-08-21 13:52:26][][233 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:26][][327 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:52:26][][327 ms][WARN] check_internet: offline
[2025-08-21 13:52:26][][327 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:27][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:27][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:27][][43 ms][DEBUG] ADB: done in 42 ms; out
[2025-08-21 13:52:27][][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:27][][106 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:52:27][][106 ms][DEBUG] END   check_boot_completed in 106 ms
[2025-08-21 13:52:27][][106 ms][INFO] === Request start ===
[2025-08-21 13:52:27][][107 ms][DEBUG] START check_frida
[2025-08-21 13:52:27][][107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:28][][371 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:28][][371 ms][DEBUG] check_frida: running
[2025-08-21 13:52:28][][371 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 13:52:28][][371 ms][DEBUG] START check_internet
[2025-08-21 13:52:28][][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:28][][481 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:28][][481 ms][WARN] check_internet: offline
[2025-08-21 13:52:28][][481 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:28][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:28][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:28][][36 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:52:28][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:28][][98 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:52:28][][98 ms][DEBUG] END   check_boot_completed in 98 ms
[2025-08-21 13:52:28][353684143626897][98 ms][INFO] === Request start ===
[2025-08-21 13:52:28][353684143626897][98 ms][DEBUG] START check_frida
[2025-08-21 13:52:28][353684143626897][98 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:29][353684143626897][332 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:29][353684143626897][332 ms][DEBUG] check_frida: running
[2025-08-21 13:52:29][353684143626897][332 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:52:29][353684143626897][332 ms][DEBUG] START check_internet
[2025-08-21 13:52:29][353684143626897][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:29][353684143626897][426 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:52:29][353684143626897][426 ms][WARN] check_internet: offline
[2025-08-21 13:52:29][353684143626897][426 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:29][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:29][][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:29][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:29][][275 ms][DEBUG] SU: done in 274 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:29][][275 ms][DEBUG] check_frida: running
[2025-08-21 13:52:29][][275 ms][DEBUG] END   check_frida in 275 ms
[2025-08-21 13:52:29][][276 ms][DEBUG] START check_internet
[2025-08-21 13:52:29][][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:30][][384 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:30][][384 ms][WARN] check_internet: offline
[2025-08-21 13:52:30][][384 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:31][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:31][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:31][][43 ms][DEBUG] ADB: done in 42 ms; out
[2025-08-21 13:52:31][][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:31][][105 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:52:31][][105 ms][DEBUG] END   check_boot_completed in 105 ms
[2025-08-21 13:52:31][][105 ms][INFO] === Request start ===
[2025-08-21 13:52:31][][106 ms][DEBUG] START check_frida
[2025-08-21 13:52:31][][106 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:31][][339 ms][DEBUG] SU: done in 233 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:31][][340 ms][DEBUG] check_frida: running
[2025-08-21 13:52:31][][340 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:52:31][][340 ms][DEBUG] START check_internet
[2025-08-21 13:52:31][][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:31][][433 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:52:31][][433 ms][WARN] check_internet: offline
[2025-08-21 13:52:31][][433 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:32][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:32][][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:32][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:32][][257 ms][DEBUG] SU: done in 256 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:32][][257 ms][DEBUG] check_frida: running
[2025-08-21 13:52:32][][257 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 13:52:32][][257 ms][DEBUG] START check_internet
[2025-08-21 13:52:32][][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:32][][366 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:32][][366 ms][WARN] check_internet: offline
[2025-08-21 13:52:32][][366 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:33][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:33][][0 ms][DEBUG] START check_frida
[2025-08-21 13:52:33][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:33][][245 ms][DEBUG] SU: done in 245 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:33][][245 ms][DEBUG] check_frida: running
[2025-08-21 13:52:33][][245 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 13:52:33][][245 ms][DEBUG] START check_internet
[2025-08-21 13:52:33][][245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:33][][323 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:52:33][][323 ms][WARN] check_internet: offline
[2025-08-21 13:52:33][][323 ms][DEBUG] END   check_internet in 78 ms
[2025-08-21 13:52:34][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:34][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:34][][36 ms][DEBUG] ADB: done in 36 ms; out
[2025-08-21 13:52:34][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:34][][83 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:52:34][][83 ms][DEBUG] END   check_boot_completed in 83 ms
[2025-08-21 13:52:34][][83 ms][INFO] === Request start ===
[2025-08-21 13:52:34][][84 ms][DEBUG] START check_frida
[2025-08-21 13:52:34][][84 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:34][][349 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:34][][349 ms][DEBUG] check_frida: running
[2025-08-21 13:52:34][][349 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 13:52:34][][349 ms][DEBUG] START check_internet
[2025-08-21 13:52:34][][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:34][][458 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:34][][458 ms][WARN] check_internet: offline
[2025-08-21 13:52:34][][458 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:37][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:37][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:37][][48 ms][DEBUG] ADB: done in 48 ms; out
[2025-08-21 13:52:37][][48 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:37][][144 ms][DEBUG] SU: done in 96 ms; out
[2025-08-21 13:52:37][][144 ms][DEBUG] END   check_boot_completed in 144 ms
[2025-08-21 13:52:37][][144 ms][INFO] === Request start ===
[2025-08-21 13:52:37][][145 ms][DEBUG] START check_frida
[2025-08-21 13:52:37][][145 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:37][357450471592556][0 ms][INFO] === Request start ===
[2025-08-21 13:52:37][357450471592556][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:37][357450471592556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:37][][423 ms][DEBUG] SU: done in 278 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:37][][423 ms][DEBUG] check_frida: running
[2025-08-21 13:52:37][][423 ms][DEBUG] END   check_frida in 278 ms
[2025-08-21 13:52:37][][423 ms][DEBUG] START check_internet
[2025-08-21 13:52:37][][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:37][357450471592556][282 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:37][357450471592556][282 ms][DEBUG] check_frida: running
[2025-08-21 13:52:37][357450471592556][282 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:52:37][357450471592556][282 ms][DEBUG] START check_internet
[2025-08-21 13:52:37][357450471592556][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:37][][517 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:52:37][][517 ms][WARN] check_internet: offline
[2025-08-21 13:52:37][][517 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:37][357450471592556][360 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:52:37][357450471592556][360 ms][WARN] check_internet: offline
[2025-08-21 13:52:37][357450471592556][360 ms][DEBUG] END   check_internet in 78 ms
[2025-08-21 13:52:38][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:38][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:38][][43 ms][DEBUG] ADB: done in 42 ms; out
[2025-08-21 13:52:38][][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:38][][89 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:52:38][][89 ms][DEBUG] END   check_boot_completed in 89 ms
[2025-08-21 13:52:38][][89 ms][INFO] === Request start ===
[2025-08-21 13:52:38][][90 ms][DEBUG] START check_frida
[2025-08-21 13:52:38][][90 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:38][][355 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:38][][355 ms][DEBUG] check_frida: running
[2025-08-21 13:52:38][][355 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 13:52:38][][355 ms][DEBUG] START check_internet
[2025-08-21 13:52:38][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:38][][464 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:38][][464 ms][WARN] check_internet: offline
[2025-08-21 13:52:38][][464 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:39][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:39][][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:39][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:39][][238 ms][DEBUG] SU: done in 237 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:39][][238 ms][DEBUG] check_frida: running
[2025-08-21 13:52:39][][239 ms][DEBUG] END   check_frida in 238 ms
[2025-08-21 13:52:39][][239 ms][DEBUG] START check_internet
[2025-08-21 13:52:39][][239 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:39][][347 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:39][][347 ms][WARN] check_internet: offline
[2025-08-21 13:52:39][][348 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:42][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:42][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:42][][39 ms][DEBUG] ADB: done in 39 ms; out
[2025-08-21 13:52:42][][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:42][][102 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:52:42][][102 ms][DEBUG] END   check_boot_completed in 102 ms
[2025-08-21 13:52:42][357450471592556][102 ms][INFO] === Request start ===
[2025-08-21 13:52:42][357450471592556][102 ms][DEBUG] START check_frida
[2025-08-21 13:52:42][357450471592556][103 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:42][357450471592556][383 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:42][357450471592556][383 ms][DEBUG] check_frida: running
[2025-08-21 13:52:42][357450471592556][383 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 13:52:42][357450471592556][383 ms][DEBUG] START check_internet
[2025-08-21 13:52:42][357450471592556][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:42][357450471592556][492 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:42][357450471592556][492 ms][WARN] check_internet: offline
[2025-08-21 13:52:42][357450471592556][492 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:43][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:43][][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:43][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:43][][271 ms][DEBUG] SU: done in 270 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:43][][271 ms][DEBUG] check_frida: running
[2025-08-21 13:52:43][][271 ms][DEBUG] END   check_frida in 270 ms
[2025-08-21 13:52:43][][271 ms][DEBUG] START check_internet
[2025-08-21 13:52:43][][271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:43][][381 ms][DEBUG] SU: done in 110 ms; out
[2025-08-21 13:52:43][][381 ms][WARN] check_internet: offline
[2025-08-21 13:52:43][][381 ms][DEBUG] END   check_internet in 110 ms
[2025-08-21 13:52:44][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:44][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:44][][42 ms][DEBUG] ADB: done in 41 ms; out
[2025-08-21 13:52:44][][42 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:44][][89 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:52:44][][89 ms][DEBUG] END   check_boot_completed in 89 ms
[2025-08-21 13:52:44][][89 ms][INFO] === Request start ===
[2025-08-21 13:52:44][][89 ms][DEBUG] START check_frida
[2025-08-21 13:52:44][][89 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:44][][370 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:44][][370 ms][DEBUG] check_frida: running
[2025-08-21 13:52:44][][370 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 13:52:44][][370 ms][DEBUG] START check_internet
[2025-08-21 13:52:44][][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:44][][464 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:52:44][][464 ms][WARN] check_internet: offline
[2025-08-21 13:52:44][][464 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:47][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:47][][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:47][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:47][][271 ms][DEBUG] SU: done in 270 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:47][][272 ms][DEBUG] check_frida: running
[2025-08-21 13:52:47][][272 ms][DEBUG] END   check_frida in 271 ms
[2025-08-21 13:52:47][][272 ms][DEBUG] START check_internet
[2025-08-21 13:52:47][][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:47][][380 ms][DEBUG] SU: done in 108 ms; out
[2025-08-21 13:52:47][][380 ms][WARN] check_internet: offline
[2025-08-21 13:52:47][][380 ms][DEBUG] END   check_internet in 108 ms
[2025-08-21 13:52:48][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:48][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:48][][31 ms][DEBUG] ADB: done in 30 ms; out
[2025-08-21 13:52:48][][31 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:48][][78 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:52:48][][78 ms][DEBUG] END   check_boot_completed in 78 ms
[2025-08-21 13:52:48][][78 ms][INFO] === Request start ===
[2025-08-21 13:52:48][][78 ms][DEBUG] START check_frida
[2025-08-21 13:52:48][][78 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:48][][296 ms][DEBUG] SU: done in 219 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:48][][296 ms][DEBUG] check_frida: running
[2025-08-21 13:52:48][][296 ms][DEBUG] END   check_frida in 219 ms
[2025-08-21 13:52:48][][297 ms][DEBUG] START check_internet
[2025-08-21 13:52:48][][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:48][][374 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:52:48][][374 ms][WARN] check_internet: offline
[2025-08-21 13:52:48][][374 ms][DEBUG] END   check_internet in 78 ms
[2025-08-21 13:52:50][350973422170468][0 ms][INFO] === Request start ===
[2025-08-21 13:52:50][350973422170468][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:50][350973422170468][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:50][350973422170468][286 ms][DEBUG] SU: done in 285 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:50][350973422170468][286 ms][DEBUG] check_frida: running
[2025-08-21 13:52:50][350973422170468][286 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 13:52:50][350973422170468][287 ms][DEBUG] START check_internet
[2025-08-21 13:52:50][350973422170468][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:51][350973422170468][380 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:52:51][350973422170468][381 ms][WARN] check_internet: offline
[2025-08-21 13:52:51][350973422170468][381 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:52:52][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:52][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:52][][38 ms][DEBUG] ADB: done in 37 ms; out
[2025-08-21 13:52:52][][38 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:52][][100 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 13:52:52][][100 ms][DEBUG] END   check_boot_completed in 100 ms
[2025-08-21 13:52:52][][100 ms][INFO] === Request start ===
[2025-08-21 13:52:52][][100 ms][DEBUG] START check_frida
[2025-08-21 13:52:52][][100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:52][][366 ms][DEBUG] SU: done in 266 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:52][][366 ms][DEBUG] check_frida: running
[2025-08-21 13:52:52][][366 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 13:52:52][][366 ms][DEBUG] START check_internet
[2025-08-21 13:52:52][][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:52][][475 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:52][][475 ms][WARN] check_internet: offline
[2025-08-21 13:52:52][][475 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:55][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:52:55][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:52:55][][36 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:52:55][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:52:55][][99 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:52:55][][99 ms][DEBUG] END   check_boot_completed in 99 ms
[2025-08-21 13:52:55][350973422170468][99 ms][INFO] === Request start ===
[2025-08-21 13:52:55][350973422170468][99 ms][DEBUG] START check_frida
[2025-08-21 13:52:55][350973422170468][100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:55][350973422170468][411 ms][DEBUG] SU: done in 311 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:55][350973422170468][411 ms][DEBUG] check_frida: running
[2025-08-21 13:52:55][350973422170468][411 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 13:52:55][350973422170468][411 ms][DEBUG] START check_internet
[2025-08-21 13:52:55][350973422170468][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:56][350973422170468][520 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:56][350973422170468][520 ms][WARN] check_internet: offline
[2025-08-21 13:52:56][350973422170468][520 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:52:56][][0 ms][INFO] === Request start ===
[2025-08-21 13:52:56][][1 ms][DEBUG] START check_frida
[2025-08-21 13:52:56][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:52:57][][291 ms][DEBUG] SU: done in 290 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:52:57][][291 ms][DEBUG] check_frida: running
[2025-08-21 13:52:57][][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 13:52:57][][291 ms][DEBUG] START check_internet
[2025-08-21 13:52:57][][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:52:57][][400 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:52:57][][400 ms][WARN] check_internet: offline
[2025-08-21 13:52:57][][400 ms][DEBUG] END   check_internet in 109 ms
[2025-08-21 13:53:00][][0 ms][INFO] === Request start ===
[2025-08-21 13:53:00][][1 ms][DEBUG] START check_frida
[2025-08-21 13:53:00][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:53:00][][295 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:53:00][][295 ms][DEBUG] check_frida: running
[2025-08-21 13:53:00][][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 13:53:00][][295 ms][DEBUG] START check_scloud
[2025-08-21 13:53:00][][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:53:01][][592 ms][DEBUG] SU: done in 296 ms; out
[2025-08-21 13:53:01][][592 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:53:01][][592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:01][][702 ms][DEBUG] SU: done in 111 ms; out
[2025-08-21 13:53:01][][702 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:01][][810 ms][DEBUG] SU: done in 108 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:01][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:53:01][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:53:01][][31 ms][DEBUG] ADB: done in 31 ms; out
[2025-08-21 13:53:01][][31 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:53:01][][78 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:53:01][][78 ms][DEBUG] END   check_boot_completed in 78 ms
[2025-08-21 13:53:01][][78 ms][INFO] === Request start ===
[2025-08-21 13:53:01][][78 ms][DEBUG] START check_frida
[2025-08-21 13:53:01][][78 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:53:02][][328 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2332716  48020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:53:02][][328 ms][DEBUG] check_frida: running
[2025-08-21 13:53:02][][328 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 13:53:02][][328 ms][DEBUG] START check_scloud
[2025-08-21 13:53:02][][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:53:02][][609 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:53:02][][609 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:53:02][][609 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:02][][718 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:53:02][][718 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:02][][843 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:03][][2825 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:53:03][][2825 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:53:03][][2826 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c0MUFaRjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjU2In0='" -e "main()" -q"
[2025-08-21 13:53:03][][2826 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:53:03][][2826 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c0MUFaRjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjU2In0='" -e "main()" -q"
[2025-08-21 13:53:04][][2858 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:53:04][][2858 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:53:04][][2858 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg0MEY5WVdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzcxIn0='" -e "main()" -q"
[2025-08-21 13:53:04][][2858 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:53:04][][2858 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg0MEY5WVdFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzcxIn0='" -e "main()" -q"
[2025-08-21 13:53:04][][4247 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:53:04][][4403 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:53:04][][4403 ms][DEBUG] END   runCmdUntilRes#1 in 1577 ms
[2025-08-21 13:53:04][][4403 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:53:04][][4403 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:53:04][][4403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:05][][4544 ms][DEBUG] SU: done in 141 ms; out
[2025-08-21 13:53:05][][4544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:05][][4653 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:06][][4264 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:53:06][][4420 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:53:06][][4420 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:53:06][][4420 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:53:06][][4420 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:53:06][][4420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:06][][4545 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:53:06][][4545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:06][][4655 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:07][][6668 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:53:08][][6670 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:53:11][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:53:11][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:53:11][][45 ms][DEBUG] ADB: done in 44 ms; out
[2025-08-21 13:53:11][][45 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:53:11][][107 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:53:11][][108 ms][DEBUG] END   check_boot_completed in 107 ms
[2025-08-21 13:53:11][][108 ms][INFO] === Request start ===
[2025-08-21 13:53:11][][108 ms][DEBUG] START check_frida
[2025-08-21 13:53:11][][108 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:53:12][][404 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  48032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:53:12][][404 ms][DEBUG] check_frida: running
[2025-08-21 13:53:12][][404 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:53:12][][404 ms][DEBUG] START check_scloud
[2025-08-21 13:53:12][][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:53:12][][701 ms][DEBUG] SU: done in 296 ms; out
[2025-08-21 13:53:12][][701 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:53:12][][701 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:12][][810 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:53:12][][810 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:12][][920 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:14][][2935 ms][DEBUG] END   check_scloud in 2530 ms
[2025-08-21 13:53:14][][2935 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:53:14][][2935 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c0MUFaRjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjU2In0='" -e "main()" -q"
[2025-08-21 13:53:14][][2935 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:53:14][][2935 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c0MUFaRjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjU2In0='" -e "main()" -q"
[2025-08-21 13:53:15][][4356 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:53:16][][4512 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:53:16][][4513 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:53:16][][4513 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:53:16][][4513 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:53:16][][4513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:16][][4669 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:53:16][][4669 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:16][][4794 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:18][][6809 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:53:21][357301902469650][0 ms][INFO] === Request start ===
[2025-08-21 13:53:21][357301902469650][1 ms][DEBUG] START check_frida
[2025-08-21 13:53:21][357301902469650][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:53:21][357301902469650][249 ms][DEBUG] SU: done in 248 ms; outroot          4632     1 2349136  48008 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:53:21][357301902469650][249 ms][DEBUG] check_frida: running
[2025-08-21 13:53:21][357301902469650][249 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 13:53:21][357301902469650][249 ms][DEBUG] START check_scloud
[2025-08-21 13:53:21][357301902469650][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:53:21][357301902469650][546 ms][DEBUG] SU: done in 296 ms; out
[2025-08-21 13:53:21][357301902469650][546 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:53:21][357301902469650][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:22][357301902469650][655 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:53:22][357301902469650][655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:22][357301902469650][780 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:22][][0 ms][INFO] === Request start ===
[2025-08-21 13:53:24][357301902469650][2795 ms][DEBUG] END   check_scloud in 2546 ms
[2025-08-21 13:53:24][357301902469650][2795 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:53:24][357301902469650][2795 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzAxOTAyNDY5NjUwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ3MyJ9'" -e "main()" -q"
[2025-08-21 13:53:24][357301902469650][2795 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:53:24][357301902469650][2796 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzAxOTAyNDY5NjUwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ3MyJ9'" -e "main()" -q"
[2025-08-21 13:53:25][357301902469650][4232 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:53:25][357301902469650][4388 ms][DEBUG] proc_open done in 1593 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:53:25][357301902469650][4389 ms][DEBUG] END   runCmdUntilRes#1 in 1593 ms
[2025-08-21 13:53:25][357301902469650][4389 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:53:25][357301902469650][4389 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:53:25][357301902469650][4389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:25][357301902469650][4545 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:53:25][357301902469650][4545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:26][357301902469650][4670 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:28][357301902469650][6685 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:53:28][][6092 ms][DEBUG] START check_frida
[2025-08-21 13:53:28][][6092 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:53:29][][6326 ms][DEBUG] SU: done in 234 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:53:29][][6326 ms][DEBUG] check_frida: running
[2025-08-21 13:53:29][][6326 ms][DEBUG] END   check_frida in 234 ms
[2025-08-21 13:53:29][][6326 ms][DEBUG] START check_scloud
[2025-08-21 13:53:29][][6326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:53:29][][6607 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:53:29][][6607 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:53:29][][6607 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:29][][6732 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:53:29][][6732 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:29][][6841 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:31][][8857 ms][DEBUG] END   check_scloud in 2531 ms
[2025-08-21 13:53:31][][8857 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:53:31][][8857 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c0MUFaRjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjI5In0='" -e "main()" -q"
[2025-08-21 13:53:31][][8857 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:53:31][][8857 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c0MUFaRjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjI5In0='" -e "main()" -q"
[2025-08-21 13:53:32][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 13:53:32][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:53:32][][31 ms][DEBUG] ADB: done in 30 ms; out
[2025-08-21 13:53:32][][31 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:53:32][][93 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:53:32][][94 ms][DEBUG] END   check_boot_completed in 94 ms
[2025-08-21 13:53:32][357301902469650][94 ms][INFO] === Request start ===
[2025-08-21 13:53:32][357301902469650][94 ms][DEBUG] START check_frida
[2025-08-21 13:53:32][357301902469650][94 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:53:32][357301902469650][390 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:53:32][357301902469650][390 ms][DEBUG] check_frida: running
[2025-08-21 13:53:32][357301902469650][390 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 13:53:32][357301902469650][390 ms][DEBUG] START check_scloud
[2025-08-21 13:53:32][357301902469650][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:53:33][][10263 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:53:33][357301902469650][657 ms][DEBUG] SU: done in 267 ms; out
[2025-08-21 13:53:33][357301902469650][657 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:53:33][357301902469650][657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:33][][10419 ms][DEBUG] proc_open done in 1561 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:53:33][][10419 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:53:33][357301902469650][765 ms][DEBUG] SU: done in 108 ms; out
[2025-08-21 13:53:33][][10419 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:53:33][357301902469650][765 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:33][][10419 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:53:33][][10419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:33][357301902469650][890 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:33][][10544 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 13:53:33][][10544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:33][][10669 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:35][357301902469650][2905 ms][DEBUG] END   check_scloud in 2515 ms
[2025-08-21 13:53:35][357301902469650][2905 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:53:35][357301902469650][2905 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzAxOTAyNDY5NjUwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ3MyJ9'" -e "main()" -q"
[2025-08-21 13:53:35][357301902469650][2905 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:53:35][357301902469650][2905 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzAxOTAyNDY5NjUwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ3MyJ9'" -e "main()" -q"
[2025-08-21 13:53:35][][12684 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:53:36][357301902469650][4327 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:53:36][357301902469650][4483 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:53:36][357301902469650][4483 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:53:36][357301902469650][4483 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:53:36][357301902469650][4483 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:53:36][357301902469650][4483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:37][357301902469650][4623 ms][DEBUG] SU: done in 140 ms; out
[2025-08-21 13:53:37][357301902469650][4624 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:37][357301902469650][4733 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:39][357301902469650][6748 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:53:39][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:53:39][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:53:39][][39 ms][DEBUG] ADB: done in 38 ms; out
[2025-08-21 13:53:39][][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:53:40][][102 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:53:40][][102 ms][DEBUG] END   check_boot_completed in 102 ms
[2025-08-21 13:53:40][][102 ms][INFO] === Request start ===
[2025-08-21 13:53:40][][102 ms][DEBUG] START check_frida
[2025-08-21 13:53:40][][103 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:53:40][][351 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2349136  48036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:53:40][][351 ms][DEBUG] check_frida: running
[2025-08-21 13:53:40][][351 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 13:53:40][][351 ms][DEBUG] START check_scloud
[2025-08-21 13:53:40][][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:53:40][][570 ms][DEBUG] SU: done in 219 ms; out
[2025-08-21 13:53:40][][570 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:53:40][][570 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:40][][680 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:53:40][][680 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:40][][820 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:42][][2835 ms][DEBUG] END   check_scloud in 2484 ms
[2025-08-21 13:53:42][][2835 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:53:42][][2835 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c0MUFaRjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjI5In0='" -e "main()" -q"
[2025-08-21 13:53:42][][2835 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:53:42][][2835 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c0MUFaRjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjI5In0='" -e "main()" -q"
[2025-08-21 13:53:43][][1 ms][INFO] === Request start ===
[2025-08-21 13:53:43][][1 ms][DEBUG] START check_frida
[2025-08-21 13:53:43][][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:53:43][][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2349136  48036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:53:43][][293 ms][DEBUG] check_frida: running
[2025-08-21 13:53:43][][293 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 13:53:43][][293 ms][DEBUG] START check_scloud
[2025-08-21 13:53:43][][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:53:44][][4257 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:53:44][][589 ms][DEBUG] SU: done in 296 ms; out
[2025-08-21 13:53:44][][589 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:53:44][][589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:44][][4413 ms][DEBUG] proc_open done in 1577 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:53:44][][4413 ms][DEBUG] END   runCmdUntilRes#1 in 1578 ms
[2025-08-21 13:53:44][][699 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:53:44][][4413 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:53:44][][699 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:44][][4413 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:53:44][][4413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:44][][4554 ms][DEBUG] SU: done in 140 ms; out
[2025-08-21 13:53:44][][4554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"

[2025-08-21 13:53:44][][4679 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:46][][2854 ms][DEBUG] END   check_scloud in 2561 ms
[2025-08-21 13:53:46][][2854 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:53:46][][2854 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk0NiJ9'" -e "main()" -q"
[2025-08-21 13:53:46][][2854 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:53:46][][2854 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk0NiJ9'" -e "main()" -q"
[2025-08-21 13:53:46][][6693 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:53:47][][4260 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:53:48][][4416 ms][DEBUG] proc_open done in 1562 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:53:48][][4416 ms][DEBUG] END   runCmdUntilRes#1 in 1562 ms
[2025-08-21 13:53:48][][4416 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:53:48][][4416 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:53:48][][4417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:48][][4572 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:53:48][][4573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:48][][4682 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:50][][6697 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:53:54][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:53:54][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:53:54][][35 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 13:53:54][][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:53:54][][98 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:53:54][][98 ms][DEBUG] END   check_boot_completed in 98 ms
[2025-08-21 13:53:54][][98 ms][INFO] === Request start ===
[2025-08-21 13:53:54][][99 ms][DEBUG] START check_frida
[2025-08-21 13:53:54][][99 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:53:55][][348 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2349136  48004 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:53:55][][348 ms][DEBUG] check_frida: running
[2025-08-21 13:53:55][][348 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 13:53:55][][348 ms][DEBUG] START check_scloud
[2025-08-21 13:53:55][][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:53:55][][629 ms][DEBUG] SU: done in 281 ms; out
[2025-08-21 13:53:55][][629 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:53:55][][629 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:55][][738 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:53:55][][739 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:55][][863 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:53:57][][2879 ms][DEBUG] END   check_scloud in 2531 ms
[2025-08-21 13:53:57][][2879 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:53:57][][2879 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk0NiJ9'" -e "main()" -q"
[2025-08-21 13:53:57][][2879 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:53:57][][2879 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk0NiJ9'" -e "main()" -q"
[2025-08-21 13:53:59][][4331 ms][DEBUG] frida res:Failed to spawn: unable to find process with name 'com.sec.enterprise.knox.cloudmdm.smdms'\r\n
[2025-08-21 13:53:59][][4488 ms][DEBUG] proc_open done in 1609 ms (timeout); code=255; out.len=92 err.len=11
[2025-08-21 13:53:59][][4488 ms][DEBUG] END   runCmdUntilRes#1 in 1609 ms
[2025-08-21 13:53:59][][4488 ms][WARN] Detected unable to find process with name; restarting app
[2025-08-21 13:53:59][][4488 ms][WARN] targetPkg: not running, restarting 2
[2025-08-21 13:53:59][][4488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:53:59][][4644 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 13:53:59][][4644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:53:59][][4753 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:54:01][][6768 ms][ERROR] NO RESULT; code=124 out.len=90 err.len=11
[2025-08-21 13:54:05][][0 ms][INFO] === Request start ===
[2025-08-21 13:54:05][][0 ms][DEBUG] START check_frida
[2025-08-21 13:54:05][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:06][][283 ms][DEBUG] SU: done in 283 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:06][][283 ms][DEBUG] check_frida: running
[2025-08-21 13:54:06][][283 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 13:54:06][][283 ms][DEBUG] START check_internet
[2025-08-21 13:54:06][][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:06][][409 ms][DEBUG] SU: done in 126 ms; out
[2025-08-21 13:54:06][][409 ms][WARN] check_internet: offline
[2025-08-21 13:54:06][][409 ms][DEBUG] END   check_internet in 126 ms
[2025-08-21 13:54:07][355857111219675][0 ms][INFO] === Request start ===
[2025-08-21 13:54:07][355857111219675][1 ms][DEBUG] START check_frida
[2025-08-21 13:54:07][355857111219675][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:08][355857111219675][237 ms][DEBUG] SU: done in 236 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:08][355857111219675][237 ms][DEBUG] check_frida: running
[2025-08-21 13:54:08][355857111219675][237 ms][DEBUG] END   check_frida in 236 ms
[2025-08-21 13:54:08][355857111219675][237 ms][DEBUG] START check_internet
[2025-08-21 13:54:08][355857111219675][237 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:08][355857111219675][331 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:54:08][355857111219675][331 ms][WARN] check_internet: offline
[2025-08-21 13:54:08][355857111219675][331 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:54:10][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:54:10][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:54:10][][43 ms][DEBUG] ADB: done in 43 ms; out
[2025-08-21 13:54:10][][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:54:10][][106 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:54:10][][106 ms][DEBUG] END   check_boot_completed in 106 ms
[2025-08-21 13:54:10][][106 ms][INFO] === Request start ===
[2025-08-21 13:54:10][][107 ms][DEBUG] START check_frida
[2025-08-21 13:54:10][][107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:11][][356 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:11][][356 ms][DEBUG] check_frida: running
[2025-08-21 13:54:11][][356 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 13:54:11][][356 ms][DEBUG] START check_internet
[2025-08-21 13:54:11][][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:11][][449 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:54:11][][450 ms][WARN] check_internet: offline
[2025-08-21 13:54:11][][450 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:54:11][352334114992743][0 ms][INFO] === Request start ===
[2025-08-21 13:54:11][352334114992743][1 ms][DEBUG] START check_frida
[2025-08-21 13:54:11][352334114992743][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:11][352334114992743][293 ms][DEBUG] SU: done in 292 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:11][352334114992743][293 ms][DEBUG] check_frida: running
[2025-08-21 13:54:11][352334114992743][293 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 13:54:11][352334114992743][294 ms][DEBUG] START check_internet
[2025-08-21 13:54:11][352334114992743][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:11][352334114992743][387 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:54:11][352334114992743][387 ms][WARN] check_internet: offline
[2025-08-21 13:54:11][352334114992743][387 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:54:12][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:54:12][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:54:12][][27 ms][DEBUG] ADB: done in 27 ms; out
[2025-08-21 13:54:12][][27 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:54:12][][89 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:54:12][][89 ms][DEBUG] END   check_boot_completed in 89 ms
[2025-08-21 13:54:12][355857111219675][89 ms][INFO] === Request start ===
[2025-08-21 13:54:12][355857111219675][90 ms][DEBUG] START check_frida
[2025-08-21 13:54:12][355857111219675][90 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:13][355857111219675][339 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136  48016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:13][355857111219675][339 ms][DEBUG] check_frida: running
[2025-08-21 13:54:13][355857111219675][339 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 13:54:13][355857111219675][339 ms][DEBUG] START check_internet
[2025-08-21 13:54:13][355857111219675][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:13][355857111219675][433 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 13:54:13][355857111219675][433 ms][WARN] check_internet: offline
[2025-08-21 13:54:13][355857111219675][433 ms][DEBUG] END   check_internet in 94 ms
[2025-08-21 13:54:16][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:54:16][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:54:16][][44 ms][DEBUG] ADB: done in 44 ms; out
[2025-08-21 13:54:16][][44 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:54:16][][107 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 13:54:16][][107 ms][DEBUG] END   check_boot_completed in 107 ms
[2025-08-21 13:54:16][352334114992743][107 ms][INFO] === Request start ===
[2025-08-21 13:54:16][352334114992743][107 ms][DEBUG] START check_frida
[2025-08-21 13:54:16][352334114992743][107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:16][352334114992743][419 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:16][352334114992743][419 ms][DEBUG] check_frida: running
[2025-08-21 13:54:16][352334114992743][419 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 13:54:16][352334114992743][419 ms][DEBUG] START check_internet
[2025-08-21 13:54:16][352334114992743][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:16][352334114992743][513 ms][DEBUG] SU: done in 93 ms; out
[2025-08-21 13:54:16][352334114992743][513 ms][WARN] check_internet: offline
[2025-08-21 13:54:16][352334114992743][513 ms][DEBUG] END   check_internet in 93 ms
[2025-08-21 13:54:17][357301902469650][0 ms][INFO] === Request start ===
[2025-08-21 13:54:17][357301902469650][0 ms][DEBUG] START check_frida
[2025-08-21 13:54:17][357301902469650][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:17][][0 ms][INFO] === Request start ===
[2025-08-21 13:54:17][357301902469650][284 ms][DEBUG] SU: done in 284 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:17][357301902469650][284 ms][DEBUG] check_frida: running
[2025-08-21 13:54:17][357301902469650][284 ms][DEBUG] END   check_frida in 284 ms
[2025-08-21 13:54:17][357301902469650][284 ms][DEBUG] START check_internet
[2025-08-21 13:54:17][357301902469650][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:17][357301902469650][363 ms][DEBUG] SU: done in 78 ms; out
[2025-08-21 13:54:17][357301902469650][363 ms][WARN] check_internet: offline
[2025-08-21 13:54:17][357301902469650][363 ms][DEBUG] END   check_internet in 78 ms
[2025-08-21 13:54:18][][1002 ms][DEBUG] START check_frida
[2025-08-21 13:54:18][][1002 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:18][][1289 ms][DEBUG] SU: done in 287 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:18][][1289 ms][DEBUG] check_frida: running
[2025-08-21 13:54:18][][1289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 13:54:18][][1289 ms][DEBUG] START check_internet
[2025-08-21 13:54:18][][1289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:18][][1379 ms][DEBUG] SU: done in 90 ms; out
[2025-08-21 13:54:18][][1379 ms][WARN] check_internet: offline
[2025-08-21 13:54:18][][1379 ms][DEBUG] END   check_internet in 90 ms
[2025-08-21 13:54:21][][0 ms][INFO] === Request start ===
[2025-08-21 13:54:21][][0 ms][DEBUG] START check_frida
[2025-08-21 13:54:21][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:21][][279 ms][DEBUG] SU: done in 279 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:21][][279 ms][DEBUG] check_frida: running
[2025-08-21 13:54:21][][279 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 13:54:21][][279 ms][DEBUG] START check_internet
[2025-08-21 13:54:21][][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:21][][386 ms][DEBUG] SU: done in 107 ms; out
[2025-08-21 13:54:21][][386 ms][WARN] check_internet: offline
[2025-08-21 13:54:21][][386 ms][DEBUG] END   check_internet in 107 ms
[2025-08-21 13:54:22][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:54:22][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:54:22][][33 ms][DEBUG] ADB: done in 33 ms; out
[2025-08-21 13:54:22][][33 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:54:22][][79 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:54:22][][79 ms][DEBUG] END   check_boot_completed in 79 ms
[2025-08-21 13:54:22][357301902469650][79 ms][INFO] === Request start ===
[2025-08-21 13:54:22][357301902469650][79 ms][DEBUG] START check_frida
[2025-08-21 13:54:22][357301902469650][80 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:22][357301902469650][305 ms][DEBUG] SU: done in 226 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:22][357301902469650][305 ms][DEBUG] check_frida: running
[2025-08-21 13:54:22][357301902469650][305 ms][DEBUG] END   check_frida in 226 ms
[2025-08-21 13:54:22][357301902469650][305 ms][DEBUG] START check_internet
[2025-08-21 13:54:22][357301902469650][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:22][357301902469650][396 ms][DEBUG] SU: done in 90 ms; out
[2025-08-21 13:54:22][357301902469650][396 ms][WARN] check_internet: offline
[2025-08-21 13:54:22][357301902469650][396 ms][DEBUG] END   check_internet in 90 ms
[2025-08-21 13:54:23][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:54:23][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:54:23][][33 ms][DEBUG] ADB: done in 33 ms; out
[2025-08-21 13:54:23][][33 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:54:23][][93 ms][DEBUG] SU: done in 60 ms; out
[2025-08-21 13:54:23][][93 ms][DEBUG] END   check_boot_completed in 93 ms
[2025-08-21 13:54:23][][93 ms][INFO] === Request start ===
[2025-08-21 13:54:23][][93 ms][DEBUG] START check_frida
[2025-08-21 13:54:23][][93 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:23][][365 ms][DEBUG] SU: done in 272 ms; outroot          4632     1 2332716  48012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:23][][365 ms][DEBUG] check_frida: running
[2025-08-21 13:54:23][][365 ms][DEBUG] END   check_frida in 272 ms
[2025-08-21 13:54:23][][365 ms][DEBUG] START check_internet
[2025-08-21 13:54:23][][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:23][][487 ms][DEBUG] SU: done in 122 ms; out
[2025-08-21 13:54:23][][487 ms][WARN] check_internet: offline
[2025-08-21 13:54:23][][487 ms][DEBUG] END   check_internet in 122 ms
[2025-08-21 13:54:25][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:54:25][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:54:26][][0 ms][INFO] === Request start ===
[2025-08-21 13:54:26][][0 ms][DEBUG] START check_frida
[2025-08-21 13:54:26][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:26][][30 ms][DEBUG] SU: done in 30 ms; out
[2025-08-21 13:54:26][][30 ms][WARN] check_frida: not running, restarting
[2025-08-21 13:54:26][][30 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 13:54:26][][62 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 13:54:26][][62 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 13:54:27][][93 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 13:54:28][][0 ms][INFO] === Request start ===
[2025-08-21 13:54:29][][2093 ms][DEBUG] END   check_frida in 2093 ms
[2025-08-21 13:54:29][][2093 ms][DEBUG] START check_internet
[2025-08-21 13:54:29][][2093 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:29][][2125 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 13:54:29][][2125 ms][WARN] check_internet: offline
[2025-08-21 13:54:29][][2125 ms][DEBUG] END   check_internet in 31 ms
[2025-08-21 13:54:29][][1013 ms][DEBUG] START check_frida
[2025-08-21 13:54:29][][1013 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:29][][1060 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:54:29][][1060 ms][WARN] check_frida: not running, restarting
[2025-08-21 13:54:29][][1061 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 13:54:29][][1107 ms][DEBUG] SU: done in 46 ms; out
[2025-08-21 13:54:29][][1107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 13:54:29][][1138 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 13:54:31][][5095 ms][DEBUG] ADB: done in 5095 ms; out
[2025-08-21 13:54:31][][5095 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:54:31][][5143 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 13:54:31][][5143 ms][DEBUG] END   check_boot_completed in 5143 ms
[2025-08-21 13:54:31][][5143 ms][INFO] === Request start ===
[2025-08-21 13:54:31][][5143 ms][DEBUG] START check_frida
[2025-08-21 13:54:31][][5143 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:31][][3138 ms][DEBUG] END   check_frida in 2125 ms
[2025-08-21 13:54:31][][3138 ms][DEBUG] START check_internet
[2025-08-21 13:54:31][][3138 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:31][][5753 ms][DEBUG] SU: done in 610 ms; outroot          4632     1 2332716  47728 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:31][][5753 ms][DEBUG] check_frida: running
[2025-08-21 13:54:31][][5753 ms][DEBUG] END   check_frida in 610 ms
[2025-08-21 13:54:31][][5753 ms][DEBUG] START check_internet
[2025-08-21 13:54:31][][5753 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:32][][3997 ms][DEBUG] SU: done in 859 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=121 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 121.938/121.938/121.938/0.000 ms\n
[2025-08-21 13:54:32][][3997 ms][DEBUG] check_internet: online
[2025-08-21 13:54:32][][3997 ms][DEBUG] END   check_internet in 859 ms
[2025-08-21 13:54:32][][3997 ms][DEBUG] START check_scloud
[2025-08-21 13:54:32][][3997 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:54:32][][6392 ms][DEBUG] SU: done in 639 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=131 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 131.421/131.421/131.421/0.000 ms\n
[2025-08-21 13:54:32][][6392 ms][DEBUG] check_internet: online
[2025-08-21 13:54:32][][6392 ms][DEBUG] END   check_internet in 639 ms
[2025-08-21 13:54:32][][6392 ms][DEBUG] START check_scloud
[2025-08-21 13:54:32][][6393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:54:33][][5075 ms][DEBUG] SU: done in 1078 ms; out
[2025-08-21 13:54:33][][5076 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:54:33][][5076 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:54:33][][7376 ms][DEBUG] SU: done in 984 ms; out
[2025-08-21 13:54:33][][7377 ms][WARN] targetPkg: not running, restarting
[2025-08-21 13:54:33][][7377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 13:54:33][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:54:33][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:54:33][][26 ms][DEBUG] ADB: done in 26 ms; out
[2025-08-21 13:54:33][][26 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:54:33][][136 ms][DEBUG] SU: done in 109 ms; out
[2025-08-21 13:54:33][][136 ms][DEBUG] END   check_boot_completed in 136 ms
[2025-08-21 13:54:33][][136 ms][INFO] === Request start ===
[2025-08-21 13:54:33][][7736 ms][DEBUG] SU: done in 359 ms; out
[2025-08-21 13:54:33][][7736 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:54:33][][5670 ms][DEBUG] SU: done in 594 ms; out
[2025-08-21 13:54:33][][5670 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 13:54:34][][8111 ms][DEBUG] SU: done in 375 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:54:34][][6341 ms][DEBUG] SU: done in 672 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 13:54:36][][10127 ms][DEBUG] END   check_scloud in 3734 ms
[2025-08-21 13:54:36][][10127 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:54:36][][10127 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjAwIn0='" -e "main()" -q"
[2025-08-21 13:54:36][][10127 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:54:36][][10127 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjAwIn0='" -e "main()" -q"
[2025-08-21 13:54:36][][8357 ms][DEBUG] END   check_scloud in 4359 ms
[2025-08-21 13:54:36][][8357 ms][DEBUG] rawBody.length=1131
[2025-08-21 13:54:36][][8357 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ043MEM3VkpLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzYwMCJ9'" -e "main()" -q"
[2025-08-21 13:54:36][][8357 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:54:36][][8357 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ043MEM3VkpLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzYwMCJ9'" -e "main()" -q"
[2025-08-21 13:54:40][][14437 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjAwIn0="\r\n
[2025-08-21 13:54:43][][14789 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ043MEM3VkpLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzYwMCJ9"\r\n
[2025-08-21 13:54:43][][17075 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 13:54:43][][17075 ms][DEBUG] proc_open done in 6948 ms; code=0; res.len=107
[2025-08-21 13:54:43][][17075 ms][DEBUG] END   runCmdUntilRes#1 in 6948 ms
[2025-08-21 13:54:43][][17075 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 13:54:43][][0 ms][INFO] === Request start ===
[2025-08-21 13:54:43][][10198 ms][DEBUG] START check_frida
[2025-08-21 13:54:43][][10198 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:44][][10980 ms][DEBUG] SU: done in 782 ms; outroot          4632     1 2349136   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:44][][10980 ms][DEBUG] check_frida: running
[2025-08-21 13:54:44][][10980 ms][DEBUG] END   check_frida in 782 ms
[2025-08-21 13:54:44][][10980 ms][DEBUG] START check_internet
[2025-08-21 13:54:44][][10980 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:44][][11449 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.792/236.792/236.792/0.000 ms\n
[2025-08-21 13:54:44][][11449 ms][DEBUG] check_internet: online
[2025-08-21 13:54:44][][11449 ms][DEBUG] END   check_internet in 468 ms
[2025-08-21 13:54:44][][11449 ms][DEBUG] START check_scloud
[2025-08-21 13:54:44][][11449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:54:44][][16684 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 13:54:44][][16684 ms][DEBUG] proc_open done in 8327 ms; code=0; res.len=107
[2025-08-21 13:54:44][][16684 ms][DEBUG] END   runCmdUntilRes#1 in 8327 ms
[2025-08-21 13:54:44][][16684 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 13:54:45][][2028 ms][DEBUG] START check_frida
[2025-08-21 13:54:45][][2028 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:45][][2585 ms][DEBUG] SU: done in 558 ms; outroot          4632     1 2349136   4276 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:45][][2586 ms][DEBUG] check_frida: running
[2025-08-21 13:54:45][][2586 ms][DEBUG] END   check_frida in 558 ms
[2025-08-21 13:54:45][][2586 ms][DEBUG] START check_internet
[2025-08-21 13:54:45][][2586 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:46][][12553 ms][DEBUG] SU: done in 1104 ms; outu0_a118       7086 20714 23898700 116684 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:54:46][][12553 ms][DEBUG] targetPkg: running
[2025-08-21 13:54:46][][12553 ms][DEBUG] END   check_scloud in 1104 ms
[2025-08-21 13:54:46][][12553 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:54:46][][12553 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDk1In0='" -e "main()" -q"
[2025-08-21 13:54:46][][12553 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:54:46][][12553 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDk1In0='" -e "main()" -q"
[2025-08-21 13:54:46][][3448 ms][DEBUG] SU: done in 862 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.283/336.283/336.283/0.000 ms\n
[2025-08-21 13:54:46][][3448 ms][DEBUG] check_internet: online
[2025-08-21 13:54:46][][3448 ms][DEBUG] END   check_internet in 862 ms
[2025-08-21 13:54:46][][3448 ms][DEBUG] START check_scloud
[2025-08-21 13:54:46][][3448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:54:46][355857111219675][0 ms][INFO] === Request start ===
[2025-08-21 13:54:47][][4202 ms][DEBUG] SU: done in 755 ms; outu0_a118       7086 20714 23898700 114964 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:54:47][][4203 ms][DEBUG] targetPkg: running
[2025-08-21 13:54:47][][4203 ms][DEBUG] END   check_scloud in 755 ms
[2025-08-21 13:54:47][][4203 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:54:47][][4203 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDYzIn0='" -e "main()" -q"
[2025-08-21 13:54:47][][4203 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:54:47][][4203 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDYzIn0='" -e "main()" -q"
[2025-08-21 13:54:48][][5499 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 13:54:49][][5650 ms][DEBUG] proc_open done in 1447 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 13:54:49][][5650 ms][DEBUG] END   runCmdUntilRes#1 in 1447 ms
[2025-08-21 13:54:49][][5650 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 13:54:49][][16176 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDk1In0="\r\n
[2025-08-21 13:54:49][355857111219675][3036 ms][DEBUG] START check_frida
[2025-08-21 13:54:49][355857111219675][3036 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:50][355857111219675][3806 ms][DEBUG] SU: done in 770 ms; outroot          4632     1 2349136   4392 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:50][355857111219675][3806 ms][DEBUG] check_frida: running
[2025-08-21 13:54:50][355857111219675][3806 ms][DEBUG] END   check_frida in 770 ms
[2025-08-21 13:54:50][355857111219675][3806 ms][DEBUG] START check_internet
[2025-08-21 13:54:50][355857111219675][3806 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:51][355857111219675][4243 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.000/187.000/187.000/0.000 ms\n
[2025-08-21 13:54:51][355857111219675][4243 ms][DEBUG] check_internet: online
[2025-08-21 13:54:51][355857111219675][4243 ms][DEBUG] END   check_internet in 437 ms
[2025-08-21 13:54:51][355857111219675][4243 ms][DEBUG] START check_scloud
[2025-08-21 13:54:51][355857111219675][4243 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:54:52][355857111219675][5180 ms][DEBUG] SU: done in 937 ms; outu0_a118       7086 20714 24063544 115704 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:54:52][355857111219675][5180 ms][DEBUG] targetPkg: running
[2025-08-21 13:54:52][355857111219675][5180 ms][DEBUG] END   check_scloud in 937 ms
[2025-08-21 13:54:52][355857111219675][5180 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:54:52][355857111219675][5180 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU3MTExMjE5Njc1IiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ043MEM3VkpLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IktPQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTE3In0='" -e "main()" -q"
[2025-08-21 13:54:52][355857111219675][5180 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:54:52][355857111219675][5180 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU3MTExMjE5Njc1IiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ043MEM3VkpLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IktPQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTE3In0='" -e "main()" -q"
[2025-08-21 13:54:52][][19454 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 13:54:52][][19454 ms][DEBUG] proc_open done in 6902 ms; code=0; res.len=107
[2025-08-21 13:54:52][][19454 ms][DEBUG] END   runCmdUntilRes#1 in 6902 ms
[2025-08-21 13:54:52][][19454 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 13:54:53][][0 ms][INFO] === Request start ===
[2025-08-21 13:54:53][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:54:53][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:54:53][][34 ms][DEBUG] ADB: done in 34 ms; out
[2025-08-21 13:54:53][][34 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:54:53][][95 ms][DEBUG] SU: done in 61 ms; out
[2025-08-21 13:54:53][][95 ms][DEBUG] END   check_boot_completed in 95 ms
[2025-08-21 13:54:53][][95 ms][INFO] === Request start ===
[2025-08-21 13:54:53][][95 ms][DEBUG] START check_frida
[2025-08-21 13:54:53][][95 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:54][][787 ms][DEBUG] SU: done in 692 ms; outroot          4632     1 2365556   4308 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:54][][787 ms][DEBUG] check_frida: running
[2025-08-21 13:54:54][][787 ms][DEBUG] END   check_frida in 692 ms
[2025-08-21 13:54:54][][787 ms][DEBUG] START check_internet
[2025-08-21 13:54:54][][787 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:54:54][355857111219675][7457 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODU3MTExMjE5Njc1IiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ043MEM3VkpLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IktPQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MTE3In0="\r\n
[2025-08-21 13:54:54][][1450 ms][DEBUG] SU: done in 663 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=130 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 130.491/130.491/130.491/0.000 ms\n
[2025-08-21 13:54:54][][1450 ms][DEBUG] check_internet: online
[2025-08-21 13:54:54][][1450 ms][DEBUG] END   check_internet in 663 ms
[2025-08-21 13:54:54][][1450 ms][DEBUG] START check_scloud
[2025-08-21 13:54:54][][1450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:54:55][][2187 ms][DEBUG] SU: done in 736 ms; outu0_a118       7086 20714 24081348 115980 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:54:55][][2187 ms][DEBUG] targetPkg: running
[2025-08-21 13:54:55][][2187 ms][DEBUG] END   check_scloud in 736 ms
[2025-08-21 13:54:55][][2187 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:54:55][][2187 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDYzIn0='" -e "main()" -q"
[2025-08-21 13:54:55][][2187 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:54:55][][2187 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDYzIn0='" -e "main()" -q"
[2025-08-21 13:54:58][355857111219675][11377 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73dffc92-ac3a-4852-8456-3254de7b3cb4","id":"QR_73dffc92-ac3a-4852-8456-3254de7b3cb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:54:58][355857111219675][11377 ms][DEBUG] proc_open done in 6197 ms; code=0; res.len=3152
[2025-08-21 13:54:58][355857111219675][11377 ms][DEBUG] END   runCmdUntilRes#1 in 6197 ms
[2025-08-21 13:54:58][355857111219675][11377 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:54:58][][4842 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDYzIn0="\r\n
[2025-08-21 13:54:59][][6061 ms][DEBUG] START check_frida
[2025-08-21 13:54:59][][6061 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:54:59][][6708 ms][DEBUG] SU: done in 647 ms; outroot          4632     1 2349136   4356 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:54:59][][6708 ms][DEBUG] check_frida: running
[2025-08-21 13:54:59][][6708 ms][DEBUG] END   check_frida in 647 ms
[2025-08-21 13:54:59][][6708 ms][DEBUG] START check_internet
[2025-08-21 13:54:59][][6708 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:55:00][][7083 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.315/135.315/135.315/0.000 ms\n
[2025-08-21 13:55:00][][7083 ms][DEBUG] check_internet: online
[2025-08-21 13:55:00][][7083 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 13:55:00][][7083 ms][DEBUG] START check_scloud
[2025-08-21 13:55:00][][7083 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:55:00][][7067 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 13:55:00][][7067 ms][DEBUG] proc_open done in 4880 ms; code=0; res.len=107
[2025-08-21 13:55:00][][7067 ms][DEBUG] END   runCmdUntilRes#1 in 4880 ms
[2025-08-21 13:55:00][][7067 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 13:55:00][][7608 ms][DEBUG] SU: done in 525 ms; outu0_a118       7086 20714 24081832 105220 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:55:00][][7608 ms][DEBUG] targetPkg: running
[2025-08-21 13:55:00][][7608 ms][DEBUG] END   check_scloud in 525 ms
[2025-08-21 13:55:00][][7608 ms][DEBUG] rawBody.length=1130
[2025-08-21 13:55:00][][7608 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MDc2In0='" -e "main()" -q"
[2025-08-21 13:55:00][][7608 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:55:00][][7608 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MDc2In0='" -e "main()" -q"
[2025-08-21 13:55:01][352334114992743][0 ms][INFO] === Request start ===
[2025-08-21 13:55:03][][10051 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFNDQ0VCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhYViIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MDc2In0="\r\n
[2025-08-21 13:55:05][][12254 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 13:55:05][][12254 ms][DEBUG] proc_open done in 4646 ms; code=0; res.len=107
[2025-08-21 13:55:05][][12254 ms][DEBUG] END   runCmdUntilRes#1 in 4646 ms
[2025-08-21 13:55:05][][12254 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 13:55:06][352334114992743][5035 ms][DEBUG] START check_frida
[2025-08-21 13:55:06][352334114992743][5035 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:55:06][352334114992743][5666 ms][DEBUG] SU: done in 631 ms; outroot          4632     1 2349136   4304 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:55:06][352334114992743][5666 ms][DEBUG] check_frida: running
[2025-08-21 13:55:06][352334114992743][5666 ms][DEBUG] END   check_frida in 631 ms
[2025-08-21 13:55:06][352334114992743][5666 ms][DEBUG] START check_scloud
[2025-08-21 13:55:06][352334114992743][5666 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:55:07][352334114992743][6345 ms][DEBUG] SU: done in 679 ms; outu0_a118       7086 20714 24011896 96928 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:55:07][352334114992743][6345 ms][DEBUG] targetPkg: running
[2025-08-21 13:55:07][352334114992743][6345 ms][DEBUG] END   check_scloud in 679 ms
[2025-08-21 13:55:07][352334114992743][6345 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:55:07][352334114992743][6345 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzM0MTE0OTkyNzQzIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NSJ9'" -e "main()" -q"
[2025-08-21 13:55:07][352334114992743][6345 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:55:07][352334114992743][6345 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzM0MTE0OTkyNzQzIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NSJ9'" -e "main()" -q"
[2025-08-21 13:55:08][352384571737537][0 ms][INFO] === Request start ===
[2025-08-21 13:55:08][352334114992743][7595 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 13:55:09][352334114992743][7750 ms][DEBUG] proc_open done in 1405 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 13:55:09][352334114992743][7750 ms][DEBUG] END   runCmdUntilRes#1 in 1405 ms
[2025-08-21 13:55:09][352334114992743][7750 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 13:55:09][352384571737537][1004 ms][DEBUG] START check_frida
[2025-08-21 13:55:09][352384571737537][1004 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:55:10][352384571737537][1791 ms][DEBUG] SU: done in 787 ms; outroot          4632     1 2365556   4268 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:55:10][352384571737537][1791 ms][DEBUG] check_frida: running
[2025-08-21 13:55:10][352384571737537][1791 ms][DEBUG] END   check_frida in 787 ms
[2025-08-21 13:55:10][352384571737537][1791 ms][DEBUG] START check_scloud
[2025-08-21 13:55:10][352384571737537][1791 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:55:10][352384571737537][2230 ms][DEBUG] SU: done in 438 ms; outu0_a118       7086 20714 24011896 93868 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:55:10][352384571737537][2230 ms][DEBUG] targetPkg: running
[2025-08-21 13:55:10][352384571737537][2230 ms][DEBUG] END   check_scloud in 438 ms
[2025-08-21 13:55:10][352384571737537][2230 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:55:10][352384571737537][2230 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzg0NTcxNzM3NTM3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFg0MDBZSDFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg2NSJ9'" -e "main()" -q"
[2025-08-21 13:55:10][352384571737537][2230 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:55:10][352384571737537][2230 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzg0NTcxNzM3NTM3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFg0MDBZSDFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg2NSJ9'" -e "main()" -q"
[2025-08-21 13:55:12][352384571737537][4375 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzg0NTcxNzM3NTM3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFg0MDBZSDFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg2NSJ9"\r\n
[2025-08-21 13:55:13][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 13:55:13][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 13:55:13][][32 ms][DEBUG] ADB: done in 32 ms; out
[2025-08-21 13:55:13][][32 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 13:55:13][][92 ms][DEBUG] SU: done in 60 ms; out
[2025-08-21 13:55:13][][92 ms][DEBUG] END   check_boot_completed in 92 ms
[2025-08-21 13:55:13][352334114992743][92 ms][INFO] === Request start ===
[2025-08-21 13:55:13][352334114992743][92 ms][DEBUG] START check_frida
[2025-08-21 13:55:13][352334114992743][92 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:55:14][352334114992743][501 ms][DEBUG] SU: done in 409 ms; outroot          4632     1 2349136   4316 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:55:14][352334114992743][501 ms][DEBUG] check_frida: running
[2025-08-21 13:55:14][352334114992743][501 ms][DEBUG] END   check_frida in 409 ms
[2025-08-21 13:55:14][352334114992743][501 ms][DEBUG] START check_scloud
[2025-08-21 13:55:14][352334114992743][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:55:14][352334114992743][1056 ms][DEBUG] SU: done in 555 ms; outu0_a118       7086 20714 24012244 92744 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:55:14][352334114992743][1056 ms][DEBUG] targetPkg: running
[2025-08-21 13:55:14][352334114992743][1056 ms][DEBUG] END   check_scloud in 555 ms
[2025-08-21 13:55:14][352334114992743][1056 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:55:14][352334114992743][1056 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzM0MTE0OTkyNzQzIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NSJ9'" -e "main()" -q"
[2025-08-21 13:55:14][352334114992743][1056 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:55:14][352334114992743][1056 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzM0MTE0OTkyNzQzIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NSJ9'" -e "main()" -q"
[2025-08-21 13:55:14][352384571737537][6276 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed23f744-254b-4e1f-9d9b-fb6cb481fc73","id":"QR_ed23f744-254b-4e1f-9d9b-fb6cb481fc73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:55:14][352384571737537][6276 ms][DEBUG] proc_open done in 4047 ms; code=0; res.len=3152
[2025-08-21 13:55:14][352384571737537][6276 ms][DEBUG] END   runCmdUntilRes#1 in 4047 ms
[2025-08-21 13:55:14][352384571737537][6276 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:55:16][352334114992743][3214 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzM0MTE0OTkyNzQzIiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE4yMEVENDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NSJ9"\r\n
[2025-08-21 13:55:18][352334114992743][4981 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c69473a2-a7c0-4ace-9a5d-070654c6db31","id":"QR_c69473a2-a7c0-4ace-9a5d-070654c6db31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:55:18][352334114992743][4981 ms][DEBUG] proc_open done in 3925 ms; code=0; res.len=3152
[2025-08-21 13:55:18][352334114992743][4981 ms][DEBUG] END   runCmdUntilRes#1 in 3925 ms
[2025-08-21 13:55:18][352334114992743][4981 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:55:20][357576776010785][0 ms][INFO] === Request start ===
[2025-08-21 13:55:20][357576776010785][1 ms][DEBUG] START check_frida
[2025-08-21 13:55:20][357576776010785][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:55:20][357576776010785][336 ms][DEBUG] SU: done in 335 ms; outroot          4632     1 2349136   4256 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:55:20][357576776010785][336 ms][DEBUG] check_frida: running
[2025-08-21 13:55:20][357576776010785][336 ms][DEBUG] END   check_frida in 335 ms
[2025-08-21 13:55:20][357576776010785][336 ms][DEBUG] START check_scloud
[2025-08-21 13:55:20][357576776010785][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:55:21][357576776010785][744 ms][DEBUG] SU: done in 408 ms; outu0_a118       7086 20714 24011960 95076 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:55:21][357576776010785][744 ms][DEBUG] targetPkg: running
[2025-08-21 13:55:21][357576776010785][744 ms][DEBUG] END   check_scloud in 408 ms
[2025-08-21 13:55:21][357576776010785][744 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:55:21][357576776010785][744 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2Nzc2MDEwNzg1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g4MTFYRTRFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgyNyJ9'" -e "main()" -q"
[2025-08-21 13:55:21][357576776010785][744 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:55:21][357576776010785][744 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2Nzc2MDEwNzg1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g4MTFYRTRFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgyNyJ9'" -e "main()" -q"
[2025-08-21 13:55:23][357576776010785][2813 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTc2Nzc2MDEwNzg1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g4MTFYRTRFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgyNyJ9"\r\n
[2025-08-21 13:55:25][357576776010785][4721 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d14ac599-660d-48d9-bbce-d25fcb4f5a55","id":"QR_d14ac599-660d-48d9-bbce-d25fcb4f5a55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:55:25][357576776010785][4721 ms][DEBUG] proc_open done in 3977 ms; code=0; res.len=3152
[2025-08-21 13:55:25][357576776010785][4721 ms][DEBUG] END   runCmdUntilRes#1 in 3977 ms
[2025-08-21 13:55:25][357576776010785][4721 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:56:11][351537275976625][0 ms][INFO] === Request start ===
[2025-08-21 13:56:11][351537275976625][0 ms][DEBUG] START check_frida
[2025-08-21 13:56:11][351537275976625][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:56:11][351537275976625][409 ms][DEBUG] SU: done in 409 ms; outroot          4632     1 2332716   2848 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:56:11][351537275976625][409 ms][DEBUG] check_frida: running
[2025-08-21 13:56:11][351537275976625][409 ms][DEBUG] END   check_frida in 409 ms
[2025-08-21 13:56:11][351537275976625][409 ms][DEBUG] START check_internet
[2025-08-21 13:56:11][351537275976625][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:56:12][351537275976625][815 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=131 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 131.223/131.223/131.223/0.000 ms\n
[2025-08-21 13:56:12][351537275976625][815 ms][DEBUG] check_internet: online
[2025-08-21 13:56:12][351537275976625][815 ms][DEBUG] END   check_internet in 406 ms
[2025-08-21 13:56:12][351537275976625][815 ms][DEBUG] START check_scloud
[2025-08-21 13:56:12][351537275976625][816 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:56:13][351537275976625][1534 ms][DEBUG] SU: done in 718 ms; outu0_a118       7086 20714 23995412 73568 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:56:13][351537275976625][1534 ms][DEBUG] targetPkg: running
[2025-08-21 13:56:13][351537275976625][1534 ms][DEBUG] END   check_scloud in 718 ms
[2025-08-21 13:56:13][351537275976625][1534 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:56:13][351537275976625][1534 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc1OTc2NjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEFGNlhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTYxIn0='" -e "main()" -q"
[2025-08-21 13:56:13][351537275976625][1534 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:56:13][351537275976625][1534 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc1OTc2NjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEFGNlhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTYxIn0='" -e "main()" -q"
[2025-08-21 13:56:15][351537275976625][3753 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTM3Mjc1OTc2NjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEFGNlhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTYxIn0="\r\n
[2025-08-21 13:56:17][351537275976625][6377 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21e702eb-b51e-4ccb-9053-124e90e89846","id":"QR_21e702eb-b51e-4ccb-9053-124e90e89846","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:56:17][351537275976625][6378 ms][DEBUG] proc_open done in 4844 ms; code=0; res.len=3152
[2025-08-21 13:56:17][351537275976625][6378 ms][DEBUG] END   runCmdUntilRes#1 in 4844 ms
[2025-08-21 13:56:17][351537275976625][6378 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:56:26][358256981236298][0 ms][INFO] === Request start ===
[2025-08-21 13:56:26][358256981236298][1 ms][DEBUG] START check_frida
[2025-08-21 13:56:26][358256981236298][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:56:27][358256981236298][549 ms][DEBUG] SU: done in 548 ms; outroot          4632     1 2349136   3744 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:56:27][358256981236298][549 ms][DEBUG] check_frida: running
[2025-08-21 13:56:27][358256981236298][549 ms][DEBUG] END   check_frida in 548 ms
[2025-08-21 13:56:27][358256981236298][549 ms][DEBUG] START check_internet
[2025-08-21 13:56:27][358256981236298][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:56:27][358256981236298][893 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.175/228.175/228.175/0.000 ms\n
[2025-08-21 13:56:27][358256981236298][893 ms][DEBUG] check_internet: online
[2025-08-21 13:56:27][358256981236298][893 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 13:56:27][358256981236298][893 ms][DEBUG] START check_scloud
[2025-08-21 13:56:27][358256981236298][893 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:56:28][358256981236298][1299 ms][DEBUG] SU: done in 406 ms; outu0_a118       7086 20714 24011832 83924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:56:28][358256981236298][1299 ms][DEBUG] targetPkg: running
[2025-08-21 13:56:28][358256981236298][1299 ms][DEBUG] END   check_scloud in 406 ms
[2025-08-21 13:56:28][358256981236298][1299 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:56:28][358256981236298][1300 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MjU2OTgxMjM2Mjk4IiwibW9kZWwiOiJTTS1YMjE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5VFkyMFI3UTZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkzNCJ9'" -e "main()" -q"
[2025-08-21 13:56:28][358256981236298][1300 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:56:28][358256981236298][1300 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MjU2OTgxMjM2Mjk4IiwibW9kZWwiOiJTTS1YMjE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5VFkyMFI3UTZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkzNCJ9'" -e "main()" -q"
[2025-08-21 13:56:30][358256981236298][3377 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MjU2OTgxMjM2Mjk4IiwibW9kZWwiOiJTTS1YMjE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5VFkyMFI3UTZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkzNCJ9"\r\n
[2025-08-21 13:56:32][358256981236298][5721 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ff1ea7a-d7b6-4fee-b184-3b9325975ced","id":"QR_1ff1ea7a-d7b6-4fee-b184-3b9325975ced","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:56:32][358256981236298][5722 ms][DEBUG] proc_open done in 4422 ms; code=0; res.len=3152
[2025-08-21 13:56:32][358256981236298][5722 ms][DEBUG] END   runCmdUntilRes#1 in 4422 ms
[2025-08-21 13:56:32][358256981236298][5722 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:56:38][356414818065081][1 ms][INFO] === Request start ===
[2025-08-21 13:56:38][356414818065081][1 ms][DEBUG] START check_frida
[2025-08-21 13:56:38][356414818065081][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:56:39][356414818065081][385 ms][DEBUG] SU: done in 383 ms; outroot          4632     1 2349136   3864 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:56:39][356414818065081][385 ms][DEBUG] check_frida: running
[2025-08-21 13:56:39][356414818065081][385 ms][DEBUG] END   check_frida in 383 ms
[2025-08-21 13:56:39][356414818065081][385 ms][DEBUG] START check_internet
[2025-08-21 13:56:39][356414818065081][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:56:39][356414818065081][713 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.543/208.543/208.543/0.000 ms\n
[2025-08-21 13:56:39][356414818065081][713 ms][DEBUG] check_internet: online
[2025-08-21 13:56:39][356414818065081][713 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 13:56:39][356414818065081][713 ms][DEBUG] START check_scloud
[2025-08-21 13:56:39][356414818065081][713 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:56:40][356414818065081][1150 ms][DEBUG] SU: done in 437 ms; outu0_a118       7086 20714 23994348 87004 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:56:40][356414818065081][1150 ms][DEBUG] targetPkg: running
[2025-08-21 13:56:40][356414818065081][1150 ms][DEBUG] END   check_scloud in 437 ms
[2025-08-21 13:56:40][356414818065081][1150 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:56:40][356414818065081][1150 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE4MDY1MDgxIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MDZOTEJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI2NSJ9'" -e "main()" -q"
[2025-08-21 13:56:40][356414818065081][1150 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:56:40][356414818065081][1150 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODE4MDY1MDgxIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MDZOTEJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI2NSJ9'" -e "main()" -q"
[2025-08-21 13:56:42][356414818065081][3181 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE0ODE4MDY1MDgxIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MDZOTEJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTI2NSJ9"\r\n
[2025-08-21 13:56:43][356414818065081][4962 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4092d599-cfb9-4a01-92e7-b4e48f559bc8","id":"QR_4092d599-cfb9-4a01-92e7-b4e48f559bc8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:56:43][356414818065081][4962 ms][DEBUG] proc_open done in 3812 ms; code=0; res.len=3152
[2025-08-21 13:56:43][356414818065081][4962 ms][DEBUG] END   runCmdUntilRes#1 in 3812 ms
[2025-08-21 13:56:43][356414818065081][4962 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:56:49][356923585628921][0 ms][INFO] === Request start ===
[2025-08-21 13:56:49][356923585628921][1 ms][DEBUG] START check_frida
[2025-08-21 13:56:49][356923585628921][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:56:50][356923585628921][302 ms][DEBUG] SU: done in 301 ms; outroot          4632     1 2349136   3908 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:56:50][356923585628921][302 ms][DEBUG] check_frida: running
[2025-08-21 13:56:50][356923585628921][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 13:56:50][356923585628921][302 ms][DEBUG] START check_internet
[2025-08-21 13:56:50][356923585628921][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:56:50][356923585628921][615 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.815/208.815/208.815/0.000 ms\n
[2025-08-21 13:56:50][356923585628921][615 ms][DEBUG] check_internet: online
[2025-08-21 13:56:50][356923585628921][615 ms][DEBUG] END   check_internet in 313 ms
[2025-08-21 13:56:50][356923585628921][615 ms][DEBUG] START check_scloud
[2025-08-21 13:56:50][356923585628921][615 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:56:50][356923585628921][1130 ms][DEBUG] SU: done in 515 ms; outu0_a118       7086 20714 23994348 88380 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:56:50][356923585628921][1130 ms][DEBUG] targetPkg: running
[2025-08-21 13:56:50][356923585628921][1130 ms][DEBUG] END   check_scloud in 515 ms
[2025-08-21 13:56:50][356923585628921][1130 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:56:50][356923585628921][1130 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTIzNTg1NjI4OTIxIiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g0MEdHTlJIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU1NSJ9'" -e "main()" -q"
[2025-08-21 13:56:50][356923585628921][1130 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:56:50][356923585628921][1130 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTIzNTg1NjI4OTIxIiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g0MEdHTlJIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU1NSJ9'" -e "main()" -q"
[2025-08-21 13:56:52][356923585628921][3130 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTIzNTg1NjI4OTIxIiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g0MEdHTlJIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU1NSJ9"\r\n
[2025-08-21 13:56:54][356923585628921][5098 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11b1a5f1-b7a4-41a8-9e52-ecc51384dec3","id":"QR_11b1a5f1-b7a4-41a8-9e52-ecc51384dec3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:56:54][356923585628921][5098 ms][DEBUG] proc_open done in 3968 ms; code=0; res.len=3152
[2025-08-21 13:56:54][356923585628921][5098 ms][DEBUG] END   runCmdUntilRes#1 in 3968 ms
[2025-08-21 13:56:54][356923585628921][5098 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:56:59][353600815784699][0 ms][INFO] === Request start ===
[2025-08-21 13:56:59][353600815784699][1 ms][DEBUG] START check_frida
[2025-08-21 13:56:59][353600815784699][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:57:00][353600815784699][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2349136   3892 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:57:00][353600815784699][294 ms][DEBUG] check_frida: running
[2025-08-21 13:57:00][353600815784699][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 13:57:00][353600815784699][294 ms][DEBUG] START check_scloud
[2025-08-21 13:57:00][353600815784699][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:57:00][353600815784699][816 ms][DEBUG] SU: done in 522 ms; outu0_a118       7086 20714 23994476 94292 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:57:00][353600815784699][816 ms][DEBUG] targetPkg: running
[2025-08-21 13:57:00][353600815784699][816 ms][DEBUG] END   check_scloud in 522 ms
[2025-08-21 13:57:00][353600815784699][816 ms][DEBUG] rawBody.length=1160
[2025-08-21 13:57:00][353600815784699][816 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODE1Nzg0Njk5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDIwQktNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NDcxIn0='" -e "main()" -q"
[2025-08-21 13:57:00][353600815784699][816 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:57:00][353600815784699][816 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODE1Nzg0Njk5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDIwQktNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NDcxIn0='" -e "main()" -q"
[2025-08-21 13:57:02][353600815784699][2800 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjAwODE1Nzg0Njk5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDIwQktNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NDcxIn0="\r\n
[2025-08-21 13:57:05][353600815784699][6112 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f012f5f4-5d7a-484f-9127-0c0c4eb0dea5","id":"QR_f012f5f4-5d7a-484f-9127-0c0c4eb0dea5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:57:05][353600815784699][6112 ms][DEBUG] proc_open done in 5296 ms; code=0; res.len=3152
[2025-08-21 13:57:05][353600815784699][6112 ms][DEBUG] END   runCmdUntilRes#1 in 5296 ms
[2025-08-21 13:57:05][353600815784699][6112 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:57:14][351477976266424][0 ms][INFO] === Request start ===
[2025-08-21 13:57:14][351477976266424][0 ms][DEBUG] START check_frida
[2025-08-21 13:57:14][351477976266424][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:57:14][351477976266424][371 ms][DEBUG] SU: done in 370 ms; outroot          4632     1 2349136   3904 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:57:14][351477976266424][371 ms][DEBUG] check_frida: running
[2025-08-21 13:57:14][351477976266424][371 ms][DEBUG] END   check_frida in 370 ms
[2025-08-21 13:57:14][351477976266424][371 ms][DEBUG] START check_scloud
[2025-08-21 13:57:14][351477976266424][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:57:15][351477976266424][933 ms][DEBUG] SU: done in 562 ms; outu0_a118       7086 20714 23994348 94712 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:57:15][351477976266424][933 ms][DEBUG] targetPkg: running
[2025-08-21 13:57:15][351477976266424][933 ms][DEBUG] END   check_scloud in 562 ms
[2025-08-21 13:57:15][351477976266424][933 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:57:15][351477976266424][933 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc2MjY2NDI0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMERON1ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxNCJ9'" -e "main()" -q"
[2025-08-21 13:57:15][351477976266424][933 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:57:15][351477976266424][933 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc2MjY2NDI0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMERON1ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxNCJ9'" -e "main()" -q"
[2025-08-21 13:57:17][351477976266424][2932 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDc3OTc2MjY2NDI0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMERON1ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgxNCJ9"\r\n
[2025-08-21 13:57:19][351477976266424][4869 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5d913ec-900a-4c04-b066-71cdebd0a019","id":"QR_a5d913ec-900a-4c04-b066-71cdebd0a019","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:57:19][351477976266424][4870 ms][DEBUG] proc_open done in 3936 ms; code=0; res.len=3152
[2025-08-21 13:57:19][351477976266424][4870 ms][DEBUG] END   runCmdUntilRes#1 in 3937 ms
[2025-08-21 13:57:19][351477976266424][4870 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:57:19][353662910639855][0 ms][INFO] === Request start ===
[2025-08-21 13:57:19][353662910639855][0 ms][DEBUG] START check_frida
[2025-08-21 13:57:19][353662910639855][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:57:19][353662910639855][449 ms][DEBUG] SU: done in 449 ms; outroot          4632     1 2349136   3920 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:57:19][353662910639855][449 ms][DEBUG] check_frida: running
[2025-08-21 13:57:19][353662910639855][449 ms][DEBUG] END   check_frida in 449 ms
[2025-08-21 13:57:19][353662910639855][449 ms][DEBUG] START check_scloud
[2025-08-21 13:57:19][353662910639855][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:57:20][353662910639855][808 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 23994220 95320 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:57:20][353662910639855][808 ms][DEBUG] targetPkg: running
[2025-08-21 13:57:20][353662910639855][808 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 13:57:20][353662910639855][808 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:57:20][353662910639855][809 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjYyOTEwNjM5ODU1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMERIUktWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTFAiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk3NiJ9'" -e "main()" -q"
[2025-08-21 13:57:20][353662910639855][809 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:57:20][353662910639855][809 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjYyOTEwNjM5ODU1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMERIUktWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTFAiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk3NiJ9'" -e "main()" -q"
[2025-08-21 13:57:22][353662910639855][2808 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjYyOTEwNjM5ODU1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMERIUktWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTFAiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk3NiJ9"\r\n
[2025-08-21 13:57:24][353662910639855][4698 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be98fd5e-84ee-4a49-8c43-c675f0ec8d2c","id":"QR_be98fd5e-84ee-4a49-8c43-c675f0ec8d2c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:57:24][353662910639855][4698 ms][DEBUG] proc_open done in 3889 ms; code=0; res.len=3152
[2025-08-21 13:57:24][353662910639855][4698 ms][DEBUG] END   runCmdUntilRes#1 in 3889 ms
[2025-08-21 13:57:24][353662910639855][4698 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:57:24][351477978822299][0 ms][INFO] === Request start ===
[2025-08-21 13:57:24][351477978822299][1 ms][DEBUG] START check_frida
[2025-08-21 13:57:24][351477978822299][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:57:25][351477978822299][417 ms][DEBUG] SU: done in 416 ms; outroot          4632     1 2349136   3936 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:57:25][351477978822299][417 ms][DEBUG] check_frida: running
[2025-08-21 13:57:25][351477978822299][417 ms][DEBUG] END   check_frida in 416 ms
[2025-08-21 13:57:25][351477978822299][417 ms][DEBUG] START check_scloud
[2025-08-21 13:57:25][351477978822299][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:57:25][351477978822299][792 ms][DEBUG] SU: done in 375 ms; outu0_a118       7086 20714 23994348 96008 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:57:25][351477978822299][792 ms][DEBUG] targetPkg: running
[2025-08-21 13:57:25][351477978822299][792 ms][DEBUG] END   check_scloud in 375 ms
[2025-08-21 13:57:25][351477978822299][792 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:57:25][351477978822299][792 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc4ODIyMjk5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDdIN1hGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjcwNSJ9'" -e "main()" -q"
[2025-08-21 13:57:25][351477978822299][792 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:57:25][351477978822299][792 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc4ODIyMjk5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDdIN1hGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjcwNSJ9'" -e "main()" -q"
[2025-08-21 13:57:27][351477978822299][2791 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDc3OTc4ODIyMjk5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDdIN1hGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjcwNSJ9"\r\n
[2025-08-21 13:57:29][351477978822299][4697 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e453d3e0-175b-48b8-bde2-f0c8c137c9c2","id":"QR_e453d3e0-175b-48b8-bde2-f0c8c137c9c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:57:29][351477978822299][4697 ms][DEBUG] proc_open done in 3905 ms; code=0; res.len=3152
[2025-08-21 13:57:29][351477978822299][4697 ms][DEBUG] END   runCmdUntilRes#1 in 3905 ms
[2025-08-21 13:57:29][351477978822299][4697 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:58:06][352060481217964][0 ms][INFO] === Request start ===
[2025-08-21 13:58:06][352060481217964][1 ms][DEBUG] START check_frida
[2025-08-21 13:58:06][352060481217964][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:58:06][352060481217964][500 ms][DEBUG] SU: done in 499 ms; outroot          4632     1 2332716   4000 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:58:06][352060481217964][500 ms][DEBUG] check_frida: running
[2025-08-21 13:58:06][352060481217964][500 ms][DEBUG] END   check_frida in 499 ms
[2025-08-21 13:58:06][352060481217964][500 ms][DEBUG] START check_internet
[2025-08-21 13:58:06][352060481217964][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 13:58:07][352060481217964][843 ms][DEBUG] SU: done in 342 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.492/223.492/223.492/0.000 ms\n
[2025-08-21 13:58:07][352060481217964][843 ms][DEBUG] check_internet: online
[2025-08-21 13:58:07][352060481217964][843 ms][DEBUG] END   check_internet in 343 ms
[2025-08-21 13:58:07][352060481217964][843 ms][DEBUG] START check_scloud
[2025-08-21 13:58:07][352060481217964][843 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:58:07][352060481217964][1171 ms][DEBUG] SU: done in 328 ms; outu0_a118       7086 20714 23978056 98156 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:58:07][352060481217964][1171 ms][DEBUG] targetPkg: running
[2025-08-21 13:58:07][352060481217964][1171 ms][DEBUG] END   check_scloud in 328 ms
[2025-08-21 13:58:07][352060481217964][1171 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:58:07][352060481217964][1171 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDYwNDgxMjE3OTY0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMDRGUzBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQ2NiJ9'" -e "main()" -q"
[2025-08-21 13:58:07][352060481217964][1171 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:58:07][352060481217964][1171 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDYwNDgxMjE3OTY0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMDRGUzBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQ2NiJ9'" -e "main()" -q"
[2025-08-21 13:58:09][352060481217964][3217 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDYwNDgxMjE3OTY0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMDRGUzBCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQ2NiJ9"\r\n
[2025-08-21 13:58:11][352060481217964][5513 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec4ee960-9eb2-4e84-9ec9-2ac67a4958c3","id":"QR_ec4ee960-9eb2-4e84-9ec9-2ac67a4958c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:58:11][352060481217964][5514 ms][DEBUG] proc_open done in 4342 ms; code=0; res.len=3152
[2025-08-21 13:58:11][352060481217964][5514 ms][DEBUG] END   runCmdUntilRes#1 in 4342 ms
[2025-08-21 13:58:11][352060481217964][5514 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 13:59:07][350616259090644][1 ms][INFO] === Request start ===
[2025-08-21 13:59:07][350616259090644][2 ms][DEBUG] START check_frida
[2025-08-21 13:59:07][350616259090644][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 13:59:07][350616259090644][547 ms][DEBUG] SU: done in 545 ms; outroot          4632     1 2332716   4012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 13:59:07][350616259090644][547 ms][DEBUG] check_frida: running
[2025-08-21 13:59:07][350616259090644][547 ms][DEBUG] END   check_frida in 545 ms
[2025-08-21 13:59:07][350616259090644][547 ms][DEBUG] START check_scloud
[2025-08-21 13:59:07][350616259090644][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 13:59:08][350616259090644][906 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 23978056 98692 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 13:59:08][350616259090644][906 ms][DEBUG] targetPkg: running
[2025-08-21 13:59:08][350616259090644][906 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 13:59:08][350616259090644][906 ms][DEBUG] rawBody.length=1161
[2025-08-21 13:59:08][350616259090644][906 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjE2MjU5MDkwNjQ0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNVZaTjFSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk0MCJ9'" -e "main()" -q"
[2025-08-21 13:59:08][350616259090644][906 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 13:59:08][350616259090644][906 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjE2MjU5MDkwNjQ0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNVZaTjFSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk0MCJ9'" -e "main()" -q"
[2025-08-21 13:59:10][350616259090644][2937 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjE2MjU5MDkwNjQ0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNVZaTjFSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk0MCJ9"\r\n
[2025-08-21 13:59:12][350616259090644][5343 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ebccd7f2-ba1d-44ff-9898-19d4c971639e","id":"QR_ebccd7f2-ba1d-44ff-9898-19d4c971639e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 13:59:12][350616259090644][5343 ms][DEBUG] proc_open done in 4436 ms; code=0; res.len=3152
[2025-08-21 13:59:12][350616259090644][5343 ms][DEBUG] END   runCmdUntilRes#1 in 4437 ms
[2025-08-21 13:59:12][350616259090644][5343 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:00:09][352208778445901][1 ms][INFO] === Request start ===
[2025-08-21 14:00:09][352208778445901][2 ms][DEBUG] START check_frida
[2025-08-21 14:00:09][352208778445901][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:00:09][352208778445901][338 ms][DEBUG] SU: done in 337 ms; outroot          4632     1 2332716   4024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:00:09][352208778445901][338 ms][DEBUG] check_frida: running
[2025-08-21 14:00:09][352208778445901][338 ms][DEBUG] END   check_frida in 337 ms
[2025-08-21 14:00:09][352208778445901][338 ms][DEBUG] START check_internet
[2025-08-21 14:00:09][352208778445901][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:00:10][352208778445901][619 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=183 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 183.113/183.113/183.113/0.000 ms\n
[2025-08-21 14:00:10][352208778445901][619 ms][DEBUG] check_internet: online
[2025-08-21 14:00:10][352208778445901][619 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 14:00:10][352208778445901][620 ms][DEBUG] START check_scloud
[2025-08-21 14:00:10][352208778445901][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:00:10][352208778445901][979 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 23978056 99284 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:00:10][352208778445901][979 ms][DEBUG] targetPkg: running
[2025-08-21 14:00:10][352208778445901][979 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 14:00:10][352208778445901][979 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:00:10][352208778445901][979 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjA4Nzc4NDQ1OTAxIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MllHODdWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk3MiJ9'" -e "main()" -q"
[2025-08-21 14:00:10][352208778445901][979 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:00:10][352208778445901][979 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjA4Nzc4NDQ1OTAxIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MllHODdWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk3MiJ9'" -e "main()" -q"
[2025-08-21 14:00:12][352208778445901][2994 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjA4Nzc4NDQ1OTAxIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0MllHODdWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk3MiJ9"\r\n
[2025-08-21 14:00:15][352208778445901][5415 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8de7a425-433b-42dc-9360-43c56e82e46f","id":"QR_8de7a425-433b-42dc-9360-43c56e82e46f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:00:15][352208778445901][5416 ms][DEBUG] proc_open done in 4437 ms; code=0; res.len=3152
[2025-08-21 14:00:15][352208778445901][5416 ms][DEBUG] END   runCmdUntilRes#1 in 4437 ms
[2025-08-21 14:00:15][352208778445901][5416 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:00:41][351695960324863][1 ms][INFO] === Request start ===
[2025-08-21 14:00:41][351695960324863][1 ms][DEBUG] START check_frida
[2025-08-21 14:00:41][351695960324863][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:00:41][351695960324863][513 ms][DEBUG] SU: done in 511 ms; outroot          4632     1 2332716   4016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:00:41][351695960324863][513 ms][DEBUG] check_frida: running
[2025-08-21 14:00:41][351695960324863][513 ms][DEBUG] END   check_frida in 511 ms
[2025-08-21 14:00:41][351695960324863][513 ms][DEBUG] START check_internet
[2025-08-21 14:00:41][351695960324863][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:00:42][351695960324863][841 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.589/216.589/216.589/0.000 ms\n
[2025-08-21 14:00:42][351695960324863][841 ms][DEBUG] check_internet: online
[2025-08-21 14:00:42][351695960324863][841 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 14:00:42][351695960324863][841 ms][DEBUG] START check_scloud
[2025-08-21 14:00:42][351695960324863][841 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:00:42][351695960324863][1138 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23978312 96808 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:00:42][351695960324863][1138 ms][DEBUG] targetPkg: running
[2025-08-21 14:00:42][351695960324863][1138 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:00:42][351695960324863][1138 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:00:42][351695960324863][1138 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjk1OTYwMzI0ODYzIiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDJFSlhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODM0In0='" -e "main()" -q"
[2025-08-21 14:00:42][351695960324863][1138 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:00:42][351695960324863][1138 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjk1OTYwMzI0ODYzIiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDJFSlhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODM0In0='" -e "main()" -q"
[2025-08-21 14:00:44][351695960324863][3137 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjk1OTYwMzI0ODYzIiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDJFSlhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODM0In0="\r\n
[2025-08-21 14:00:47][351695960324863][6449 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0e11bf2-8a32-4b17-a731-0d35a5281a2e","id":"QR_a0e11bf2-8a32-4b17-a731-0d35a5281a2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:00:47][351695960324863][6449 ms][DEBUG] proc_open done in 5311 ms; code=0; res.len=3152
[2025-08-21 14:00:47][351695960324863][6449 ms][DEBUG] END   runCmdUntilRes#1 in 5311 ms
[2025-08-21 14:00:47][351695960324863][6449 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:01:07][351771925767551][0 ms][INFO] === Request start ===
[2025-08-21 14:01:07][351771925767551][1 ms][DEBUG] START check_frida
[2025-08-21 14:01:07][351771925767551][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:01:08][351771925767551][497 ms][DEBUG] SU: done in 496 ms; outroot          4632     1 2332716   4008 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:01:08][351771925767551][497 ms][DEBUG] check_frida: running
[2025-08-21 14:01:08][351771925767551][497 ms][DEBUG] END   check_frida in 496 ms
[2025-08-21 14:01:08][351771925767551][497 ms][DEBUG] START check_scloud
[2025-08-21 14:01:08][351771925767551][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:01:08][351771925767551][903 ms][DEBUG] SU: done in 406 ms; outu0_a118       7086 20714 23978184 97300 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:01:08][351771925767551][903 ms][DEBUG] targetPkg: running
[2025-08-21 14:01:08][351771925767551][903 ms][DEBUG] END   check_scloud in 406 ms
[2025-08-21 14:01:08][351771925767551][903 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:01:08][351771925767551][903 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTI1NzY3NTUxIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMTlFMTdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc2NyJ9'" -e "main()" -q"
[2025-08-21 14:01:08][351771925767551][903 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:01:08][351771925767551][903 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTI1NzY3NTUxIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMTlFMTdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc2NyJ9'" -e "main()" -q"
[2025-08-21 14:01:10][351771925767551][2887 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzcxOTI1NzY3NTUxIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMTlFMTdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc2NyJ9"\r\n
[2025-08-21 14:01:12][351771925767551][5042 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee3fcc55-ceb5-4822-b728-d96a34ba9bb4","id":"QR_ee3fcc55-ceb5-4822-b728-d96a34ba9bb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:01:12][351771925767551][5043 ms][DEBUG] proc_open done in 4139 ms; code=0; res.len=3152
[2025-08-21 14:01:12][351771925767551][5043 ms][DEBUG] END   runCmdUntilRes#1 in 4139 ms
[2025-08-21 14:01:12][351771925767551][5043 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:01:27][352375458184850][0 ms][INFO] === Request start ===
[2025-08-21 14:01:27][352375458184850][1 ms][DEBUG] START check_frida
[2025-08-21 14:01:27][352375458184850][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:01:27][352375458184850][504 ms][DEBUG] SU: done in 503 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:01:27][352375458184850][504 ms][DEBUG] check_frida: running
[2025-08-21 14:01:27][352375458184850][504 ms][DEBUG] END   check_frida in 503 ms
[2025-08-21 14:01:27][352375458184850][504 ms][DEBUG] START check_scloud
[2025-08-21 14:01:27][352375458184850][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:01:28][352375458184850][957 ms][DEBUG] SU: done in 453 ms; outu0_a118       7086 20714 23978184 97816 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:01:28][352375458184850][958 ms][DEBUG] targetPkg: running
[2025-08-21 14:01:28][352375458184850][958 ms][DEBUG] END   check_scloud in 454 ms
[2025-08-21 14:01:28][352375458184850][958 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:01:28][352375458184850][958 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzc1NDU4MTg0ODUwIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MjlBSktQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU3NyJ9'" -e "main()" -q"
[2025-08-21 14:01:28][352375458184850][958 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:01:28][352375458184850][958 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzc1NDU4MTg0ODUwIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MjlBSktQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU3NyJ9'" -e "main()" -q"
[2025-08-21 14:01:30][352375458184850][2957 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzc1NDU4MTg0ODUwIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MjlBSktQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU3NyJ9"\r\n
[2025-08-21 14:01:32][352375458184850][5129 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_478bb0b1-00da-4517-b6ea-899449482503","id":"QR_478bb0b1-00da-4517-b6ea-899449482503","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:01:32][352375458184850][5130 ms][DEBUG] proc_open done in 4171 ms; code=0; res.len=3152
[2025-08-21 14:01:32][352375458184850][5130 ms][DEBUG] END   runCmdUntilRes#1 in 4171 ms
[2025-08-21 14:01:32][352375458184850][5130 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:02:06][350287319347760][0 ms][INFO] === Request start ===
[2025-08-21 14:02:06][350287319347760][1 ms][DEBUG] START check_frida
[2025-08-21 14:02:06][350287319347760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:02:07][350287319347760][495 ms][DEBUG] SU: done in 494 ms; outroot          4632     1 2332716   4004 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:02:07][350287319347760][495 ms][DEBUG] check_frida: running
[2025-08-21 14:02:07][350287319347760][496 ms][DEBUG] END   check_frida in 494 ms
[2025-08-21 14:02:07][350287319347760][496 ms][DEBUG] START check_internet
[2025-08-21 14:02:07][350287319347760][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:02:07][350287319347760][839 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=133 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 133.396/133.396/133.396/0.000 ms\n
[2025-08-21 14:02:07][350287319347760][839 ms][DEBUG] check_internet: online
[2025-08-21 14:02:07][350287319347760][839 ms][DEBUG] END   check_internet in 343 ms
[2025-08-21 14:02:07][350287319347760][839 ms][DEBUG] START check_scloud
[2025-08-21 14:02:07][350287319347760][839 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:02:07][350287319347760][1136 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23978440 99436 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:02:07][350287319347760][1136 ms][DEBUG] targetPkg: running
[2025-08-21 14:02:07][350287319347760][1136 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:02:07][350287319347760][1136 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:02:07][350287319347760][1137 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE5MzQ3NzYwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMERWR1pWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ1NSJ9'" -e "main()" -q"
[2025-08-21 14:02:07][350287319347760][1137 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:02:07][350287319347760][1137 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE5MzQ3NzYwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMERWR1pWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ1NSJ9'" -e "main()" -q"
[2025-08-21 14:02:09][350287319347760][3151 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjg3MzE5MzQ3NzYwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMERWR1pWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ1NSJ9"\r\n
[2025-08-21 14:02:11][350287319347760][4978 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5feb6352-450c-4ab9-8257-d32748c86421","id":"QR_5feb6352-450c-4ab9-8257-d32748c86421","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:02:11][350287319347760][4978 ms][DEBUG] proc_open done in 3841 ms; code=0; res.len=3152
[2025-08-21 14:02:11][350287319347760][4978 ms][DEBUG] END   runCmdUntilRes#1 in 3842 ms
[2025-08-21 14:02:11][350287319347760][4978 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:02:19][359897781503368][0 ms][INFO] === Request start ===
[2025-08-21 14:02:19][359897781503368][1 ms][DEBUG] START check_frida
[2025-08-21 14:02:19][359897781503368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:02:20][359897781503368][487 ms][DEBUG] SU: done in 486 ms; outroot          4632     1 2349136   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:02:20][359897781503368][487 ms][DEBUG] check_frida: running
[2025-08-21 14:02:20][359897781503368][487 ms][DEBUG] END   check_frida in 486 ms
[2025-08-21 14:02:20][359897781503368][487 ms][DEBUG] START check_internet
[2025-08-21 14:02:20][359897781503368][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:02:20][359897781503368][815 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.970/215.970/215.970/0.000 ms\n
[2025-08-21 14:02:20][359897781503368][815 ms][DEBUG] check_internet: online
[2025-08-21 14:02:20][359897781503368][815 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 14:02:20][359897781503368][815 ms][DEBUG] START check_scloud
[2025-08-21 14:02:20][359897781503368][815 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:02:20][359897781503368][1330 ms][DEBUG] SU: done in 515 ms; outu0_a118       7086 20714 23994604 99676 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:02:20][359897781503368][1330 ms][DEBUG] targetPkg: running
[2025-08-21 14:02:20][359897781503368][1330 ms][DEBUG] END   check_scloud in 515 ms
[2025-08-21 14:02:20][359897781503368][1330 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:02:20][359897781503368][1330 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5ODk3NzgxNTAzMzY4IiwibW9kZWwiOiJTTS1BMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5NFk0ME5QUEJMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMwNyJ9'" -e "main()" -q"
[2025-08-21 14:02:20][359897781503368][1330 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:02:20][359897781503368][1330 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5ODk3NzgxNTAzMzY4IiwibW9kZWwiOiJTTS1BMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5NFk0ME5QUEJMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMwNyJ9'" -e "main()" -q"
[2025-08-21 14:02:23][359897781503368][3345 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5ODk3NzgxNTAzMzY4IiwibW9kZWwiOiJTTS1BMTY2UCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5NFk0ME5QUEJMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMwNyJ9"\r\n
[2025-08-21 14:02:24][359897781503368][5126 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b5cf373-bbdd-4721-94b9-7640522cab1f","id":"QR_1b5cf373-bbdd-4721-94b9-7640522cab1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:02:24][359897781503368][5126 ms][DEBUG] proc_open done in 3796 ms; code=0; res.len=3152
[2025-08-21 14:02:24][359897781503368][5126 ms][DEBUG] END   runCmdUntilRes#1 in 3796 ms
[2025-08-21 14:02:24][359897781503368][5126 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:03:05][350220435184288][1 ms][INFO] === Request start ===
[2025-08-21 14:03:05][350220435184288][2 ms][DEBUG] START check_frida
[2025-08-21 14:03:05][350220435184288][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:03:06][350220435184288][461 ms][DEBUG] SU: done in 459 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:03:06][350220435184288][461 ms][DEBUG] check_frida: running
[2025-08-21 14:03:06][350220435184288][461 ms][DEBUG] END   check_frida in 459 ms
[2025-08-21 14:03:06][350220435184288][461 ms][DEBUG] START check_scloud
[2025-08-21 14:03:06][350220435184288][461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:03:06][350220435184288][992 ms][DEBUG] SU: done in 531 ms; outu0_a118       7086 20714 23979208 100788 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:03:06][350220435184288][992 ms][DEBUG] targetPkg: running
[2025-08-21 14:03:06][350220435184288][992 ms][DEBUG] END   check_scloud in 531 ms
[2025-08-21 14:03:06][350220435184288][992 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:03:06][350220435184288][992 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjIwNDM1MTg0Mjg4IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE5CMTdDU0tOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI4MSJ9'" -e "main()" -q"
[2025-08-21 14:03:06][350220435184288][992 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:03:06][350220435184288][992 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjIwNDM1MTg0Mjg4IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE5CMTdDU0tOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI4MSJ9'" -e "main()" -q"
[2025-08-21 14:03:08][350220435184288][3007 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjIwNDM1MTg0Mjg4IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE5CMTdDU0tOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI4MSJ9"\r\n
[2025-08-21 14:03:11][350220435184288][5553 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d1498b1-8cff-4e29-ad46-f83103f61040","id":"QR_9d1498b1-8cff-4e29-ad46-f83103f61040","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:03:11][350220435184288][5553 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-21 14:03:11][350220435184288][5553 ms][DEBUG] END   runCmdUntilRes#1 in 4561 ms
[2025-08-21 14:03:11][350220435184288][5553 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:03:12][351537276055197][0 ms][INFO] === Request start ===
[2025-08-21 14:03:12][351537276055197][1 ms][DEBUG] START check_frida
[2025-08-21 14:03:12][351537276055197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:03:12][351537276055197][495 ms][DEBUG] SU: done in 494 ms; outroot          4632     1 2349136   4020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:03:12][351537276055197][495 ms][DEBUG] check_frida: running
[2025-08-21 14:03:12][351537276055197][495 ms][DEBUG] END   check_frida in 494 ms
[2025-08-21 14:03:12][351537276055197][495 ms][DEBUG] START check_scloud
[2025-08-21 14:03:12][351537276055197][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:03:12][351537276055197][792 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23995628 98204 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:03:12][351537276055197][792 ms][DEBUG] targetPkg: running
[2025-08-21 14:03:12][351537276055197][792 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:03:12][351537276055197][792 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:03:12][351537276055197][792 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc2MDU1MTk3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODE0In0='" -e "main()" -q"
[2025-08-21 14:03:12][351537276055197][792 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:03:12][351537276055197][792 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc2MDU1MTk3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODE0In0='" -e "main()" -q"
[2025-08-21 14:03:14][351537276055197][2776 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTM3Mjc2MDU1MTk3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODE0In0="\r\n
[2025-08-21 14:03:16][351240643205625][1 ms][INFO] === Request start ===
[2025-08-21 14:03:19][351537276055197][7322 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa16154c-5b80-400a-ae71-bc6e04129436","id":"QR_fa16154c-5b80-400a-ae71-bc6e04129436","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:03:19][351537276055197][7322 ms][DEBUG] proc_open done in 6530 ms; code=0; res.len=3152
[2025-08-21 14:03:19][351537276055197][7322 ms][DEBUG] END   runCmdUntilRes#1 in 6530 ms
[2025-08-21 14:03:19][351537276055197][7322 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:03:19][351240643205625][3046 ms][DEBUG] START check_frida
[2025-08-21 14:03:19][351240643205625][3046 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:03:20][351240643205625][3405 ms][DEBUG] SU: done in 359 ms; outroot          4632     1 2349136   4016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:03:20][351240643205625][3405 ms][DEBUG] check_frida: running
[2025-08-21 14:03:20][351240643205625][3405 ms][DEBUG] END   check_frida in 359 ms
[2025-08-21 14:03:20][351240643205625][3405 ms][DEBUG] START check_scloud
[2025-08-21 14:03:20][351240643205625][3405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:03:20][351240643205625][3921 ms][DEBUG] SU: done in 516 ms; outu0_a118       7086 20714 23995372 98544 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:03:20][351240643205625][3921 ms][DEBUG] targetPkg: running
[2025-08-21 14:03:20][351240643205625][3921 ms][DEBUG] END   check_scloud in 516 ms
[2025-08-21 14:03:20][351240643205625][3921 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:03:20][351240643205625][3921 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQzMjA1NjI1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFBCNjNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzcwMSJ9'" -e "main()" -q"
[2025-08-21 14:03:20][351240643205625][3921 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:03:20][351240643205625][3921 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQzMjA1NjI1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFBCNjNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzcwMSJ9'" -e "main()" -q"
[2025-08-21 14:03:22][351240643205625][5905 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQzMjA1NjI1IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFBCNjNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzcwMSJ9"\r\n
[2025-08-21 14:03:24][351240643205625][7779 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e0b0bfb-80a9-466f-8af5-94d2551c4c97","id":"QR_6e0b0bfb-80a9-466f-8af5-94d2551c4c97","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:03:24][351240643205625][7779 ms][DEBUG] proc_open done in 3858 ms; code=0; res.len=3152
[2025-08-21 14:03:24][351240643205625][7779 ms][DEBUG] END   runCmdUntilRes#1 in 3858 ms
[2025-08-21 14:03:24][351240643205625][7779 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:03:25][351537271258010][0 ms][INFO] === Request start ===
[2025-08-21 14:03:25][351537271258010][1 ms][DEBUG] START check_frida
[2025-08-21 14:03:25][351537271258010][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:03:26][351537271258010][475 ms][DEBUG] SU: done in 474 ms; outroot          4632     1 2349136   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:03:26][351537271258010][475 ms][DEBUG] check_frida: running
[2025-08-21 14:03:26][351537271258010][475 ms][DEBUG] END   check_frida in 474 ms
[2025-08-21 14:03:26][351537271258010][475 ms][DEBUG] START check_scloud
[2025-08-21 14:03:26][351537271258010][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:03:26][351537271258010][834 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 23995756 99336 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:03:26][351537271258010][834 ms][DEBUG] targetPkg: running
[2025-08-21 14:03:26][351537271258010][834 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 14:03:26][351537271258010][834 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:03:26][351537271258010][834 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3MjcxMjU4MDEwIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1g5MDJOMFZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzcwMyJ9'" -e "main()" -q"
[2025-08-21 14:03:26][351537271258010][834 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:03:26][351537271258010][834 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3MjcxMjU4MDEwIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1g5MDJOMFZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzcwMyJ9'" -e "main()" -q"
[2025-08-21 14:03:28][351537271258010][2818 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTM3MjcxMjU4MDEwIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1g5MDJOMFZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzcwMyJ9"\r\n
[2025-08-21 14:03:30][351537271258010][4755 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f07ff326-5993-4be1-ba5e-0164cd84fbdb","id":"QR_f07ff326-5993-4be1-ba5e-0164cd84fbdb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:03:30][351537271258010][4755 ms][DEBUG] proc_open done in 3921 ms; code=0; res.len=3152
[2025-08-21 14:03:30][351537271258010][4755 ms][DEBUG] END   runCmdUntilRes#1 in 3921 ms
[2025-08-21 14:03:30][351537271258010][4755 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:04:04][355060830047226][0 ms][INFO] === Request start ===
[2025-08-21 14:04:04][355060830047226][1 ms][DEBUG] START check_frida
[2025-08-21 14:04:04][355060830047226][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:04:04][355060830047226][286 ms][DEBUG] SU: done in 285 ms; outroot          4632     1 2332716   4000 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:04:04][355060830047226][286 ms][DEBUG] check_frida: running
[2025-08-21 14:04:04][355060830047226][286 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 14:04:04][355060830047226][286 ms][DEBUG] START check_internet
[2025-08-21 14:04:04][355060830047226][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:04:04][355060830047226][645 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.288/253.288/253.288/0.000 ms\n
[2025-08-21 14:04:04][355060830047226][645 ms][DEBUG] check_internet: online
[2025-08-21 14:04:04][355060830047226][645 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 14:04:04][355060830047226][645 ms][DEBUG] START check_scloud
[2025-08-21 14:04:04][355060830047226][645 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:04:05][355060830047226][1036 ms][DEBUG] SU: done in 390 ms; outu0_a118       7086 20714 23979208 100044 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:04:05][355060830047226][1036 ms][DEBUG] targetPkg: running
[2025-08-21 14:04:05][355060830047226][1036 ms][DEBUG] END   check_scloud in 390 ms
[2025-08-21 14:04:05][355060830047226][1036 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:04:05][355060830047226][1036 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDYwODMwMDQ3MjI2IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MlcwWlFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDE1MyJ9'" -e "main()" -q"
[2025-08-21 14:04:05][355060830047226][1036 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:04:05][355060830047226][1036 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDYwODMwMDQ3MjI2IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MlcwWlFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDE1MyJ9'" -e "main()" -q"
[2025-08-21 14:04:07][355060830047226][3035 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDYwODMwMDQ3MjI2IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MlcwWlFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDE1MyJ9"\r\n
[2025-08-21 14:04:09][355060830047226][5331 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc09ca6f-2788-48c7-bd78-f53e6612ddff","id":"QR_fc09ca6f-2788-48c7-bd78-f53e6612ddff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:04:09][355060830047226][5332 ms][DEBUG] proc_open done in 4296 ms; code=0; res.len=3152
[2025-08-21 14:04:09][355060830047226][5332 ms][DEBUG] END   runCmdUntilRes#1 in 4296 ms
[2025-08-21 14:04:09][355060830047226][5332 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:06:09][354805111670752][1 ms][INFO] === Request start ===
[2025-08-21 14:06:09][354805111670752][2 ms][DEBUG] START check_frida
[2025-08-21 14:06:09][354805111670752][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:06:09][354740771377275][0 ms][INFO] === Request start ===
[2025-08-21 14:06:09][354805111670752][518 ms][DEBUG] SU: done in 516 ms; outroot          4632     1 2332716   4020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:06:09][354805111670752][518 ms][DEBUG] check_frida: running
[2025-08-21 14:06:09][354805111670752][518 ms][DEBUG] END   check_frida in 516 ms
[2025-08-21 14:06:09][354805111670752][518 ms][DEBUG] START check_internet
[2025-08-21 14:06:09][354805111670752][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:06:10][354805111670752][1032 ms][DEBUG] SU: done in 514 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.177/202.177/202.177/0.000 ms\n
[2025-08-21 14:06:10][354805111670752][1032 ms][DEBUG] check_internet: online
[2025-08-21 14:06:10][354805111670752][1032 ms][DEBUG] END   check_internet in 514 ms
[2025-08-21 14:06:10][354805111670752][1032 ms][DEBUG] START check_scloud
[2025-08-21 14:06:10][354805111670752][1032 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:06:10][354805111670752][1330 ms][DEBUG] SU: done in 298 ms; outu0_a118       7086 20714 23979208 101352 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:06:10][354805111670752][1330 ms][DEBUG] targetPkg: running
[2025-08-21 14:06:10][354805111670752][1330 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 14:06:10][354805111670752][1330 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:06:10][354805111670752][1330 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0ODA1MTExNjcwNzUyIiwibW9kZWwiOiJTTS1HOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1IzMDZHVDdWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLU0EiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg3NiJ9'" -e "main()" -q"
[2025-08-21 14:06:10][354805111670752][1330 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:06:10][354805111670752][1330 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0ODA1MTExNjcwNzUyIiwibW9kZWwiOiJTTS1HOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1IzMDZHVDdWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLU0EiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg3NiJ9'" -e "main()" -q"
[2025-08-21 14:06:12][354805111670752][3359 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0ODA1MTExNjcwNzUyIiwibW9kZWwiOiJTTS1HOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1IzMDZHVDdWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLU0EiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg3NiJ9"\r\n
[2025-08-21 14:06:15][354805111670752][5827 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24737fc8-2bd3-4b11-8818-19c198e58267","id":"QR_24737fc8-2bd3-4b11-8818-19c198e58267","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:06:15][354805111670752][5828 ms][DEBUG] proc_open done in 4498 ms; code=0; res.len=3152
[2025-08-21 14:06:15][354805111670752][5828 ms][DEBUG] END   runCmdUntilRes#1 in 4498 ms
[2025-08-21 14:06:15][354805111670752][5828 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:06:15][354740771377275][6093 ms][DEBUG] START check_frida
[2025-08-21 14:06:15][354740771377275][6093 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:06:15][354740771377275][6375 ms][DEBUG] SU: done in 282 ms; outroot          4632     1 2349136   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:06:15][354740771377275][6375 ms][DEBUG] check_frida: running
[2025-08-21 14:06:15][354740771377275][6375 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 14:06:15][354740771377275][6375 ms][DEBUG] START check_internet
[2025-08-21 14:06:15][354740771377275][6375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:06:15][354740771377275][6639 ms][DEBUG] SU: done in 264 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=148 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 148.307/148.307/148.307/0.000 ms\n
[2025-08-21 14:06:15][354740771377275][6639 ms][DEBUG] check_internet: online
[2025-08-21 14:06:15][354740771377275][6639 ms][DEBUG] END   check_internet in 264 ms
[2025-08-21 14:06:15][354740771377275][6639 ms][DEBUG] START check_scloud
[2025-08-21 14:06:15][354740771377275][6639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:06:16][354740771377275][7139 ms][DEBUG] SU: done in 500 ms; outu0_a118       7086 20714 23995372 101580 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:06:16][354740771377275][7139 ms][DEBUG] targetPkg: running
[2025-08-21 14:06:16][354740771377275][7139 ms][DEBUG] END   check_scloud in 500 ms
[2025-08-21 14:06:16][354740771377275][7140 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:06:16][354740771377275][7140 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQwNzcxMzc3Mjc1IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1ME1KMDBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA0NiJ9'" -e "main()" -q"
[2025-08-21 14:06:16][354740771377275][7140 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:06:16][354740771377275][7140 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQwNzcxMzc3Mjc1IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1ME1KMDBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA0NiJ9'" -e "main()" -q"
[2025-08-21 14:06:18][354740771377275][9139 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQwNzcxMzc3Mjc1IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1ME1KMDBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA0NiJ9"\r\n
[2025-08-21 14:06:20][354740771377275][11045 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e9d15df-9260-4158-b0f0-7a2f86b5642e","id":"QR_9e9d15df-9260-4158-b0f0-7a2f86b5642e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:06:20][354740771377275][11045 ms][DEBUG] proc_open done in 3905 ms; code=0; res.len=3152
[2025-08-21 14:06:20][354740771377275][11045 ms][DEBUG] END   runCmdUntilRes#1 in 3905 ms
[2025-08-21 14:06:20][354740771377275][11045 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:06:22][351642483169359][0 ms][INFO] === Request start ===
[2025-08-21 14:06:22][351642483169359][0 ms][DEBUG] START check_frida
[2025-08-21 14:06:22][351642483169359][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:06:22][351642483169359][364 ms][DEBUG] SU: done in 364 ms; outroot          4632     1 2349136   4016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:06:22][351642483169359][364 ms][DEBUG] check_frida: running
[2025-08-21 14:06:22][351642483169359][364 ms][DEBUG] END   check_frida in 364 ms
[2025-08-21 14:06:22][351642483169359][364 ms][DEBUG] START check_internet
[2025-08-21 14:06:22][351642483169359][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:06:22][351642483169359][708 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.451/235.451/235.451/0.000 ms\n
[2025-08-21 14:06:22][351642483169359][708 ms][DEBUG] check_internet: online
[2025-08-21 14:06:22][351642483169359][708 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 14:06:22][351642483169359][708 ms][DEBUG] START check_scloud
[2025-08-21 14:06:22][351642483169359][708 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:06:23][351642483169359][1004 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23995756 99792 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:06:23][351642483169359][1004 ms][DEBUG] targetPkg: running
[2025-08-21 14:06:23][351642483169359][1004 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:06:23][351642483169359][1004 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:06:23][351642483169359][1005 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDgzMTY5MzU5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDc0MDVZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1MiJ9'" -e "main()" -q"
[2025-08-21 14:06:23][351642483169359][1005 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:06:23][351642483169359][1005 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDgzMTY5MzU5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDc0MDVZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1MiJ9'" -e "main()" -q"
[2025-08-21 14:06:25][351642483169359][3004 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjQyNDgzMTY5MzU5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDc0MDVZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1MiJ9"\r\n
[2025-08-21 14:06:26][351642483169359][4878 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a9e1755-5e0f-44ad-a23c-b85f3ee1b4ea","id":"QR_8a9e1755-5e0f-44ad-a23c-b85f3ee1b4ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:06:26][351642483169359][4878 ms][DEBUG] proc_open done in 3874 ms; code=0; res.len=3152
[2025-08-21 14:06:26][351642483169359][4878 ms][DEBUG] END   runCmdUntilRes#1 in 3874 ms
[2025-08-21 14:06:26][351642483169359][4878 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:06:37][357042147076864][1 ms][INFO] === Request start ===
[2025-08-21 14:06:37][357042147076864][1 ms][DEBUG] START check_frida
[2025-08-21 14:06:37][357042147076864][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:06:38][357042147076864][512 ms][DEBUG] SU: done in 511 ms; outroot          4632     1 2349136   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:06:38][357042147076864][512 ms][DEBUG] check_frida: running
[2025-08-21 14:06:38][357042147076864][512 ms][DEBUG] END   check_frida in 511 ms
[2025-08-21 14:06:38][357042147076864][512 ms][DEBUG] START check_internet
[2025-08-21 14:06:38][357042147076864][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:06:38][357042147076864][856 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.068/222.068/222.068/0.000 ms\n
[2025-08-21 14:06:38][357042147076864][856 ms][DEBUG] check_internet: online
[2025-08-21 14:06:38][357042147076864][856 ms][DEBUG] END   check_internet in 343 ms
[2025-08-21 14:06:38][357042147076864][856 ms][DEBUG] START check_scloud
[2025-08-21 14:06:38][357042147076864][856 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:06:38][357042147076864][1231 ms][DEBUG] SU: done in 375 ms; outu0_a118       7086 20714 23995756 100356 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:06:38][357042147076864][1231 ms][DEBUG] targetPkg: running
[2025-08-21 14:06:38][357042147076864][1231 ms][DEBUG] END   check_scloud in 375 ms
[2025-08-21 14:06:38][357042147076864][1231 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:06:38][357042147076864][1231 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQyMTQ3MDc2ODY0IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MllGTkZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzMyJ9'" -e "main()" -q"
[2025-08-21 14:06:38][357042147076864][1231 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:06:38][357042147076864][1231 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQyMTQ3MDc2ODY0IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MllGTkZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzMyJ9'" -e "main()" -q"
[2025-08-21 14:06:40][357042147076864][3230 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MDQyMTQ3MDc2ODY0IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MllGTkZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzMyJ9"\r\n
[2025-08-21 14:06:42][357042147076864][5245 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6f13fba-fa30-4fa3-9da3-cfeccaf1499d","id":"QR_f6f13fba-fa30-4fa3-9da3-cfeccaf1499d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:06:42][357042147076864][5245 ms][DEBUG] proc_open done in 4014 ms; code=0; res.len=3152
[2025-08-21 14:06:42][357042147076864][5245 ms][DEBUG] END   runCmdUntilRes#1 in 4014 ms
[2025-08-21 14:06:42][357042147076864][5245 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:08:10][354756101814860][0 ms][INFO] === Request start ===
[2025-08-21 14:08:10][354756101814860][0 ms][DEBUG] START check_frida
[2025-08-21 14:08:10][354756101814860][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:08:10][354756101814860][283 ms][DEBUG] SU: done in 283 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:08:10][354756101814860][283 ms][DEBUG] check_frida: running
[2025-08-21 14:08:10][354756101814860][283 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 14:08:10][354756101814860][283 ms][DEBUG] START check_internet
[2025-08-21 14:08:10][354756101814860][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:08:11][354756101814860][596 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.971/211.971/211.971/0.000 ms\n
[2025-08-21 14:08:11][354756101814860][596 ms][DEBUG] check_internet: online
[2025-08-21 14:08:11][354756101814860][596 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 14:08:11][354756101814860][596 ms][DEBUG] START check_scloud
[2025-08-21 14:08:11][354756101814860][596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:08:11][354756101814860][924 ms][DEBUG] SU: done in 328 ms; outu0_a118       7086 20714 23979336 100880 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:08:11][354756101814860][924 ms][DEBUG] targetPkg: running
[2025-08-21 14:08:11][354756101814860][924 ms][DEBUG] END   check_scloud in 328 ms
[2025-08-21 14:08:11][354756101814860][924 ms][DEBUG] rawBody.length=1159
[2025-08-21 14:08:11][354756101814860][924 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzU2MTAxODE0ODYwIiwibW9kZWwiOiJTTS1QNjEzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzEwQVlMNk0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEZBIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY4MDYifQ=='" -e "main()" -q"
[2025-08-21 14:08:11][354756101814860][924 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:08:11][354756101814860][924 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzU2MTAxODE0ODYwIiwibW9kZWwiOiJTTS1QNjEzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzEwQVlMNk0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEZBIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY4MDYifQ=='" -e "main()" -q"
[2025-08-21 14:08:13][354756101814860][2923 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzU2MTAxODE0ODYwIiwibW9kZWwiOiJTTS1QNjEzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzEwQVlMNk0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEZBIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY4MDYifQ=="\r\n
[2025-08-21 14:08:16][354756101814860][5704 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c97d240-0c8e-4944-989e-cb4d59f502e9","id":"QR_5c97d240-0c8e-4944-989e-cb4d59f502e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:08:16][354756101814860][5704 ms][DEBUG] proc_open done in 4780 ms; code=0; res.len=3152
[2025-08-21 14:08:16][354756101814860][5704 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-21 14:08:16][354756101814860][5704 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:09:05][350814495550105][1 ms][INFO] === Request start ===
[2025-08-21 14:09:05][350814495550105][2 ms][DEBUG] START check_frida
[2025-08-21 14:09:05][350814495550105][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:09:05][350814495550105][500 ms][DEBUG] SU: done in 498 ms; outroot          4632     1 2332716   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:09:05][350814495550105][500 ms][DEBUG] check_frida: running
[2025-08-21 14:09:05][350814495550105][500 ms][DEBUG] END   check_frida in 498 ms
[2025-08-21 14:09:05][350814495550105][500 ms][DEBUG] START check_scloud
[2025-08-21 14:09:05][350814495550105][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:09:06][350814495550105][984 ms][DEBUG] SU: done in 484 ms; outu0_a118       7086 20714 23979400 101464 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:09:06][350814495550105][984 ms][DEBUG] targetPkg: running
[2025-08-21 14:09:06][350814495550105][984 ms][DEBUG] END   check_scloud in 484 ms
[2025-08-21 14:09:06][350814495550105][984 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:09:06][350814495550105][984 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk1NTUwMTA1IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMDY0SDRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQxOCJ9'" -e "main()" -q"
[2025-08-21 14:09:06][350814495550105][984 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:09:06][350814495550105][984 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk1NTUwMTA1IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMDY0SDRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQxOCJ9'" -e "main()" -q"
[2025-08-21 14:09:08][350814495550105][2984 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODE0NDk1NTUwMTA1IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMDY0SDRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQxOCJ9"\r\n
[2025-08-21 14:09:10][350814495550105][5358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a129a52-7765-40d0-960b-0006a6e4bb16","id":"QR_3a129a52-7765-40d0-960b-0006a6e4bb16","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:09:10][350814495550105][5358 ms][DEBUG] proc_open done in 4374 ms; code=0; res.len=3152
[2025-08-21 14:09:10][350814495550105][5358 ms][DEBUG] END   runCmdUntilRes#1 in 4374 ms
[2025-08-21 14:09:10][350814495550105][5358 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:10:09][356115230337087][1 ms][INFO] === Request start ===
[2025-08-21 14:10:09][356115230337087][2 ms][DEBUG] START check_frida
[2025-08-21 14:10:09][356115230337087][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:10:09][356115230337087][511 ms][DEBUG] SU: done in 510 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:10:09][356115230337087][511 ms][DEBUG] check_frida: running
[2025-08-21 14:10:09][356115230337087][511 ms][DEBUG] END   check_frida in 510 ms
[2025-08-21 14:10:09][356115230337087][512 ms][DEBUG] START check_internet
[2025-08-21 14:10:09][356115230337087][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:10:09][356115230337087][888 ms][DEBUG] SU: done in 376 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.717/257.717/257.717/0.000 ms\n
[2025-08-21 14:10:09][356115230337087][888 ms][DEBUG] check_internet: online
[2025-08-21 14:10:09][356115230337087][888 ms][DEBUG] END   check_internet in 376 ms
[2025-08-21 14:10:09][356115230337087][888 ms][DEBUG] START check_scloud
[2025-08-21 14:10:09][356115230337087][888 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:10:10][356115230337087][1261 ms][DEBUG] SU: done in 373 ms; outu0_a118       7086 20714 23979272 99696 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:10:10][356115230337087][1261 ms][DEBUG] targetPkg: running
[2025-08-21 14:10:10][356115230337087][1261 ms][DEBUG] END   check_scloud in 373 ms
[2025-08-21 14:10:10][356115230337087][1262 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:10:10][356115230337087][1262 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MTE1MjMwMzM3MDg3IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1MkE4ODdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzkwIn0='" -e "main()" -q"
[2025-08-21 14:10:10][356115230337087][1262 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:10:10][356115230337087][1262 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MTE1MjMwMzM3MDg3IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1MkE4ODdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzkwIn0='" -e "main()" -q"
[2025-08-21 14:10:12][356115230337087][3276 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MTE1MjMwMzM3MDg3IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1MkE4ODdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzkwIn0="\r\n
[2025-08-21 14:10:15][356115230337087][6713 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97048e71-4cf7-4009-b1d7-e33165d97919","id":"QR_97048e71-4cf7-4009-b1d7-e33165d97919","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:10:15][356115230337087][6713 ms][DEBUG] proc_open done in 5451 ms; code=0; res.len=3152
[2025-08-21 14:10:15][356115230337087][6713 ms][DEBUG] END   runCmdUntilRes#1 in 5451 ms
[2025-08-21 14:10:15][356115230337087][6713 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:10:23][357026891388435][0 ms][INFO] === Request start ===
[2025-08-21 14:10:23][357026891388435][1 ms][DEBUG] START check_frida
[2025-08-21 14:10:23][357026891388435][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:10:24][357026891388435][350 ms][DEBUG] SU: done in 349 ms; outroot          4632     1 2349136   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:10:24][357026891388435][350 ms][DEBUG] check_frida: running
[2025-08-21 14:10:24][357026891388435][350 ms][DEBUG] END   check_frida in 349 ms
[2025-08-21 14:10:24][357026891388435][350 ms][DEBUG] START check_internet
[2025-08-21 14:10:24][357026891388435][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:10:24][357026891388435][850 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.642/201.642/201.642/0.000 ms\n
[2025-08-21 14:10:24][357026891388435][850 ms][DEBUG] check_internet: online
[2025-08-21 14:10:24][357026891388435][850 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 14:10:24][357026891388435][850 ms][DEBUG] START check_scloud
[2025-08-21 14:10:24][357026891388435][850 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:10:25][357026891388435][1366 ms][DEBUG] SU: done in 515 ms; outu0_a118       7086 20714 23995564 100324 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:10:25][357026891388435][1366 ms][DEBUG] targetPkg: running
[2025-08-21 14:10:25][357026891388435][1366 ms][DEBUG] END   check_scloud in 515 ms
[2025-08-21 14:10:25][357026891388435][1366 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:10:25][357026891388435][1366 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDI2ODkxMzg4NDM1IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI5MTFXWUhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI3NiJ9'" -e "main()" -q"
[2025-08-21 14:10:25][357026891388435][1366 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:10:25][357026891388435][1366 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDI2ODkxMzg4NDM1IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI5MTFXWUhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI3NiJ9'" -e "main()" -q"
[2025-08-21 14:10:27][357026891388435][3365 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MDI2ODkxMzg4NDM1IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI5MTFXWUhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI3NiJ9"\r\n
[2025-08-21 14:10:29][357026891388435][5818 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a60677a4-fa13-498e-ae16-1e27e86e2d5d","id":"QR_a60677a4-fa13-498e-ae16-1e27e86e2d5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:10:29][357026891388435][5818 ms][DEBUG] proc_open done in 4452 ms; code=0; res.len=3152
[2025-08-21 14:10:29][357026891388435][5818 ms][DEBUG] END   runCmdUntilRes#1 in 4452 ms
[2025-08-21 14:10:29][357026891388435][5818 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:10:36][358212588042993][0 ms][INFO] === Request start ===
[2025-08-21 14:10:36][358212588042993][1 ms][DEBUG] START check_frida
[2025-08-21 14:10:36][358212588042993][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:10:37][358212588042993][361 ms][DEBUG] SU: done in 360 ms; outroot          4632     1 2349136   4048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:10:37][358212588042993][361 ms][DEBUG] check_frida: running
[2025-08-21 14:10:37][358212588042993][361 ms][DEBUG] END   check_frida in 360 ms
[2025-08-21 14:10:37][358212588042993][361 ms][DEBUG] START check_internet
[2025-08-21 14:10:37][358212588042993][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:10:37][358212588042993][673 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.080/189.080/189.080/0.000 ms\n
[2025-08-21 14:10:37][358212588042993][674 ms][DEBUG] check_internet: online
[2025-08-21 14:10:37][358212588042993][674 ms][DEBUG] END   check_internet in 313 ms
[2025-08-21 14:10:37][358212588042993][674 ms][DEBUG] START check_scloud
[2025-08-21 14:10:37][358212588042993][674 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:10:37][358212588042993][1033 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 23995692 101012 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:10:37][358212588042993][1033 ms][DEBUG] targetPkg: running
[2025-08-21 14:10:37][358212588042993][1033 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 14:10:37][358212588042993][1033 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:10:37][358212588042993][1033 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MjEyNTg4MDQyOTkzIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMFFFVzNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzAwOCJ9'" -e "main()" -q"
[2025-08-21 14:10:37][358212588042993][1033 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:10:37][358212588042993][1033 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MjEyNTg4MDQyOTkzIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMFFFVzNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzAwOCJ9'" -e "main()" -q"
[2025-08-21 14:10:39][358212588042993][3079 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MjEyNTg4MDQyOTkzIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdCMFFFVzNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzAwOCJ9"\r\n
[2025-08-21 14:10:41][358212588042993][5063 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8ede965-8976-4ca0-9f9b-b9ba8092c78a","id":"QR_e8ede965-8976-4ca0-9f9b-b9ba8092c78a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:10:41][358212588042993][5063 ms][DEBUG] proc_open done in 4030 ms; code=0; res.len=3152
[2025-08-21 14:10:41][358212588042993][5063 ms][DEBUG] END   runCmdUntilRes#1 in 4030 ms
[2025-08-21 14:10:41][358212588042993][5063 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:12:08][352590527093169][1 ms][INFO] === Request start ===
[2025-08-21 14:12:08][352590527093169][2 ms][DEBUG] START check_frida
[2025-08-21 14:12:08][352590527093169][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:12:08][352590527093169][440 ms][DEBUG] SU: done in 438 ms; outroot          4632     1 2332716   4008 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:12:08][352590527093169][440 ms][DEBUG] check_frida: running
[2025-08-21 14:12:08][352590527093169][440 ms][DEBUG] END   check_frida in 438 ms
[2025-08-21 14:12:08][352590527093169][440 ms][DEBUG] START check_internet
[2025-08-21 14:12:08][352590527093169][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:12:08][352590527093169][829 ms][DEBUG] SU: done in 389 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.642/257.642/257.642/0.000 ms\n
[2025-08-21 14:12:08][352590527093169][830 ms][DEBUG] check_internet: online
[2025-08-21 14:12:08][352590527093169][830 ms][DEBUG] END   check_internet in 390 ms
[2025-08-21 14:12:08][352590527093169][830 ms][DEBUG] START check_scloud
[2025-08-21 14:12:08][352590527093169][830 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:12:09][352590527093169][1204 ms][DEBUG] SU: done in 375 ms; outu0_a118       7086 20714 23979208 101496 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:12:09][352590527093169][1205 ms][DEBUG] targetPkg: running
[2025-08-21 14:12:09][352590527093169][1205 ms][DEBUG] END   check_scloud in 375 ms
[2025-08-21 14:12:09][352590527093169][1205 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:12:09][352590527093169][1205 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTkwNTI3MDkzMTY5IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg0MiJ9'" -e "main()" -q"
[2025-08-21 14:12:09][352590527093169][1205 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:12:09][352590527093169][1205 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTkwNTI3MDkzMTY5IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg0MiJ9'" -e "main()" -q"
[2025-08-21 14:12:11][352590527093169][3219 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTkwNTI3MDkzMTY5IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg0MiJ9"\r\n
[2025-08-21 14:12:13][352590527093169][5235 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 14:12:13][352590527093169][5235 ms][DEBUG] proc_open done in 4030 ms; code=0; res.len=115
[2025-08-21 14:12:13][352590527093169][5235 ms][DEBUG] END   runCmdUntilRes#1 in 4030 ms
[2025-08-21 14:12:13][352590527093169][5235 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 14:12:13][][0 ms][INFO] === Request start ===
[2025-08-21 14:12:13][][1 ms][DEBUG] START check_frida
[2025-08-21 14:12:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:12:13][][318 ms][DEBUG] SU: done in 317 ms; outroot          4632     1 2349136   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:12:13][][319 ms][DEBUG] check_frida: running
[2025-08-21 14:12:13][][319 ms][DEBUG] END   check_frida in 318 ms
[2025-08-21 14:12:13][][319 ms][DEBUG] START check_internet
[2025-08-21 14:12:13][][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:12:14][][584 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.321/146.321/146.321/0.000 ms\n
[2025-08-21 14:12:14][][584 ms][DEBUG] check_internet: online
[2025-08-21 14:12:14][][584 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 14:12:14][][584 ms][DEBUG] START check_scloud
[2025-08-21 14:12:14][][585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:12:14][][959 ms][DEBUG] SU: done in 374 ms; outu0_a118       7086 20714 23995564 99924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:12:14][][959 ms][DEBUG] targetPkg: running
[2025-08-21 14:12:14][][959 ms][DEBUG] END   check_scloud in 375 ms
[2025-08-21 14:12:14][][959 ms][DEBUG] rawBody.length=1131
[2025-08-21 14:12:14][][959 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUyNiJ9'" -e "main()" -q"
[2025-08-21 14:12:14][][959 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:12:14][][959 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUyNiJ9'" -e "main()" -q"
[2025-08-21 14:12:16][][3036 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUyNiJ9"\r\n
[2025-08-21 14:12:18][][4786 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 14:12:18][][4786 ms][DEBUG] proc_open done in 3827 ms; code=0; res.len=107
[2025-08-21 14:12:18][][4786 ms][DEBUG] END   runCmdUntilRes#1 in 3827 ms
[2025-08-21 14:12:18][][4786 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 14:12:18][][0 ms][INFO] === Request start ===
[2025-08-21 14:12:18][][1 ms][DEBUG] START check_frida
[2025-08-21 14:12:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:12:19][][462 ms][DEBUG] SU: done in 461 ms; outroot          4632     1 2349136   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:12:19][][462 ms][DEBUG] check_frida: running
[2025-08-21 14:12:19][][462 ms][DEBUG] END   check_frida in 461 ms
[2025-08-21 14:12:19][][462 ms][DEBUG] START check_internet
[2025-08-21 14:12:19][][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:12:19][][712 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.155/143.155/143.155/0.000 ms\n
[2025-08-21 14:12:19][][712 ms][DEBUG] check_internet: online
[2025-08-21 14:12:19][][712 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 14:12:19][][712 ms][DEBUG] START check_scloud
[2025-08-21 14:12:19][][712 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:12:19][][1087 ms][DEBUG] SU: done in 375 ms; outu0_a118       7086 20714 23995692 100604 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:12:19][][1087 ms][DEBUG] targetPkg: running
[2025-08-21 14:12:19][][1087 ms][DEBUG] END   check_scloud in 375 ms
[2025-08-21 14:12:19][][1087 ms][DEBUG] rawBody.length=1131
[2025-08-21 14:12:19][][1087 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA5NyJ9'" -e "main()" -q"
[2025-08-21 14:12:19][][1087 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:12:19][][1087 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA5NyJ9'" -e "main()" -q"
[2025-08-21 14:12:21][][3070 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA5NyJ9"\r\n
[2025-08-21 14:12:23][][4992 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 14:12:23][][4992 ms][DEBUG] proc_open done in 3905 ms; code=0; res.len=107
[2025-08-21 14:12:23][][4992 ms][DEBUG] END   runCmdUntilRes#1 in 3905 ms
[2025-08-21 14:12:23][][4992 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 14:12:25][352590527093169][0 ms][INFO] === Request start ===
[2025-08-21 14:12:25][352590527093169][1 ms][DEBUG] START check_frida
[2025-08-21 14:12:25][352590527093169][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:12:26][352590527093169][479 ms][DEBUG] SU: done in 478 ms; outroot          4632     1 2349136   4024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:12:26][352590527093169][479 ms][DEBUG] check_frida: running
[2025-08-21 14:12:26][352590527093169][479 ms][DEBUG] END   check_frida in 478 ms
[2025-08-21 14:12:26][352590527093169][479 ms][DEBUG] START check_internet
[2025-08-21 14:12:26][352590527093169][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:12:26][352590527093169][854 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.189/256.189/256.189/0.000 ms\n
[2025-08-21 14:12:26][352590527093169][854 ms][DEBUG] check_internet: online
[2025-08-21 14:12:26][352590527093169][854 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 14:12:26][352590527093169][854 ms][DEBUG] START check_scloud
[2025-08-21 14:12:26][352590527093169][854 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:12:26][352590527093169][1213 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 23995692 101184 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:12:26][352590527093169][1213 ms][DEBUG] targetPkg: running
[2025-08-21 14:12:26][352590527093169][1213 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 14:12:26][352590527093169][1213 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:12:26][352590527093169][1213 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTkwNTI3MDkzMTY5IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFQiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NTQ4In0='" -e "main()" -q"
[2025-08-21 14:12:26][352590527093169][1213 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:12:26][352590527093169][1213 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTkwNTI3MDkzMTY5IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFQiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NTQ4In0='" -e "main()" -q"
[2025-08-21 14:12:27][353335861215112][1 ms][INFO] === Request start ===
[2025-08-21 14:12:28][352590527093169][3197 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTkwNTI3MDkzMTY5IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFQiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NTQ4In0="\r\n
[2025-08-21 14:12:34][352590527093169][8727 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f18b9106-f8ef-4463-8be2-126fe4790384","id":"QR_f18b9106-f8ef-4463-8be2-126fe4790384","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:12:34][352590527093169][8727 ms][DEBUG] proc_open done in 7514 ms; code=0; res.len=3152
[2025-08-21 14:12:34][352590527093169][8727 ms][DEBUG] END   runCmdUntilRes#1 in 7514 ms
[2025-08-21 14:12:34][352590527093169][8727 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:12:35][353335861215112][7109 ms][DEBUG] START check_frida
[2025-08-21 14:12:35][353335861215112][7109 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:12:35][353335861215112][7578 ms][DEBUG] SU: done in 469 ms; outroot          4632     1 2349136   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:12:35][353335861215112][7578 ms][DEBUG] check_frida: running
[2025-08-21 14:12:35][353335861215112][7578 ms][DEBUG] END   check_frida in 469 ms
[2025-08-21 14:12:35][353335861215112][7578 ms][DEBUG] START check_internet
[2025-08-21 14:12:35][353335861215112][7578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:12:35][353335861215112][7874 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=177 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 177.638/177.638/177.638/0.000 ms\n
[2025-08-21 14:12:35][353335861215112][7874 ms][DEBUG] check_internet: online
[2025-08-21 14:12:35][353335861215112][7874 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 14:12:35][353335861215112][7874 ms][DEBUG] START check_scloud
[2025-08-21 14:12:35][353335861215112][7874 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:12:36][353335861215112][8234 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 23995564 101612 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:12:36][353335861215112][8234 ms][DEBUG] targetPkg: running
[2025-08-21 14:12:36][353335861215112][8234 ms][DEBUG] END   check_scloud in 360 ms
[2025-08-21 14:12:36][353335861215112][8234 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:12:36][353335861215112][8234 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzM1ODYxMjE1MTEyIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFg4MDFCWEdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NjcxIn0='" -e "main()" -q"
[2025-08-21 14:12:36][353335861215112][8234 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:12:36][353335861215112][8234 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzM1ODYxMjE1MTEyIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFg4MDFCWEdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NjcxIn0='" -e "main()" -q"
[2025-08-21 14:12:38][353335861215112][10218 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzM1ODYxMjE1MTEyIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFg4MDFCWEdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NjcxIn0="\r\n
[2025-08-21 14:12:41][353335861215112][13279 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_305ee652-2f41-4bc8-9100-a6e10f3ffcc6","id":"QR_305ee652-2f41-4bc8-9100-a6e10f3ffcc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:12:41][353335861215112][13280 ms][DEBUG] proc_open done in 5045 ms; code=0; res.len=3152
[2025-08-21 14:12:41][353335861215112][13280 ms][DEBUG] END   runCmdUntilRes#1 in 5045 ms
[2025-08-21 14:12:41][353335861215112][13280 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:12:54][356697216312655][0 ms][INFO] === Request start ===
[2025-08-21 14:12:54][356697216312655][1 ms][DEBUG] START check_frida
[2025-08-21 14:12:54][356697216312655][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:12:55][356697216312655][300 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:12:55][356697216312655][300 ms][DEBUG] check_frida: running
[2025-08-21 14:12:55][356697216312655][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 14:12:55][356697216312655][300 ms][DEBUG] START check_internet
[2025-08-21 14:12:55][356697216312655][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:12:55][356697216312655][628 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.997/216.997/216.997/0.000 ms\n
[2025-08-21 14:12:55][356697216312655][628 ms][DEBUG] check_internet: online
[2025-08-21 14:12:55][356697216312655][628 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 14:12:55][356697216312655][628 ms][DEBUG] START check_scloud
[2025-08-21 14:12:55][356697216312655][628 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:12:55][356697216312655][1003 ms][DEBUG] SU: done in 375 ms; outu0_a118       7086 20714 23979272 100592 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:12:55][356697216312655][1003 ms][DEBUG] targetPkg: running
[2025-08-21 14:12:55][356697216312655][1003 ms][DEBUG] END   check_scloud in 375 ms
[2025-08-21 14:12:55][356697216312655][1003 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:12:55][356697216312655][1003 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2Njk3MjE2MzEyNjU1IiwibW9kZWwiOiJTTS1BMjE3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE45MDZWOVdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjY1In0='" -e "main()" -q"
[2025-08-21 14:12:55][356697216312655][1003 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:12:55][356697216312655][1003 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2Njk3MjE2MzEyNjU1IiwibW9kZWwiOiJTTS1BMjE3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE45MDZWOVdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjY1In0='" -e "main()" -q"
[2025-08-21 14:12:57][356697216312655][2987 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2Njk3MjE2MzEyNjU1IiwibW9kZWwiOiJTTS1BMjE3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOE45MDZWOVdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjY1In0="\r\n
[2025-08-21 14:13:00][356697216312655][5626 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71ba3bbe-907d-4627-8a7e-24942dd90b2f","id":"QR_71ba3bbe-907d-4627-8a7e-24942dd90b2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:13:00][356697216312655][5626 ms][DEBUG] proc_open done in 4623 ms; code=0; res.len=3152
[2025-08-21 14:13:00][356697216312655][5626 ms][DEBUG] END   runCmdUntilRes#1 in 4623 ms
[2025-08-21 14:13:00][356697216312655][5626 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:14:10][353452303299768][0 ms][INFO] === Request start ===
[2025-08-21 14:14:10][353452303299768][0 ms][DEBUG] START check_frida
[2025-08-21 14:14:10][353452303299768][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:14:10][353452303299768][457 ms][DEBUG] SU: done in 456 ms; outroot          4632     1 2332716   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:14:10][353452303299768][457 ms][DEBUG] check_frida: running
[2025-08-21 14:14:10][353452303299768][457 ms][DEBUG] END   check_frida in 456 ms
[2025-08-21 14:14:10][353452303299768][457 ms][DEBUG] START check_internet
[2025-08-21 14:14:10][353452303299768][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:14:11][353452303299768][707 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.827/142.827/142.827/0.000 ms\n
[2025-08-21 14:14:11][353452303299768][707 ms][DEBUG] check_internet: online
[2025-08-21 14:14:11][353452303299768][707 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 14:14:11][353452303299768][707 ms][DEBUG] START check_scloud
[2025-08-21 14:14:11][353452303299768][707 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:14:11][353452303299768][1128 ms][DEBUG] SU: done in 422 ms; outu0_a118       7086 20714 23979144 101084 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:14:11][353452303299768][1128 ms][DEBUG] targetPkg: running
[2025-08-21 14:14:11][353452303299768][1128 ms][DEBUG] END   check_scloud in 422 ms
[2025-08-21 14:14:11][353452303299768][1128 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:14:11][353452303299768][1128 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDUyMzAzMjk5NzY4IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hCMTM3MzJQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc2MSJ9'" -e "main()" -q"
[2025-08-21 14:14:11][353452303299768][1128 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:14:11][353452303299768][1128 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDUyMzAzMjk5NzY4IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hCMTM3MzJQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc2MSJ9'" -e "main()" -q"
[2025-08-21 14:14:13][353452303299768][3128 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDUyMzAzMjk5NzY4IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hCMTM3MzJQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc2MSJ9"\r\n
[2025-08-21 14:14:16][353452303299768][5690 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff6976d3-894d-48cb-9b6b-9678feca51f9","id":"QR_ff6976d3-894d-48cb-9b6b-9678feca51f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:14:16][353452303299768][5690 ms][DEBUG] proc_open done in 4562 ms; code=0; res.len=3152
[2025-08-21 14:14:16][353452303299768][5690 ms][DEBUG] END   runCmdUntilRes#1 in 4562 ms
[2025-08-21 14:14:16][353452303299768][5690 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:14:36][353074280065911][0 ms][INFO] === Request start ===
[2025-08-21 14:14:36][353074280065911][1 ms][DEBUG] START check_frida
[2025-08-21 14:14:36][353074280065911][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:14:37][353074280065911][357 ms][DEBUG] SU: done in 356 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:14:37][353074280065911][357 ms][DEBUG] check_frida: running
[2025-08-21 14:14:37][353074280065911][357 ms][DEBUG] END   check_frida in 356 ms
[2025-08-21 14:14:37][353074280065911][357 ms][DEBUG] START check_internet
[2025-08-21 14:14:37][353074280065911][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:14:37][353074280065911][700 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.670/235.670/235.670/0.000 ms\n
[2025-08-21 14:14:37][353074280065911][701 ms][DEBUG] check_internet: online
[2025-08-21 14:14:37][353074280065911][701 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 14:14:37][353074280065911][701 ms][DEBUG] START check_scloud
[2025-08-21 14:14:37][353074280065911][701 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:14:38][353074280065911][1138 ms][DEBUG] SU: done in 437 ms; outu0_a118       7086 20714 23979272 101708 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:14:38][353074280065911][1138 ms][DEBUG] targetPkg: running
[2025-08-21 14:14:38][353074280065911][1138 ms][DEBUG] END   check_scloud in 437 ms
[2025-08-21 14:14:38][353074280065911][1138 ms][DEBUG] rawBody.length=1159
[2025-08-21 14:14:38][353074280065911][1138 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDc0MjgwMDY1OTExIiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWDMwNUVONUwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ0hPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzMyMjAifQ=='" -e "main()" -q"
[2025-08-21 14:14:38][353074280065911][1138 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:14:38][353074280065911][1138 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDc0MjgwMDY1OTExIiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWDMwNUVONUwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ0hPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzMyMjAifQ=='" -e "main()" -q"
[2025-08-21 14:14:40][353074280065911][3137 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDc0MjgwMDY1OTExIiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWDMwNUVONUwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ0hPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzMyMjAifQ=="\r\n
[2025-08-21 14:14:43][353074280065911][7058 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"NON_SAMSUNG_DEVICE"}\r\n
[2025-08-21 14:14:43][353074280065911][7058 ms][DEBUG] proc_open done in 5920 ms; code=0; res.len=80
[2025-08-21 14:14:43][353074280065911][7058 ms][DEBUG] END   runCmdUntilRes#1 in 5920 ms
[2025-08-21 14:14:43][353074280065911][7059 ms][INFO] SUCCESS response from frida (len=80)
[2025-08-21 14:14:44][357815985283423][0 ms][INFO] === Request start ===
[2025-08-21 14:14:44][357815985283423][1 ms][DEBUG] START check_frida
[2025-08-21 14:14:44][357815985283423][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:14:45][357815985283423][360 ms][DEBUG] SU: done in 359 ms; outroot          4632     1 2349136   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:14:45][357815985283423][360 ms][DEBUG] check_frida: running
[2025-08-21 14:14:45][357815985283423][360 ms][DEBUG] END   check_frida in 359 ms
[2025-08-21 14:14:45][357815985283423][360 ms][DEBUG] START check_internet
[2025-08-21 14:14:45][357815985283423][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:14:45][357815985283423][673 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.203/205.203/205.203/0.000 ms\n
[2025-08-21 14:14:45][357815985283423][673 ms][DEBUG] check_internet: online
[2025-08-21 14:14:45][357815985283423][673 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 14:14:45][357815985283423][673 ms][DEBUG] START check_scloud
[2025-08-21 14:14:45][357815985283423][673 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:14:45][357815985283423][1032 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 23995692 100948 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:14:45][357815985283423][1032 ms][DEBUG] targetPkg: running
[2025-08-21 14:14:45][357815985283423][1032 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 14:14:45][357815985283423][1032 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:14:45][357815985283423][1032 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODE1OTg1MjgzNDIzIiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWDMwNUVONUwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkNITyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Mzk0In0='" -e "main()" -q"
[2025-08-21 14:14:45][357815985283423][1032 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:14:45][357815985283423][1032 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODE1OTg1MjgzNDIzIiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWDMwNUVONUwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkNITyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Mzk0In0='" -e "main()" -q"
[2025-08-21 14:14:47][357815985283423][3031 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3ODE1OTg1MjgzNDIzIiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWDMwNUVONUwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkNITyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Mzk0In0="\r\n
[2025-08-21 14:14:49][357815985283423][5015 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd871fbd-14eb-4c16-860f-8fe155c66328","id":"QR_dd871fbd-14eb-4c16-860f-8fe155c66328","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:14:49][357815985283423][5015 ms][DEBUG] proc_open done in 3984 ms; code=0; res.len=3152
[2025-08-21 14:14:49][357815985283423][5015 ms][DEBUG] END   runCmdUntilRes#1 in 3984 ms
[2025-08-21 14:14:49][357815985283423][5015 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:15:06][352469855157435][1 ms][INFO] === Request start ===
[2025-08-21 14:15:06][352469855157435][1 ms][DEBUG] START check_frida
[2025-08-21 14:15:06][352469855157435][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:15:06][352469855157435][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2332716   4016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:15:06][352469855157435][297 ms][DEBUG] check_frida: running
[2025-08-21 14:15:06][352469855157435][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 14:15:06][352469855157435][297 ms][DEBUG] START check_scloud
[2025-08-21 14:15:06][352469855157435][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:15:07][352469855157435][828 ms][DEBUG] SU: done in 531 ms; outu0_a118       7086 20714 23979016 101164 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:15:07][352469855157435][828 ms][DEBUG] targetPkg: running
[2025-08-21 14:15:07][352469855157435][828 ms][DEBUG] END   check_scloud in 531 ms
[2025-08-21 14:15:07][352469855157435][828 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:15:07][352469855157435][829 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU1MTU3NDM1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0M0o4U1pKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU4NSJ9'" -e "main()" -q"
[2025-08-21 14:15:07][352469855157435][829 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:15:07][352469855157435][829 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU1MTU3NDM1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0M0o4U1pKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU4NSJ9'" -e "main()" -q"
[2025-08-21 14:15:09][352469855157435][2812 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDY5ODU1MTU3NDM1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0M0o4U1pKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYU1AiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU4NSJ9"\r\n
[2025-08-21 14:15:11][352469855157435][4890 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6306316f-aec7-4df1-8f0d-a7f4a174b520","id":"QR_6306316f-aec7-4df1-8f0d-a7f4a174b520","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:15:11][352469855157435][4890 ms][DEBUG] proc_open done in 4061 ms; code=0; res.len=3152
[2025-08-21 14:15:11][352469855157435][4890 ms][DEBUG] END   runCmdUntilRes#1 in 4061 ms
[2025-08-21 14:15:11][352469855157435][4890 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:15:18][357567915015777][0 ms][INFO] === Request start ===
[2025-08-21 14:15:18][357567915015777][1 ms][DEBUG] START check_frida
[2025-08-21 14:15:18][357567915015777][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:15:19][357567915015777][506 ms][DEBUG] SU: done in 505 ms; outroot          4632     1 2349136   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:15:19][357567915015777][506 ms][DEBUG] check_frida: running
[2025-08-21 14:15:19][357567915015777][506 ms][DEBUG] END   check_frida in 505 ms
[2025-08-21 14:15:19][357567915015777][506 ms][DEBUG] START check_scloud
[2025-08-21 14:15:19][357567915015777][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:15:19][357567915015777][849 ms][DEBUG] SU: done in 343 ms; outu0_a118       7086 20714 23995692 100692 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:15:19][357567915015777][849 ms][DEBUG] targetPkg: running
[2025-08-21 14:15:19][357567915015777][849 ms][DEBUG] END   check_scloud in 344 ms
[2025-08-21 14:15:19][357567915015777][849 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:15:19][357567915015777][849 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTY3OTE1MDE1Nzc3IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gyMDVIWFNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNTg2In0='" -e "main()" -q"
[2025-08-21 14:15:19][357567915015777][849 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:15:19][357567915015777][849 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTY3OTE1MDE1Nzc3IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gyMDVIWFNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNTg2In0='" -e "main()" -q"
[2025-08-21 14:15:21][357567915015777][2864 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTY3OTE1MDE1Nzc3IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gyMDVIWFNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNTg2In0="\r\n
[2025-08-21 14:15:25][357567915015777][6301 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_173d76b5-39c5-4a7a-b475-c8b133a986e3","id":"QR_173d76b5-39c5-4a7a-b475-c8b133a986e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:15:25][357567915015777][6302 ms][DEBUG] proc_open done in 5452 ms; code=0; res.len=3152
[2025-08-21 14:15:25][357567915015777][6302 ms][DEBUG] END   runCmdUntilRes#1 in 5452 ms
[2025-08-21 14:15:25][357567915015777][6302 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:17:06][351240643267013][1 ms][INFO] === Request start ===
[2025-08-21 14:17:06][351240643267013][2 ms][DEBUG] START check_frida
[2025-08-21 14:17:06][351240643267013][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:17:07][351240643267013][508 ms][DEBUG] SU: done in 507 ms; outroot          4632     1 2332716   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:17:07][351240643267013][508 ms][DEBUG] check_frida: running
[2025-08-21 14:17:07][351240643267013][508 ms][DEBUG] END   check_frida in 507 ms
[2025-08-21 14:17:07][351240643267013][508 ms][DEBUG] START check_scloud
[2025-08-21 14:17:07][351240643267013][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:17:07][351240643267013][790 ms][DEBUG] SU: done in 282 ms; outu0_a118       7086 20714 23985416 101472 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:17:07][351240643267013][790 ms][DEBUG] targetPkg: running
[2025-08-21 14:17:07][351240643267013][790 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 14:17:07][351240643267013][790 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:17:07][351240643267013][790 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQzMjY3MDEzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFEzSFJQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI2NiJ9'" -e "main()" -q"
[2025-08-21 14:17:07][351240643267013][790 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:17:07][351240643267013][791 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQzMjY3MDEzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFEzSFJQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI2NiJ9'" -e "main()" -q"
[2025-08-21 14:17:09][351240643267013][2789 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQzMjY3MDEzIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MFEzSFJQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI2NiJ9"\r\n
[2025-08-21 14:17:11][351240643267013][4945 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99591831-c543-440b-9a41-cb06b2dc2b81","id":"QR_99591831-c543-440b-9a41-cb06b2dc2b81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:17:11][351240643267013][4945 ms][DEBUG] proc_open done in 4154 ms; code=0; res.len=3152
[2025-08-21 14:17:11][351240643267013][4945 ms][DEBUG] END   runCmdUntilRes#1 in 4154 ms
[2025-08-21 14:17:11][351240643267013][4945 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:17:19][350588936331719][0 ms][INFO] === Request start ===
[2025-08-21 14:17:19][350588936331719][1 ms][DEBUG] START check_frida
[2025-08-21 14:17:19][350588936331719][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:17:19][350588936331719][518 ms][DEBUG] SU: done in 517 ms; outroot          4632     1 2349136   4020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:17:19][350588936331719][518 ms][DEBUG] check_frida: running
[2025-08-21 14:17:19][350588936331719][518 ms][DEBUG] END   check_frida in 517 ms
[2025-08-21 14:17:19][350588936331719][518 ms][DEBUG] START check_scloud
[2025-08-21 14:17:19][350588936331719][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:17:20][350588936331719][924 ms][DEBUG] SU: done in 406 ms; outu0_a118       7086 20714 24001836 100436 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:17:20][350588936331719][924 ms][DEBUG] targetPkg: running
[2025-08-21 14:17:20][350588936331719][924 ms][DEBUG] END   check_scloud in 406 ms
[2025-08-21 14:17:20][350588936331719][924 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:17:20][350588936331719][924 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTg4OTM2MzMxNzE5IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4M1g5MDFaTTZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc1OSJ9'" -e "main()" -q"
[2025-08-21 14:17:20][350588936331719][924 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:17:20][350588936331719][924 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTg4OTM2MzMxNzE5IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4M1g5MDFaTTZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc1OSJ9'" -e "main()" -q"
[2025-08-21 14:17:21][358799101377559][1 ms][INFO] === Request start ===
[2025-08-21 14:17:22][350588936331719][2939 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTg4OTM2MzMxNzE5IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4M1g5MDFaTTZIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc1OSJ9"\r\n
[2025-08-21 14:17:24][350588936331719][5111 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8743192-eabc-4fa7-9deb-7bc9a2bd4311","id":"QR_d8743192-eabc-4fa7-9deb-7bc9a2bd4311","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:17:24][350588936331719][5111 ms][DEBUG] proc_open done in 4186 ms; code=0; res.len=3152
[2025-08-21 14:17:24][350588936331719][5111 ms][DEBUG] END   runCmdUntilRes#1 in 4186 ms
[2025-08-21 14:17:24][350588936331719][5111 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:17:24][358799101377559][3047 ms][DEBUG] START check_frida
[2025-08-21 14:17:24][358799101377559][3047 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:17:25][358799101377559][3501 ms][DEBUG] SU: done in 454 ms; outroot          4632     1 2349136   4020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:17:25][358799101377559][3501 ms][DEBUG] check_frida: running
[2025-08-21 14:17:25][358799101377559][3501 ms][DEBUG] END   check_frida in 454 ms
[2025-08-21 14:17:25][358799101377559][3501 ms][DEBUG] START check_scloud
[2025-08-21 14:17:25][358799101377559][3501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:17:25][358799101377559][3874 ms][DEBUG] SU: done in 373 ms; outu0_a118       7086 20714 24001836 100684 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:17:25][358799101377559][3875 ms][DEBUG] targetPkg: running
[2025-08-21 14:17:25][358799101377559][3875 ms][DEBUG] END   check_scloud in 373 ms
[2025-08-21 14:17:25][358799101377559][3875 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:17:25][358799101377559][3875 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4Nzk5MTAxMzc3NTU5IiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDA3In0='" -e "main()" -q"
[2025-08-21 14:17:25][358799101377559][3875 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:17:25][358799101377559][3875 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4Nzk5MTAxMzc3NTU5IiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDA3In0='" -e "main()" -q"
[2025-08-21 14:17:27][358799101377559][5858 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4Nzk5MTAxMzc3NTU5IiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDA3In0="\r\n
[2025-08-21 14:17:29][358799101377559][8139 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 14:17:29][358799101377559][8139 ms][DEBUG] proc_open done in 4265 ms; code=0; res.len=115
[2025-08-21 14:17:29][358799101377559][8139 ms][DEBUG] END   runCmdUntilRes#1 in 4265 ms
[2025-08-21 14:17:29][358799101377559][8139 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 14:17:30][][0 ms][INFO] === Request start ===
[2025-08-21 14:17:30][][1 ms][DEBUG] START check_frida
[2025-08-21 14:17:30][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:17:30][][473 ms][DEBUG] SU: done in 472 ms; outroot          4632     1 2349136   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:17:30][][473 ms][DEBUG] check_frida: running
[2025-08-21 14:17:30][][473 ms][DEBUG] END   check_frida in 472 ms
[2025-08-21 14:17:30][][473 ms][DEBUG] START check_scloud
[2025-08-21 14:17:30][][473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:17:31][][972 ms][DEBUG] SU: done in 500 ms; outu0_a118       7086 20714 24001836 100972 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:17:31][][973 ms][DEBUG] targetPkg: running
[2025-08-21 14:17:31][][973 ms][DEBUG] END   check_scloud in 500 ms
[2025-08-21 14:17:31][][973 ms][DEBUG] rawBody.length=1130
[2025-08-21 14:17:31][][973 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTAwIn0='" -e "main()" -q"
[2025-08-21 14:17:31][][973 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:17:31][][973 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTAwIn0='" -e "main()" -q"
[2025-08-21 14:17:33][][2972 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTAwIn0="\r\n
[2025-08-21 14:17:35][][5347 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 14:17:35][][5347 ms][DEBUG] proc_open done in 4374 ms; code=0; res.len=107
[2025-08-21 14:17:35][][5347 ms][DEBUG] END   runCmdUntilRes#1 in 4374 ms
[2025-08-21 14:17:35][][5347 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 14:17:35][][0 ms][INFO] === Request start ===
[2025-08-21 14:17:35][][1 ms][DEBUG] START check_frida
[2025-08-21 14:17:35][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:17:36][][301 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2349136   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:17:36][][301 ms][DEBUG] check_frida: running
[2025-08-21 14:17:36][][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 14:17:36][][301 ms][DEBUG] START check_scloud
[2025-08-21 14:17:36][][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:17:36][][660 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 24001836 101536 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:17:36][][660 ms][DEBUG] targetPkg: running
[2025-08-21 14:17:36][][660 ms][DEBUG] END   check_scloud in 360 ms
[2025-08-21 14:17:36][][660 ms][DEBUG] rawBody.length=1130
[2025-08-21 14:17:36][][660 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzA4In0='" -e "main()" -q"
[2025-08-21 14:17:36][][660 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:17:36][][660 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzA4In0='" -e "main()" -q"
[2025-08-21 14:17:38][][2659 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzA4In0="\r\n
[2025-08-21 14:17:40][][4877 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 14:17:40][][4878 ms][DEBUG] proc_open done in 4217 ms; code=0; res.len=107
[2025-08-21 14:17:40][][4878 ms][DEBUG] END   runCmdUntilRes#1 in 4217 ms
[2025-08-21 14:17:40][][4878 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 14:17:41][358799101377559][0 ms][INFO] === Request start ===
[2025-08-21 14:17:41][358799101377559][1 ms][DEBUG] START check_frida
[2025-08-21 14:17:41][358799101377559][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:17:41][358799101377559][492 ms][DEBUG] SU: done in 491 ms; outroot          4632     1 2349136   4024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:17:41][358799101377559][493 ms][DEBUG] check_frida: running
[2025-08-21 14:17:41][358799101377559][493 ms][DEBUG] END   check_frida in 492 ms
[2025-08-21 14:17:41][358799101377559][493 ms][DEBUG] START check_scloud
[2025-08-21 14:17:41][358799101377559][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:17:42][358799101377559][852 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 24001836 102016 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:17:42][358799101377559][852 ms][DEBUG] targetPkg: running
[2025-08-21 14:17:42][358799101377559][852 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 14:17:42][358799101377559][852 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:17:42][358799101377559][852 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4Nzk5MTAxMzc3NTU5IiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJWWlciLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc4MyJ9'" -e "main()" -q"
[2025-08-21 14:17:42][358799101377559][852 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:17:42][358799101377559][852 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4Nzk5MTAxMzc3NTU5IiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJWWlciLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc4MyJ9'" -e "main()" -q"
[2025-08-21 14:17:44][358799101377559][2851 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4Nzk5MTAxMzc3NTU5IiwibW9kZWwiOiJTTS1UODY3ViIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mk4yMEI2UkJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJWWlciLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc4MyJ9"\r\n
[2025-08-21 14:17:46][358799101377559][5085 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db957646-ecb4-4b01-b5b1-36ef851984d5","id":"QR_db957646-ecb4-4b01-b5b1-36ef851984d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:17:46][358799101377559][5085 ms][DEBUG] proc_open done in 4233 ms; code=0; res.len=3152
[2025-08-21 14:17:46][358799101377559][5085 ms][DEBUG] END   runCmdUntilRes#1 in 4233 ms
[2025-08-21 14:17:46][358799101377559][5085 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:17:51][353129155385545][0 ms][INFO] === Request start ===
[2025-08-21 14:17:51][353129155385545][1 ms][DEBUG] START check_frida
[2025-08-21 14:17:51][353129155385545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:17:52][353129155385545][292 ms][DEBUG] SU: done in 290 ms; outroot          4632     1 2349136   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:17:52][353129155385545][292 ms][DEBUG] check_frida: running
[2025-08-21 14:17:52][353129155385545][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 14:17:52][353129155385545][292 ms][DEBUG] START check_scloud
[2025-08-21 14:17:52][353129155385545][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:17:52][353129155385545][838 ms][DEBUG] SU: done in 546 ms; outu0_a118       7086 20714 24001836 102504 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:17:52][353129155385545][838 ms][DEBUG] targetPkg: running
[2025-08-21 14:17:52][353129155385545][838 ms][DEBUG] END   check_scloud in 547 ms
[2025-08-21 14:17:52][353129155385545][839 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:17:52][353129155385545][839 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTI5MTU1Mzg1NTQ1IiwibW9kZWwiOiJTTS1BMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMFhIWDlIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTYwMiJ9'" -e "main()" -q"
[2025-08-21 14:17:52][353129155385545][839 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:17:52][353129155385545][839 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTI5MTU1Mzg1NTQ1IiwibW9kZWwiOiJTTS1BMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMFhIWDlIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTYwMiJ9'" -e "main()" -q"
[2025-08-21 14:17:54][353129155385545][2853 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTI5MTU1Mzg1NTQ1IiwibW9kZWwiOiJTTS1BMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMFhIWDlIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTYwMiJ9"\r\n
[2025-08-21 14:17:56][353129155385545][4822 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8daf75e-bb12-4c4f-9833-7fbede2d5803","id":"QR_a8daf75e-bb12-4c4f-9833-7fbede2d5803","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:17:56][353129155385545][4822 ms][DEBUG] proc_open done in 3983 ms; code=0; res.len=3152
[2025-08-21 14:17:56][353129155385545][4822 ms][DEBUG] END   runCmdUntilRes#1 in 3983 ms
[2025-08-21 14:17:56][353129155385545][4822 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:18:06][350814493138861][0 ms][INFO] === Request start ===
[2025-08-21 14:18:06][350814493138861][1 ms][DEBUG] START check_frida
[2025-08-21 14:18:06][350814493138861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:18:06][350814493138861][444 ms][DEBUG] SU: done in 443 ms; outroot          4632     1 2349136   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:18:06][350814493138861][444 ms][DEBUG] check_frida: running
[2025-08-21 14:18:06][350814493138861][444 ms][DEBUG] END   check_frida in 443 ms
[2025-08-21 14:18:06][350814493138861][444 ms][DEBUG] START check_internet
[2025-08-21 14:18:06][350814493138861][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:18:07][350814493138861][897 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.776/200.776/200.776/0.000 ms\n
[2025-08-21 14:18:07][350814493138861][897 ms][DEBUG] check_internet: online
[2025-08-21 14:18:07][350814493138861][897 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 14:18:07][350814493138861][898 ms][DEBUG] START check_scloud
[2025-08-21 14:18:07][350814493138861][898 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:18:07][350814493138861][1335 ms][DEBUG] SU: done in 437 ms; outu0_a118       7086 20714 24001836 103140 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:18:07][350814493138861][1335 ms][DEBUG] targetPkg: running
[2025-08-21 14:18:07][350814493138861][1335 ms][DEBUG] END   check_scloud in 437 ms
[2025-08-21 14:18:07][350814493138861][1335 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:18:07][350814493138861][1335 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDkzMTM4ODYxIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MjZLWUJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQ3MiJ9'" -e "main()" -q"
[2025-08-21 14:18:07][350814493138861][1335 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:18:07][350814493138861][1335 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDkzMTM4ODYxIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MjZLWUJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQ3MiJ9'" -e "main()" -q"
[2025-08-21 14:18:09][350814493138861][3334 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODE0NDkzMTM4ODYxIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g4MjZLWUJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQ3MiJ9"\r\n
[2025-08-21 14:18:11][350814493138861][5349 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57336093-78ce-4621-b095-5633706d0f41","id":"QR_57336093-78ce-4621-b095-5633706d0f41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:18:11][350814493138861][5349 ms][DEBUG] proc_open done in 4014 ms; code=0; res.len=3152
[2025-08-21 14:18:11][350814493138861][5349 ms][DEBUG] END   runCmdUntilRes#1 in 4014 ms
[2025-08-21 14:18:11][350814493138861][5349 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:18:17][351270415389729][1 ms][INFO] === Request start ===
[2025-08-21 14:18:17][351270415389729][1 ms][DEBUG] START check_frida
[2025-08-21 14:18:17][351270415389729][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:18:17][351270415389729][310 ms][DEBUG] SU: done in 308 ms; outroot          4632     1 2349136   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:18:17][351270415389729][310 ms][DEBUG] check_frida: running
[2025-08-21 14:18:17][351270415389729][310 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 14:18:17][351270415389729][310 ms][DEBUG] START check_internet
[2025-08-21 14:18:17][351270415389729][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:18:17][351270415389729][607 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.449/190.449/190.449/0.000 ms\n
[2025-08-21 14:18:17][351270415389729][607 ms][DEBUG] check_internet: online
[2025-08-21 14:18:17][351270415389729][607 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 14:18:17][351270415389729][607 ms][DEBUG] START check_scloud
[2025-08-21 14:18:17][351270415389729][607 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:18:18][351270415389729][982 ms][DEBUG] SU: done in 375 ms; outu0_a118       7086 20714 24001836 103636 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:18:18][351270415389729][982 ms][DEBUG] targetPkg: running
[2025-08-21 14:18:18][351270415389729][982 ms][DEBUG] END   check_scloud in 375 ms
[2025-08-21 14:18:18][351270415389729][982 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:18:18][351270415389729][982 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDE1Mzg5NzI5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MUtOUFdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQxMiJ9'" -e "main()" -q"
[2025-08-21 14:18:18][351270415389729][982 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:18:18][351270415389729][982 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDE1Mzg5NzI5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MUtOUFdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQxMiJ9'" -e "main()" -q"
[2025-08-21 14:18:20][351270415389729][2997 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcwNDE1Mzg5NzI5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MUtOUFdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQxMiJ9"\r\n
[2025-08-21 14:18:22][351270415389729][5246 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ad1516f-7005-4b56-b7d3-ce80bb7dbf45","id":"QR_8ad1516f-7005-4b56-b7d3-ce80bb7dbf45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:18:22][351270415389729][5246 ms][DEBUG] proc_open done in 4264 ms; code=0; res.len=3152
[2025-08-21 14:18:22][351270415389729][5246 ms][DEBUG] END   runCmdUntilRes#1 in 4264 ms
[2025-08-21 14:18:22][351270415389729][5246 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:18:26][357576780249759][0 ms][INFO] === Request start ===
[2025-08-21 14:18:26][357576780249759][1 ms][DEBUG] START check_frida
[2025-08-21 14:18:26][357576780249759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:18:26][357576780249759][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2349136   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:18:26][357576780249759][294 ms][DEBUG] check_frida: running
[2025-08-21 14:18:26][357576780249759][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 14:18:26][357576780249759][294 ms][DEBUG] START check_internet
[2025-08-21 14:18:26][357576780249759][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:18:26][357576780249759][606 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.955/193.955/193.955/0.000 ms\n
[2025-08-21 14:18:26][357576780249759][606 ms][DEBUG] check_internet: online
[2025-08-21 14:18:26][357576780249759][606 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 14:18:26][357576780249759][606 ms][DEBUG] START check_scloud
[2025-08-21 14:18:26][357576780249759][606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:18:27][357576780249759][1122 ms][DEBUG] SU: done in 515 ms; outu0_a118       7086 20714 24001836 104164 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:18:27][357576780249759][1122 ms][DEBUG] targetPkg: running
[2025-08-21 14:18:27][357576780249759][1122 ms][DEBUG] END   check_scloud in 516 ms
[2025-08-21 14:18:27][357576780249759][1122 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:18:27][357576780249759][1122 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2NzgwMjQ5NzU5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1gzMDRCQ0tYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDk1In0='" -e "main()" -q"
[2025-08-21 14:18:27][357576780249759][1122 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:18:27][357576780249759][1122 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2NzgwMjQ5NzU5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1gzMDRCQ0tYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDk1In0='" -e "main()" -q"
[2025-08-21 14:18:29][357576780249759][3121 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTc2NzgwMjQ5NzU5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1gzMDRCQ0tYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDk1In0="\r\n
[2025-08-21 14:18:32][357576780249759][6214 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3adc6f2b-51c6-4405-bef7-8daaa9a1a208","id":"QR_3adc6f2b-51c6-4405-bef7-8daaa9a1a208","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:18:32][357576780249759][6215 ms][DEBUG] proc_open done in 5093 ms; code=0; res.len=3152
[2025-08-21 14:18:32][357576780249759][6215 ms][DEBUG] END   runCmdUntilRes#1 in 5093 ms
[2025-08-21 14:18:32][357576780249759][6215 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:20:07][354916441996500][0 ms][INFO] === Request start ===
[2025-08-21 14:20:07][354916441996500][1 ms][DEBUG] START check_frida
[2025-08-21 14:20:07][354916441996500][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:20:08][354916441996500][387 ms][DEBUG] SU: done in 386 ms; outroot          4632     1 2332716   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:20:08][354916441996500][387 ms][DEBUG] check_frida: running
[2025-08-21 14:20:08][354916441996500][387 ms][DEBUG] END   check_frida in 386 ms
[2025-08-21 14:20:08][354916441996500][387 ms][DEBUG] START check_internet
[2025-08-21 14:20:08][354916441996500][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:20:08][354916441996500][669 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.511/171.511/171.511/0.000 ms\n
[2025-08-21 14:20:08][354916441996500][669 ms][DEBUG] check_internet: online
[2025-08-21 14:20:08][354916441996500][669 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 14:20:08][354916441996500][669 ms][DEBUG] START check_scloud
[2025-08-21 14:20:08][354916441996500][669 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:20:08][354916441996500][1028 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 23985416 104716 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:20:08][354916441996500][1028 ms][DEBUG] targetPkg: running
[2025-08-21 14:20:08][354916441996500][1028 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 14:20:08][354916441996500][1028 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:20:08][354916441996500][1028 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQxOTk2NTAwIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MDY5UkdSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzUyMCJ9'" -e "main()" -q"
[2025-08-21 14:20:08][354916441996500][1028 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:20:08][354916441996500][1028 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQxOTk2NTAwIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MDY5UkdSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzUyMCJ9'" -e "main()" -q"
[2025-08-21 14:20:10][354916441996500][3027 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTE2NDQxOTk2NTAwIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc0MDY5UkdSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzUyMCJ9"\r\n
[2025-08-21 14:20:13][354916441996500][5167 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10f1b0e6-b16d-41d7-94a4-c3a27d4d229a","id":"QR_10f1b0e6-b16d-41d7-94a4-c3a27d4d229a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:20:13][354916441996500][5167 ms][DEBUG] proc_open done in 4139 ms; code=0; res.len=3152
[2025-08-21 14:20:13][354916441996500][5167 ms][DEBUG] END   runCmdUntilRes#1 in 4139 ms
[2025-08-21 14:20:13][354916441996500][5168 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:21:07][356729403732369][0 ms][INFO] === Request start ===
[2025-08-21 14:21:07][356729403732369][1 ms][DEBUG] START check_frida
[2025-08-21 14:21:07][356729403732369][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:21:07][356729403732369][387 ms][DEBUG] SU: done in 386 ms; outroot          4632     1 2332716   4024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:21:07][356729403732369][387 ms][DEBUG] check_frida: running
[2025-08-21 14:21:07][356729403732369][387 ms][DEBUG] END   check_frida in 386 ms
[2025-08-21 14:21:07][356729403732369][387 ms][DEBUG] START check_scloud
[2025-08-21 14:21:07][356729403732369][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:21:08][356729403732369][731 ms][DEBUG] SU: done in 344 ms; outu0_a118       7086 20714 23985416 105180 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:21:08][356729403732369][732 ms][DEBUG] targetPkg: running
[2025-08-21 14:21:08][356729403732369][732 ms][DEBUG] END   check_scloud in 345 ms
[2025-08-21 14:21:08][356729403732369][732 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:21:08][356729403732369][732 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzI5NDAzNzMyMzY5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEtFRERMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU5NiJ9'" -e "main()" -q"
[2025-08-21 14:21:08][356729403732369][732 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:21:08][356729403732369][732 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzI5NDAzNzMyMzY5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEtFRERMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU5NiJ9'" -e "main()" -q"
[2025-08-21 14:21:10][356729403732369][2761 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NzI5NDAzNzMyMzY5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEtFRERMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU5NiJ9"\r\n
[2025-08-21 14:21:12][356729403732369][5011 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_972cee34-b767-4e52-b39e-f177225e935a","id":"QR_972cee34-b767-4e52-b39e-f177225e935a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:21:12][356729403732369][5011 ms][DEBUG] proc_open done in 4279 ms; code=0; res.len=3152
[2025-08-21 14:21:12][356729403732369][5011 ms][DEBUG] END   runCmdUntilRes#1 in 4279 ms
[2025-08-21 14:21:12][356729403732369][5011 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:21:21][350896383511299][0 ms][INFO] === Request start ===
[2025-08-21 14:21:21][350896383511299][1 ms][DEBUG] START check_frida
[2025-08-21 14:21:21][350896383511299][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:21:21][350896383511299][474 ms][DEBUG] SU: done in 473 ms; outroot          4632     1 2349136   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:21:21][350896383511299][474 ms][DEBUG] check_frida: running
[2025-08-21 14:21:21][350896383511299][474 ms][DEBUG] END   check_frida in 473 ms
[2025-08-21 14:21:21][350896383511299][474 ms][DEBUG] START check_scloud
[2025-08-21 14:21:21][350896383511299][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:21:22][350896383511299][849 ms][DEBUG] SU: done in 375 ms; outu0_a118       7086 20714 24001836 105924 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:21:22][350896383511299][850 ms][DEBUG] targetPkg: running
[2025-08-21 14:21:22][350896383511299][850 ms][DEBUG] END   check_scloud in 375 ms
[2025-08-21 14:21:22][350896383511299][850 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:21:22][350896383511299][850 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzNTExMjk5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU3In0='" -e "main()" -q"
[2025-08-21 14:21:22][350896383511299][850 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:21:22][350896383511299][850 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzNTExMjk5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU3In0='" -e "main()" -q"
[2025-08-21 14:21:24][350896383511299][2864 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2MzgzNTExMjk5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU3In0="\r\n
[2025-08-21 14:21:26][350896383511299][5208 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n
[2025-08-21 14:21:26][350896383511299][5208 ms][DEBUG] proc_open done in 4358 ms; code=0; res.len=101
[2025-08-21 14:21:26][350896383511299][5208 ms][DEBUG] END   runCmdUntilRes#1 in 4358 ms
[2025-08-21 14:21:26][350896383511299][5208 ms][INFO] SUCCESS response from frida (len=101)
[2025-08-21 14:21:26][][0 ms][INFO] === Request start ===
[2025-08-21 14:21:26][][1 ms][DEBUG] START check_frida
[2025-08-21 14:21:26][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:21:27][][467 ms][DEBUG] SU: done in 466 ms; outroot          4632     1 2349136   4056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:21:27][][468 ms][DEBUG] check_frida: running
[2025-08-21 14:21:27][][468 ms][DEBUG] END   check_frida in 467 ms
[2025-08-21 14:21:27][][468 ms][DEBUG] START check_scloud
[2025-08-21 14:21:27][][468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:21:27][][826 ms][DEBUG] SU: done in 358 ms; outu0_a118       7086 20714 24001708 100312 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:21:27][][826 ms][DEBUG] targetPkg: running
[2025-08-21 14:21:27][][826 ms][DEBUG] END   check_scloud in 358 ms
[2025-08-21 14:21:27][][826 ms][DEBUG] rawBody.length=1130
[2025-08-21 14:21:27][][826 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDY0In0='" -e "main()" -q"
[2025-08-21 14:21:27][][826 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:21:27][][826 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDY0In0='" -e "main()" -q"
[2025-08-21 14:21:29][][2825 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDY0In0="\r\n
[2025-08-21 14:21:32][][5340 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n
[2025-08-21 14:21:32][][5341 ms][DEBUG] proc_open done in 4515 ms; code=0; res.len=101
[2025-08-21 14:21:32][][5341 ms][DEBUG] END   runCmdUntilRes#1 in 4515 ms
[2025-08-21 14:21:32][][5341 ms][INFO] SUCCESS response from frida (len=101)
[2025-08-21 14:21:32][][0 ms][INFO] === Request start ===
[2025-08-21 14:21:32][][1 ms][DEBUG] START check_frida
[2025-08-21 14:21:32][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:21:33][][513 ms][DEBUG] SU: done in 512 ms; outroot          4632     1 2349136   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:21:33][][513 ms][DEBUG] check_frida: running
[2025-08-21 14:21:33][][513 ms][DEBUG] END   check_frida in 512 ms
[2025-08-21 14:21:33][][513 ms][DEBUG] START check_scloud
[2025-08-21 14:21:33][][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:21:33][][966 ms][DEBUG] SU: done in 453 ms; outu0_a118       7086 20714 24001836 100928 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:21:33][][966 ms][DEBUG] targetPkg: running
[2025-08-21 14:21:33][][966 ms][DEBUG] END   check_scloud in 453 ms
[2025-08-21 14:21:33][][966 ms][DEBUG] rawBody.length=1130
[2025-08-21 14:21:33][][966 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDMwIn0='" -e "main()" -q"
[2025-08-21 14:21:33][][966 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:21:33][][966 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDMwIn0='" -e "main()" -q"
[2025-08-21 14:21:35][][2965 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDMwIn0="\r\n
[2025-08-21 14:21:38][][5434 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n
[2025-08-21 14:21:38][][5434 ms][DEBUG] proc_open done in 4468 ms; code=0; res.len=101
[2025-08-21 14:21:38][][5434 ms][DEBUG] END   runCmdUntilRes#1 in 4468 ms
[2025-08-21 14:21:38][][5434 ms][INFO] SUCCESS response from frida (len=101)
[2025-08-21 14:21:38][350896383511299][0 ms][INFO] === Request start ===
[2025-08-21 14:21:38][350896383511299][1 ms][DEBUG] START check_frida
[2025-08-21 14:21:38][350896383511299][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:21:39][350896383511299][301 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2349136   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:21:39][350896383511299][302 ms][DEBUG] check_frida: running
[2025-08-21 14:21:39][350896383511299][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 14:21:39][350896383511299][302 ms][DEBUG] START check_scloud
[2025-08-21 14:21:39][350896383511299][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:21:39][350896383511299][817 ms][DEBUG] SU: done in 515 ms; outu0_a118       7086 20714 24001836 101568 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:21:39][350896383511299][817 ms][DEBUG] targetPkg: running
[2025-08-21 14:21:39][350896383511299][817 ms][DEBUG] END   check_scloud in 515 ms
[2025-08-21 14:21:39][350896383511299][817 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:21:39][350896383511299][817 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzNTExMjk5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDR1UiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk3NCJ9'" -e "main()" -q"
[2025-08-21 14:21:39][350896383511299][817 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:21:39][350896383511299][818 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzNTExMjk5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDR1UiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk3NCJ9'" -e "main()" -q"
[2025-08-21 14:21:41][350896383511299][2816 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2MzgzNTExMjk5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEJRVlpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDR1UiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk3NCJ9"\r\n
[2025-08-21 14:21:43][350896383511299][4831 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_699ce127-0176-43cd-8bd2-1b1435358baa","id":"QR_699ce127-0176-43cd-8bd2-1b1435358baa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:21:43][350896383511299][4832 ms][DEBUG] proc_open done in 4014 ms; code=0; res.len=3152
[2025-08-21 14:21:43][350896383511299][4832 ms][DEBUG] END   runCmdUntilRes#1 in 4014 ms
[2025-08-21 14:21:43][350896383511299][4832 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:22:06][352731457977928][1 ms][INFO] === Request start ===
[2025-08-21 14:22:06][352731457977928][2 ms][DEBUG] START check_frida
[2025-08-21 14:22:06][352731457977928][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:22:07][352731457977928][362 ms][DEBUG] SU: done in 360 ms; outroot          4632     1 2332716   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:22:07][352731457977928][362 ms][DEBUG] check_frida: running
[2025-08-21 14:22:07][352731457977928][362 ms][DEBUG] END   check_frida in 360 ms
[2025-08-21 14:22:07][352731457977928][362 ms][DEBUG] START check_internet
[2025-08-21 14:22:07][352731457977928][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:22:07][352731457977928][799 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.340/200.340/200.340/0.000 ms\n
[2025-08-21 14:22:07][352731457977928][799 ms][DEBUG] check_internet: online
[2025-08-21 14:22:07][352731457977928][799 ms][DEBUG] END   check_internet in 437 ms
[2025-08-21 14:22:07][352731457977928][799 ms][DEBUG] START check_scloud
[2025-08-21 14:22:07][352731457977928][799 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:22:07][352731457977928][1174 ms][DEBUG] SU: done in 375 ms; outu0_a118       7086 20714 23985416 102120 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:22:07][352731457977928][1174 ms][DEBUG] targetPkg: running
[2025-08-21 14:22:07][352731457977928][1174 ms][DEBUG] END   check_scloud in 375 ms
[2025-08-21 14:22:07][352731457977928][1174 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:22:07][352731457977928][1174 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzMxNDU3OTc3OTI4IiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1I2MFBBOUZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY1NSJ9'" -e "main()" -q"
[2025-08-21 14:22:07][352731457977928][1175 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:22:07][352731457977928][1175 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzMxNDU3OTc3OTI4IiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1I2MFBBOUZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY1NSJ9'" -e "main()" -q"
[2025-08-21 14:22:10][352731457977928][3189 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzMxNDU3OTc3OTI4IiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1I2MFBBOUZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY1NSJ9"\r\n
[2025-08-21 14:22:11][352731457977928][5032 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e430e6a-ac48-4333-b49a-72b2883197fb","id":"QR_8e430e6a-ac48-4333-b49a-72b2883197fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:22:11][352731457977928][5032 ms][DEBUG] proc_open done in 3858 ms; code=0; res.len=3152
[2025-08-21 14:22:11][352731457977928][5033 ms][DEBUG] END   runCmdUntilRes#1 in 3858 ms
[2025-08-21 14:22:11][352731457977928][5033 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:25:58][351406756687335][1 ms][INFO] === Request start ===
[2025-08-21 14:25:58][351406756687335][2 ms][DEBUG] START check_frida
[2025-08-21 14:25:58][351406756687335][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:25:58][351406756687335][335 ms][DEBUG] SU: done in 333 ms; outroot          4632     1 2332716   4020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:25:58][351406756687335][335 ms][DEBUG] check_frida: running
[2025-08-21 14:25:58][351406756687335][335 ms][DEBUG] END   check_frida in 333 ms
[2025-08-21 14:25:58][351406756687335][335 ms][DEBUG] START check_scloud
[2025-08-21 14:25:58][351406756687335][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:25:58][351406756687335][694 ms][DEBUG] SU: done in 359 ms; outu0_a118       7086 20714 23985288 102644 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:25:58][351406756687335][694 ms][DEBUG] targetPkg: running
[2025-08-21 14:25:58][351406756687335][694 ms][DEBUG] END   check_scloud in 359 ms
[2025-08-21 14:25:58][351406756687335][694 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:25:58][351406756687335][695 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDA2NzU2Njg3MzM1IiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c0MDdBVzlCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTY3In0='" -e "main()" -q"
[2025-08-21 14:25:58][351406756687335][695 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:25:58][351406756687335][695 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDA2NzU2Njg3MzM1IiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c0MDdBVzlCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTY3In0='" -e "main()" -q"
[2025-08-21 14:26:00][351406756687335][2678 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDA2NzU2Njg3MzM1IiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c0MDdBVzlCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTY3In0="\r\n
[2025-08-21 14:26:03][351406756687335][5833 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22ce013c-a9aa-4f98-a610-c480add7f65a","id":"QR_22ce013c-a9aa-4f98-a610-c480add7f65a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:26:03][351406756687335][5834 ms][DEBUG] proc_open done in 5139 ms; code=0; res.len=3152
[2025-08-21 14:26:03][351406756687335][5834 ms][DEBUG] END   runCmdUntilRes#1 in 5139 ms
[2025-08-21 14:26:03][351406756687335][5834 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:26:08][350498055120820][0 ms][INFO] === Request start ===
[2025-08-21 14:26:08][350498055120820][1 ms][DEBUG] START check_frida
[2025-08-21 14:26:08][350498055120820][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:26:08][350498055120820][356 ms][DEBUG] SU: done in 355 ms; outroot          4632     1 2349136   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:26:08][350498055120820][356 ms][DEBUG] check_frida: running
[2025-08-21 14:26:08][350498055120820][356 ms][DEBUG] END   check_frida in 355 ms
[2025-08-21 14:26:08][350498055120820][356 ms][DEBUG] START check_internet
[2025-08-21 14:26:08][350498055120820][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:26:09][350498055120820][684 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=126 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 126.922/126.922/126.922/0.000 ms\n
[2025-08-21 14:26:09][350498055120820][685 ms][DEBUG] check_internet: online
[2025-08-21 14:26:09][350498055120820][685 ms][DEBUG] END   check_internet in 329 ms
[2025-08-21 14:26:09][350498055120820][685 ms][DEBUG] START check_scloud
[2025-08-21 14:26:09][350498055120820][685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:26:09][350498055120820][1028 ms][DEBUG] SU: done in 343 ms; outu0_a118       7086 20714 24001964 103136 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:26:09][350498055120820][1028 ms][DEBUG] targetPkg: running
[2025-08-21 14:26:09][350498055120820][1028 ms][DEBUG] END   check_scloud in 343 ms
[2025-08-21 14:26:09][350498055120820][1028 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:26:09][350498055120820][1028 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDU1MTIwODIwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMFhEMFBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTEyMyJ9'" -e "main()" -q"
[2025-08-21 14:26:09][350498055120820][1028 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:26:09][350498055120820][1029 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDU1MTIwODIwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMFhEMFBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTEyMyJ9'" -e "main()" -q"
[2025-08-21 14:26:11][350498055120820][3074 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDk4MDU1MTIwODIwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMFhEMFBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTEyMyJ9"\r\n
[2025-08-21 14:26:13][350498055120820][5230 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a524b642-a760-49f1-8313-3c49fe62377e","id":"QR_a524b642-a760-49f1-8313-3c49fe62377e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:26:13][350498055120820][5230 ms][DEBUG] proc_open done in 4202 ms; code=0; res.len=3152
[2025-08-21 14:26:13][350498055120820][5230 ms][DEBUG] END   runCmdUntilRes#1 in 4202 ms
[2025-08-21 14:26:13][350498055120820][5230 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:27:26][352677531283173][1 ms][INFO] === Request start ===
[2025-08-21 14:27:26][352677531283173][2 ms][DEBUG] START check_frida
[2025-08-21 14:27:26][352677531283173][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:27:27][352677531283173][296 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2332716   4016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:27:27][352677531283173][296 ms][DEBUG] check_frida: running
[2025-08-21 14:27:27][352677531283173][296 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 14:27:27][352677531283173][296 ms][DEBUG] START check_scloud
[2025-08-21 14:27:27][352677531283173][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:27:27][352677531283173][577 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23985544 103900 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:27:27][352677531283173][577 ms][DEBUG] targetPkg: running
[2025-08-21 14:27:27][352677531283173][577 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 14:27:27][352677531283173][577 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:27:27][352677531283173][577 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMxMjgzMTczIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDRWVFBQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE2NCJ9'" -e "main()" -q"
[2025-08-21 14:27:27][352677531283173][577 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:27:27][352677531283173][577 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMxMjgzMTczIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDRWVFBQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE2NCJ9'" -e "main()" -q"
[2025-08-21 14:27:29][352677531283173][2561 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjc3NTMxMjgzMTczIiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDRWVFBQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE2NCJ9"\r\n
[2025-08-21 14:27:31][352677531283173][4748 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6b4f9ad-492b-43b0-8835-68e0ba1d0c20","id":"QR_d6b4f9ad-492b-43b0-8835-68e0ba1d0c20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:27:31][352677531283173][4748 ms][DEBUG] proc_open done in 4170 ms; code=0; res.len=3152
[2025-08-21 14:27:31][352677531283173][4748 ms][DEBUG] END   runCmdUntilRes#1 in 4170 ms
[2025-08-21 14:27:31][352677531283173][4748 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:27:56][352600224063595][0 ms][INFO] === Request start ===
[2025-08-21 14:27:56][352600224063595][1 ms][DEBUG] START check_frida
[2025-08-21 14:27:56][352600224063595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:27:56][352600224063595][309 ms][DEBUG] SU: done in 307 ms; outroot          4632     1 2332716   3996 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:27:56][352600224063595][309 ms][DEBUG] check_frida: running
[2025-08-21 14:27:56][352600224063595][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 14:27:56][352600224063595][309 ms][DEBUG] START check_scloud
[2025-08-21 14:27:56][352600224063595][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:27:56][352600224063595][543 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23985544 104464 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:27:56][352600224063595][543 ms][DEBUG] targetPkg: running
[2025-08-21 14:27:56][352600224063595][543 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 14:27:56][352600224063595][543 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:27:56][352600224063595][543 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI0MDYzNTk1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MEZaOEJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExOSJ9'" -e "main()" -q"
[2025-08-21 14:27:56][352600224063595][543 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:27:56][352600224063595][543 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjAwMjI0MDYzNTk1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MEZaOEJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExOSJ9'" -e "main()" -q"
[2025-08-21 14:27:58][352600224063595][2542 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjAwMjI0MDYzNTk1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk1MEZaOEJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExOSJ9"\r\n
[2025-08-21 14:28:00][352600224063595][4433 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8fed092-17e6-4300-aeeb-a093c160eeae","id":"QR_b8fed092-17e6-4300-aeeb-a093c160eeae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:28:00][352600224063595][4433 ms][DEBUG] proc_open done in 3889 ms; code=0; res.len=3152
[2025-08-21 14:28:00][352600224063595][4433 ms][DEBUG] END   runCmdUntilRes#1 in 3889 ms
[2025-08-21 14:28:00][352600224063595][4433 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:29:07][359468671045025][0 ms][INFO] === Request start ===
[2025-08-21 14:29:07][359468671045025][1 ms][DEBUG] START check_frida
[2025-08-21 14:29:07][359468671045025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:29:08][359468671045025][312 ms][DEBUG] SU: done in 311 ms; outroot          4632     1 2332716   4016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:29:08][359468671045025][312 ms][DEBUG] check_frida: running
[2025-08-21 14:29:08][359468671045025][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 14:29:08][359468671045025][312 ms][DEBUG] START check_scloud
[2025-08-21 14:29:08][359468671045025][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:29:08][359468671045025][609 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23985288 104636 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:29:08][359468671045025][609 ms][DEBUG] targetPkg: running
[2025-08-21 14:29:08][359468671045025][609 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:29:08][359468671045025][609 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:29:08][359468671045025][609 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NDY4NjcxMDQ1MDI1IiwibW9kZWwiOiJTTS1FMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g0MVpRSlJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE2NCJ9'" -e "main()" -q"
[2025-08-21 14:29:08][359468671045025][609 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:29:08][359468671045025][609 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NDY4NjcxMDQ1MDI1IiwibW9kZWwiOiJTTS1FMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g0MVpRSlJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE2NCJ9'" -e "main()" -q"
[2025-08-21 14:29:10][359468671045025][2593 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5NDY4NjcxMDQ1MDI1IiwibW9kZWwiOiJTTS1FMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g0MVpRSlJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE2NCJ9"\r\n
[2025-08-21 14:29:12][359468671045025][4811 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f038ed8-e763-49b9-bb3f-f9e26226139e","id":"QR_8f038ed8-e763-49b9-bb3f-f9e26226139e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:29:12][359468671045025][4811 ms][DEBUG] proc_open done in 4202 ms; code=0; res.len=3152
[2025-08-21 14:29:12][359468671045025][4811 ms][DEBUG] END   runCmdUntilRes#1 in 4202 ms
[2025-08-21 14:29:12][359468671045025][4811 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:29:18][353325478035672][0 ms][INFO] === Request start ===
[2025-08-21 14:29:18][353325478035672][1 ms][DEBUG] START check_frida
[2025-08-21 14:29:18][353325478035672][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:29:18][353325478035672][304 ms][DEBUG] SU: done in 303 ms; outroot          4632     1 2349136   4020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:29:18][353325478035672][304 ms][DEBUG] check_frida: running
[2025-08-21 14:29:18][353325478035672][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 14:29:18][353325478035672][304 ms][DEBUG] START check_scloud
[2025-08-21 14:29:18][353325478035672][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:29:18][353325478035672][616 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 24001964 105420 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:29:18][353325478035672][616 ms][DEBUG] targetPkg: running
[2025-08-21 14:29:18][353325478035672][616 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 14:29:18][353325478035672][616 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:29:18][353325478035672][616 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzI1NDc4MDM1NjcyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q5MDVMQ0ZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg0OCJ9'" -e "main()" -q"
[2025-08-21 14:29:18][353325478035672][616 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:29:18][353325478035672][616 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzI1NDc4MDM1NjcyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q5MDVMQ0ZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg0OCJ9'" -e "main()" -q"
[2025-08-21 14:29:20][353325478035672][2553 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzI1NDc4MDM1NjcyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q5MDVMQ0ZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg0OCJ9"\r\n
[2025-08-21 14:29:22][353325478035672][4115 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b803cf38-1204-45f1-b7c9-95a84533d9a5","id":"QR_b803cf38-1204-45f1-b7c9-95a84533d9a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:29:22][353325478035672][4115 ms][DEBUG] proc_open done in 3499 ms; code=0; res.len=3152
[2025-08-21 14:29:22][353325478035672][4115 ms][DEBUG] END   runCmdUntilRes#1 in 3499 ms
[2025-08-21 14:29:22][353325478035672][4115 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:30:10][350356671519256][1 ms][INFO] === Request start ===
[2025-08-21 14:30:10][350356671519256][2 ms][DEBUG] START check_frida
[2025-08-21 14:30:10][350356671519256][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:30:10][350356671519256][250 ms][DEBUG] SU: done in 248 ms; outroot          4632     1 2332716   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:30:10][350356671519256][250 ms][DEBUG] check_frida: running
[2025-08-21 14:30:10][350356671519256][250 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 14:30:10][350356671519256][250 ms][DEBUG] START check_internet
[2025-08-21 14:30:10][350356671519256][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:30:10][350356671519256][515 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=166 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 166.116/166.116/166.116/0.000 ms\n
[2025-08-21 14:30:10][350356671519256][516 ms][DEBUG] check_internet: online
[2025-08-21 14:30:10][350356671519256][516 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 14:30:10][350356671519256][516 ms][DEBUG] START check_scloud
[2025-08-21 14:30:10][350356671519256][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:30:10][350356671519256][812 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23985416 100716 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:30:10][350356671519256][813 ms][DEBUG] targetPkg: running
[2025-08-21 14:30:10][350356671519256][813 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:30:10][350356671519256][813 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:30:10][350356671519256][813 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzU2NjcxNTE5MjU2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMUVBQUZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI4MiJ9'" -e "main()" -q"
[2025-08-21 14:30:10][350356671519256][813 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:30:10][350356671519256][813 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzU2NjcxNTE5MjU2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMUVBQUZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI4MiJ9'" -e "main()" -q"
[2025-08-21 14:30:12][350356671519256][2765 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzU2NjcxNTE5MjU2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMUVBQUZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI4MiJ9"\r\n
[2025-08-21 14:30:15][350356671519256][5202 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab350d42-b6a0-4502-ae3b-ab66efcc3854","id":"QR_ab350d42-b6a0-4502-ae3b-ab66efcc3854","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:30:15][350356671519256][5202 ms][DEBUG] proc_open done in 4389 ms; code=0; res.len=3152
[2025-08-21 14:30:15][350356671519256][5202 ms][DEBUG] END   runCmdUntilRes#1 in 4390 ms
[2025-08-21 14:30:15][350356671519256][5202 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:30:23][354747956681652][0 ms][INFO] === Request start ===
[2025-08-21 14:30:23][354747956681652][1 ms][DEBUG] START check_frida
[2025-08-21 14:30:23][354747956681652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:30:23][354747956681652][303 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2349136   4012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:30:23][354747956681652][303 ms][DEBUG] check_frida: running
[2025-08-21 14:30:23][354747956681652][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 14:30:23][354747956681652][303 ms][DEBUG] START check_internet
[2025-08-21 14:30:23][354747956681652][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:30:24][354747956681652][787 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.577/202.577/202.577/0.000 ms\n
[2025-08-21 14:30:24][354747956681652][787 ms][DEBUG] check_internet: online
[2025-08-21 14:30:24][354747956681652][787 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 14:30:24][354747956681652][787 ms][DEBUG] START check_scloud
[2025-08-21 14:30:24][354747956681652][788 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:30:24][354747956681652][1068 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 24001708 101236 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:30:24][354747956681652][1068 ms][DEBUG] targetPkg: running
[2025-08-21 14:30:24][354747956681652][1068 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 14:30:24][354747956681652][1068 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:30:24][354747956681652][1068 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTU2NjgxNjUyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2ME5TQlhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc1OSJ9'" -e "main()" -q"
[2025-08-21 14:30:24][354747956681652][1068 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:30:24][354747956681652][1068 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTU2NjgxNjUyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2ME5TQlhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc1OSJ9'" -e "main()" -q"
[2025-08-21 14:30:26][354747956681652][3021 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTU2NjgxNjUyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2ME5TQlhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc1OSJ9"\r\n
[2025-08-21 14:30:28][354747956681652][4755 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa19fa60-e7f7-456c-9443-557991fffc0c","id":"QR_fa19fa60-e7f7-456c-9443-557991fffc0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:30:28][354747956681652][4756 ms][DEBUG] proc_open done in 3687 ms; code=0; res.len=3152
[2025-08-21 14:30:28][354747956681652][4756 ms][DEBUG] END   runCmdUntilRes#1 in 3687 ms
[2025-08-21 14:30:28][354747956681652][4756 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:30:34][352923541247802][0 ms][INFO] === Request start ===
[2025-08-21 14:30:34][352923541247802][1 ms][DEBUG] START check_frida
[2025-08-21 14:30:34][352923541247802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:30:35][352288969694780][1 ms][INFO] === Request start ===
[2025-08-21 14:30:35][352923541247802][303 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2349136   4024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:30:35][352923541247802][303 ms][DEBUG] check_frida: running
[2025-08-21 14:30:35][352923541247802][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 14:30:35][352923541247802][303 ms][DEBUG] START check_internet
[2025-08-21 14:30:35][352923541247802][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:30:35][352923541247802][631 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.277/229.277/229.277/0.000 ms\n
[2025-08-21 14:30:35][352923541247802][632 ms][DEBUG] check_internet: online
[2025-08-21 14:30:35][352923541247802][632 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 14:30:35][352923541247802][632 ms][DEBUG] START check_scloud
[2025-08-21 14:30:35][352923541247802][632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:30:35][352923541247802][913 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 24001964 102020 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:30:35][352923541247802][913 ms][DEBUG] targetPkg: running
[2025-08-21 14:30:35][352923541247802][913 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 14:30:35][352923541247802][913 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:30:35][352923541247802][913 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTIzNTQxMjQ3ODAyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMDA0MFRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwNCJ9'" -e "main()" -q"
[2025-08-21 14:30:35][352923541247802][913 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:30:35][352923541247802][913 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTIzNTQxMjQ3ODAyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMDA0MFRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwNCJ9'" -e "main()" -q"
[2025-08-21 14:30:37][352923541247802][2865 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTIzNTQxMjQ3ODAyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMDA0MFRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwNCJ9"\r\n
[2025-08-21 14:30:39][352923541247802][4662 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0de87a18-86d3-4197-ba7d-820f31d33df5","id":"QR_0de87a18-86d3-4197-ba7d-820f31d33df5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:30:39][352923541247802][4662 ms][DEBUG] proc_open done in 3749 ms; code=0; res.len=3152
[2025-08-21 14:30:39][352923541247802][4662 ms][DEBUG] END   runCmdUntilRes#1 in 3749 ms
[2025-08-21 14:30:39][352923541247802][4662 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:30:40][352288969694780][5073 ms][DEBUG] START check_frida
[2025-08-21 14:30:40][352288969694780][5074 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:30:40][352288969694780][5386 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2349136   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:30:40][352288969694780][5386 ms][DEBUG] check_frida: running
[2025-08-21 14:30:40][352288969694780][5386 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 14:30:40][352288969694780][5386 ms][DEBUG] START check_internet
[2025-08-21 14:30:40][352288969694780][5386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:30:40][352288969694780][5620 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.507/146.507/146.507/0.000 ms\n
[2025-08-21 14:30:40][352288969694780][5620 ms][DEBUG] check_internet: online
[2025-08-21 14:30:40][352288969694780][5620 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 14:30:40][352288969694780][5620 ms][DEBUG] START check_scloud
[2025-08-21 14:30:40][352288969694780][5620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:30:41][352288969694780][5886 ms][DEBUG] SU: done in 266 ms; outu0_a118       7086 20714 24001708 102196 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:30:41][352288969694780][5886 ms][DEBUG] targetPkg: running
[2025-08-21 14:30:41][352288969694780][5886 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 14:30:41][352288969694780][5886 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:30:41][352288969694780][5886 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTY5Njk0NzgwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMU4yUlNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUxNCJ9'" -e "main()" -q"
[2025-08-21 14:30:41][352288969694780][5886 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:30:41][352288969694780][5886 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTY5Njk0NzgwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMU4yUlNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUxNCJ9'" -e "main()" -q"
[2025-08-21 14:30:42][352288969694780][7823 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjg4OTY5Njk0NzgwIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxMU4yUlNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUxNCJ9"\r\n
[2025-08-21 14:30:44][352288969694780][9588 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4006f837-946d-4980-9bd9-0837fe3bc022","id":"QR_4006f837-946d-4980-9bd9-0837fe3bc022","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:30:44][352288969694780][9588 ms][DEBUG] proc_open done in 3702 ms; code=0; res.len=3152
[2025-08-21 14:30:44][352288969694780][9588 ms][DEBUG] END   runCmdUntilRes#1 in 3702 ms
[2025-08-21 14:30:44][352288969694780][9588 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:32:07][352192667159718][0 ms][INFO] === Request start ===
[2025-08-21 14:32:07][352192667159718][1 ms][DEBUG] START check_frida
[2025-08-21 14:32:07][352192667159718][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:32:07][352192667159718][258 ms][DEBUG] SU: done in 257 ms; outroot          4632     1 2332716   4024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:32:07][352192667159718][258 ms][DEBUG] check_frida: running
[2025-08-21 14:32:07][352192667159718][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 14:32:07][352192667159718][258 ms][DEBUG] START check_internet
[2025-08-21 14:32:07][352192667159718][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:32:07][352192667159718][555 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.983/192.983/192.983/0.000 ms\n
[2025-08-21 14:32:07][352192667159718][555 ms][DEBUG] check_internet: online
[2025-08-21 14:32:07][352192667159718][555 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 14:32:07][352192667159718][555 ms][DEBUG] START check_scloud
[2025-08-21 14:32:07][352192667159718][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:32:08][352192667159718][836 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23985288 102772 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:32:08][352192667159718][836 ms][DEBUG] targetPkg: running
[2025-08-21 14:32:08][352192667159718][836 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 14:32:08][352192667159718][836 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:32:08][352192667159718][836 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTkyNjY3MTU5NzE4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzME5SOEhaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcwNCJ9'" -e "main()" -q"
[2025-08-21 14:32:08][352192667159718][836 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:32:08][352192667159718][836 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTkyNjY3MTU5NzE4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzME5SOEhaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcwNCJ9'" -e "main()" -q"
[2025-08-21 14:32:10][352192667159718][2757 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMTkyNjY3MTU5NzE4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzME5SOEhaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcwNCJ9"\r\n
[2025-08-21 14:32:12][352192667159718][5038 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a5cafec-8c46-4599-be67-60af54b52533","id":"QR_0a5cafec-8c46-4599-be67-60af54b52533","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:32:12][352192667159718][5039 ms][DEBUG] proc_open done in 4203 ms; code=0; res.len=3152
[2025-08-21 14:32:12][352192667159718][5039 ms][DEBUG] END   runCmdUntilRes#1 in 4203 ms
[2025-08-21 14:32:12][352192667159718][5039 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:32:16][354747958365494][1 ms][INFO] === Request start ===
[2025-08-21 14:32:16][354747958365494][2 ms][DEBUG] START check_frida
[2025-08-21 14:32:16][354747958365494][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:32:16][354747958365494][268 ms][DEBUG] SU: done in 266 ms; outroot          4632     1 2349136   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:32:16][354747958365494][268 ms][DEBUG] check_frida: running
[2025-08-21 14:32:16][354747958365494][268 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 14:32:16][354747958365494][268 ms][DEBUG] START check_internet
[2025-08-21 14:32:16][354747958365494][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:32:16][354747958365494][565 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.204/197.204/197.204/0.000 ms\n
[2025-08-21 14:32:16][354747958365494][565 ms][DEBUG] check_internet: online
[2025-08-21 14:32:16][354747958365494][565 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 14:32:16][354747958365494][565 ms][DEBUG] START check_scloud
[2025-08-21 14:32:16][354747958365494][565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:32:16][354747958365494][861 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 24001708 103328 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:32:16][354747958365494][861 ms][DEBUG] targetPkg: running
[2025-08-21 14:32:16][354747958365494][861 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:32:16][354747958365494][861 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:32:16][354747958365494][861 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTU4MzY1NDk0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MFg3V1hCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg0MyJ9'" -e "main()" -q"
[2025-08-21 14:32:16][354747958365494][861 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:32:16][354747958365494][861 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTU4MzY1NDk0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MFg3V1hCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg0MyJ9'" -e "main()" -q"
[2025-08-21 14:32:18][354747958365494][2798 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTU4MzY1NDk0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MFg3V1hCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg0MyJ9"\r\n
[2025-08-21 14:32:19][350731016599017][0 ms][INFO] === Request start ===
[2025-08-21 14:32:20][354747958365494][4642 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_660c9c69-6966-463c-97f7-7525eb2ae75f","id":"QR_660c9c69-6966-463c-97f7-7525eb2ae75f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:32:20][354747958365494][4642 ms][DEBUG] proc_open done in 3780 ms; code=0; res.len=3152
[2025-08-21 14:32:20][354747958365494][4642 ms][DEBUG] END   runCmdUntilRes#1 in 3780 ms
[2025-08-21 14:32:20][354747958365494][4642 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:32:21][350731016599017][2021 ms][DEBUG] START check_frida
[2025-08-21 14:32:21][350731016599017][2021 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:32:21][350731016599017][2271 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:32:21][350731016599017][2271 ms][DEBUG] check_frida: running
[2025-08-21 14:32:21][350731016599017][2271 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 14:32:21][350731016599017][2271 ms][DEBUG] START check_internet
[2025-08-21 14:32:21][350731016599017][2271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:32:22][350731016599017][2522 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.706/151.706/151.706/0.000 ms\n
[2025-08-21 14:32:22][350731016599017][2522 ms][DEBUG] check_internet: online
[2025-08-21 14:32:22][350731016599017][2522 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 14:32:22][350731016599017][2522 ms][DEBUG] START check_scloud
[2025-08-21 14:32:22][350731016599017][2522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:32:22][350731016599017][2833 ms][DEBUG] SU: done in 311 ms; outu0_a118       7086 20714 24001708 103868 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:32:22][350731016599017][2833 ms][DEBUG] targetPkg: running
[2025-08-21 14:32:22][350731016599017][2833 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 14:32:22][350731016599017][2833 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:32:22][350731016599017][2833 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzMxMDE2NTk5MDE3IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RBMUxTVktLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUzNyJ9'" -e "main()" -q"
[2025-08-21 14:32:22][350731016599017][2833 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:32:22][350731016599017][2833 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzMxMDE2NTk5MDE3IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RBMUxTVktLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUzNyJ9'" -e "main()" -q"
[2025-08-21 14:32:24][350731016599017][4770 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzMxMDE2NTk5MDE3IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RBMUxTVktLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTUzNyJ9"\r\n
[2025-08-21 14:32:26][350731016599017][6989 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_246bdd52-6f32-4d13-8100-aaa373e9f4ea","id":"QR_246bdd52-6f32-4d13-8100-aaa373e9f4ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:32:26][350731016599017][6989 ms][DEBUG] proc_open done in 4155 ms; code=0; res.len=3152
[2025-08-21 14:32:26][350731016599017][6989 ms][DEBUG] END   runCmdUntilRes#1 in 4155 ms
[2025-08-21 14:32:26][350731016599017][6989 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:33:05][358558828288048][0 ms][INFO] === Request start ===
[2025-08-21 14:33:05][358558828288048][1 ms][DEBUG] START check_frida
[2025-08-21 14:33:05][358558828288048][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:33:06][358558828288048][306 ms][DEBUG] SU: done in 305 ms; outroot          4632     1 2332716   4016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:33:06][358558828288048][306 ms][DEBUG] check_frida: running
[2025-08-21 14:33:06][358558828288048][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 14:33:06][358558828288048][306 ms][DEBUG] START check_scloud
[2025-08-21 14:33:06][358558828288048][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:33:06][358558828288048][603 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23985288 104484 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:33:06][358558828288048][603 ms][DEBUG] targetPkg: running
[2025-08-21 14:33:06][358558828288048][603 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:33:06][358558828288048][603 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:33:06][358558828288048][603 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTU4ODI4Mjg4MDQ4IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFI0MDBTRDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODY2In0='" -e "main()" -q"
[2025-08-21 14:33:06][358558828288048][603 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:33:06][358558828288048][603 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTU4ODI4Mjg4MDQ4IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFI0MDBTRDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODY2In0='" -e "main()" -q"
[2025-08-21 14:33:08][358558828288048][2524 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NTU4ODI4Mjg4MDQ4IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFI0MDBTRDBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODY2In0="\r\n
[2025-08-21 14:33:10][357435844779071][1 ms][INFO] === Request start ===
[2025-08-21 14:33:13][358558828288048][7617 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44dcd344-22be-42cb-a889-e4f48a10ab98","id":"QR_44dcd344-22be-42cb-a889-e4f48a10ab98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:33:13][358558828288048][7617 ms][DEBUG] proc_open done in 7014 ms; code=0; res.len=3152
[2025-08-21 14:33:13][358558828288048][7617 ms][DEBUG] END   runCmdUntilRes#1 in 7014 ms
[2025-08-21 14:33:13][358558828288048][7617 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:33:13][357435844779071][3037 ms][DEBUG] START check_frida
[2025-08-21 14:33:13][357435844779071][3037 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:33:14][357435844779071][3318 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:33:14][357435844779071][3319 ms][DEBUG] check_frida: running
[2025-08-21 14:33:14][357435844779071][3319 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 14:33:14][357435844779071][3319 ms][DEBUG] START check_scloud
[2025-08-21 14:33:14][357435844779071][3319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:33:14][357435844779071][3615 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 24001708 105104 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:33:14][357435844779071][3615 ms][DEBUG] targetPkg: running
[2025-08-21 14:33:14][357435844779071][3615 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:33:14][357435844779071][3615 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:33:14][357435844779071][3615 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0Nzc5MDcxIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MFZaVDFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODExMSJ9'" -e "main()" -q"
[2025-08-21 14:33:14][357435844779071][3616 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:33:14][357435844779071][3616 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0Nzc5MDcxIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MFZaVDFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODExMSJ9'" -e "main()" -q"
[2025-08-21 14:33:16][357435844779071][5568 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDM1ODQ0Nzc5MDcxIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MFZaVDFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODExMSJ9"\r\n
[2025-08-21 14:33:18][357435844779071][7646 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f04c268f-da9e-49c6-8970-5666e2a6f515","id":"QR_f04c268f-da9e-49c6-8970-5666e2a6f515","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:33:18][357435844779071][7646 ms][DEBUG] proc_open done in 4031 ms; code=0; res.len=3152
[2025-08-21 14:33:18][357435844779071][7646 ms][DEBUG] END   runCmdUntilRes#1 in 4031 ms
[2025-08-21 14:33:18][357435844779071][7647 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:34:08][352967352151660][0 ms][INFO] === Request start ===
[2025-08-21 14:34:08][352967352151660][1 ms][DEBUG] START check_frida
[2025-08-21 14:34:08][352967352151660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:34:08][352967352151660][310 ms][DEBUG] SU: done in 309 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:34:08][352967352151660][310 ms][DEBUG] check_frida: running
[2025-08-21 14:34:08][352967352151660][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 14:34:08][352967352151660][310 ms][DEBUG] START check_internet
[2025-08-21 14:34:08][352967352151660][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:34:08][352967352151660][685 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.572/242.572/242.572/0.000 ms\n
[2025-08-21 14:34:08][352967352151660][685 ms][DEBUG] check_internet: online
[2025-08-21 14:34:08][352967352151660][685 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 14:34:08][352967352151660][685 ms][DEBUG] START check_scloud
[2025-08-21 14:34:08][352967352151660][685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:34:08][352967352151660][935 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23985544 101588 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:34:08][352967352151660][935 ms][DEBUG] targetPkg: running
[2025-08-21 14:34:08][352967352151660][935 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 14:34:08][352967352151660][935 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:34:08][352967352151660][935 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzUyMTUxNjYwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRCMDZGREpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODc1In0='" -e "main()" -q"
[2025-08-21 14:34:08][352967352151660][935 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:34:08][352967352151660][935 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzUyMTUxNjYwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRCMDZGREpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODc1In0='" -e "main()" -q"
[2025-08-21 14:34:10][352967352151660][2903 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTY3MzUyMTUxNjYwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRCMDZGREpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODc1In0="\r\n
[2025-08-21 14:34:13][352967352151660][5668 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_103319e7-432f-446f-959c-f11c55d95633","id":"QR_103319e7-432f-446f-959c-f11c55d95633","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:34:13][352967352151660][5668 ms][DEBUG] proc_open done in 4733 ms; code=0; res.len=3152
[2025-08-21 14:34:13][352967352151660][5668 ms][DEBUG] END   runCmdUntilRes#1 in 4734 ms
[2025-08-21 14:34:13][352967352151660][5668 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:35:09][351782256821545][0 ms][INFO] === Request start ===
[2025-08-21 14:35:09][351782256821545][1 ms][DEBUG] START check_frida
[2025-08-21 14:35:09][351782256821545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:35:09][351782256821545][299 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2332716   4020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:35:09][351782256821545][299 ms][DEBUG] check_frida: running
[2025-08-21 14:35:09][351782256821545][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 14:35:09][351782256821545][299 ms][DEBUG] START check_scloud
[2025-08-21 14:35:09][351782256821545][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:35:10][351782256821545][611 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23985416 102384 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:35:10][351782256821545][611 ms][DEBUG] targetPkg: running
[2025-08-21 14:35:10][351782256821545][611 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 14:35:10][351782256821545][611 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:35:10][351782256821545][611 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzgyMjU2ODIxNTQ1IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMEFTWjZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzcyIn0='" -e "main()" -q"
[2025-08-21 14:35:10][351782256821545][611 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:35:10][351782256821545][611 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzgyMjU2ODIxNTQ1IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMEFTWjZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzcyIn0='" -e "main()" -q"
[2025-08-21 14:35:12][351782256821545][2548 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzgyMjU2ODIxNTQ1IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMEFTWjZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzcyIn0="\r\n
[2025-08-21 14:35:15][351782256821545][6219 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cefbb81b-fd15-4cdb-9cd0-522615d2cba8","id":"QR_cefbb81b-fd15-4cdb-9cd0-522615d2cba8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:35:15][351782256821545][6219 ms][DEBUG] proc_open done in 5608 ms; code=0; res.len=3152
[2025-08-21 14:35:15][351782256821545][6219 ms][DEBUG] END   runCmdUntilRes#1 in 5608 ms
[2025-08-21 14:35:15][351782256821545][6219 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:35:28][350792521066967][1 ms][INFO] === Request start ===
[2025-08-21 14:35:28][350792521066967][2 ms][DEBUG] START check_frida
[2025-08-21 14:35:28][350792521066967][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:35:28][350792521066967][311 ms][DEBUG] SU: done in 309 ms; outroot          4632     1 2332716   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:35:28][350792521066967][311 ms][DEBUG] check_frida: running
[2025-08-21 14:35:28][350792521066967][311 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 14:35:28][350792521066967][311 ms][DEBUG] START check_scloud
[2025-08-21 14:35:28][350792521066967][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:35:29][350792521066967][607 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23985416 102836 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:35:29][350792521066967][607 ms][DEBUG] targetPkg: running
[2025-08-21 14:35:29][350792521066967][607 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:35:29][350792521066967][608 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:35:29][350792521066967][608 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzkyNTIxMDY2OTY3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMDczU0VLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODQ4In0='" -e "main()" -q"
[2025-08-21 14:35:29][350792521066967][608 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:35:29][350792521066967][608 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzkyNTIxMDY2OTY3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMDczU0VLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODQ4In0='" -e "main()" -q"
[2025-08-21 14:35:31][350792521066967][2544 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzkyNTIxMDY2OTY3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMDczU0VLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODQ4In0="\r\n
[2025-08-21 14:35:33][350792521066967][5184 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8c9c4a9-5624-49cf-8080-a0fada0290ca","id":"QR_c8c9c4a9-5624-49cf-8080-a0fada0290ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:35:33][350792521066967][5185 ms][DEBUG] proc_open done in 4576 ms; code=0; res.len=3152
[2025-08-21 14:35:33][350792521066967][5185 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 14:35:33][350792521066967][5185 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:35:42][357879701770907][0 ms][INFO] === Request start ===
[2025-08-21 14:35:42][357879701770907][1 ms][DEBUG] START check_frida
[2025-08-21 14:35:42][357879701770907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:35:42][357879701770907][284 ms][DEBUG] SU: done in 283 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:35:42][357879701770907][285 ms][DEBUG] check_frida: running
[2025-08-21 14:35:42][357879701770907][285 ms][DEBUG] END   check_frida in 284 ms
[2025-08-21 14:35:42][357879701770907][285 ms][DEBUG] START check_scloud
[2025-08-21 14:35:42][357879701770907][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:35:43][357879701770907][504 ms][DEBUG] SU: done in 219 ms; outu0_a118       7086 20714 24001836 103408 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:35:43][357879701770907][504 ms][DEBUG] targetPkg: running
[2025-08-21 14:35:43][357879701770907][504 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-21 14:35:43][357879701770907][504 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:35:43][357879701770907][504 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODc5NzAxNzcwOTA3IiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ044MEQxRjJEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM2OSJ9'" -e "main()" -q"
[2025-08-21 14:35:43][357879701770907][504 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:35:43][357879701770907][504 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODc5NzAxNzcwOTA3IiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ044MEQxRjJEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM2OSJ9'" -e "main()" -q"
[2025-08-21 14:35:44][357879701770907][2471 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3ODc5NzAxNzcwOTA3IiwibW9kZWwiOiJTTS1OOTgxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ044MEQxRjJEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM2OSJ9"\r\n
[2025-08-21 14:35:47][357879701770907][4565 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db130fa0-b6ff-4b76-a348-87fe86e67450","id":"QR_db130fa0-b6ff-4b76-a348-87fe86e67450","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:35:47][357879701770907][4565 ms][DEBUG] proc_open done in 4060 ms; code=0; res.len=3152
[2025-08-21 14:35:47][357879701770907][4565 ms][DEBUG] END   runCmdUntilRes#1 in 4060 ms
[2025-08-21 14:35:47][357879701770907][4565 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:39:34][358451328160208][0 ms][INFO] === Request start ===
[2025-08-21 14:39:34][358451328160208][0 ms][DEBUG] START check_frida
[2025-08-21 14:39:34][358451328160208][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:39:35][358451328160208][291 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2332716   4000 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:39:35][358451328160208][291 ms][DEBUG] check_frida: running
[2025-08-21 14:39:35][358451328160208][291 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 14:39:35][358451328160208][291 ms][DEBUG] START check_scloud
[2025-08-21 14:39:35][358451328160208][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:39:35][358451328160208][525 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23985416 104188 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:39:35][358451328160208][525 ms][DEBUG] targetPkg: running
[2025-08-21 14:39:35][358451328160208][526 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 14:39:35][358451328160208][526 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:39:35][358451328160208][526 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NDUxMzI4MTYwMjA4IiwibW9kZWwiOiJTTS1NMTI3RyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MUZXTlNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUxMSJ9'" -e "main()" -q"
[2025-08-21 14:39:35][358451328160208][526 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:39:35][358451328160208][526 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NDUxMzI4MTYwMjA4IiwibW9kZWwiOiJTTS1NMTI3RyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MUZXTlNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUxMSJ9'" -e "main()" -q"
[2025-08-21 14:39:37][358451328160208][2478 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NDUxMzI4MTYwMjA4IiwibW9kZWwiOiJTTS1NMTI3RyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ0MUZXTlNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUxMSJ9"\r\n
[2025-08-21 14:39:39][358451328160208][4525 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18ba63d3-7ed5-45a6-8cee-bae8675c39e9","id":"QR_18ba63d3-7ed5-45a6-8cee-bae8675c39e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:39:39][358451328160208][4525 ms][DEBUG] proc_open done in 3999 ms; code=0; res.len=3152
[2025-08-21 14:39:39][358451328160208][4525 ms][DEBUG] END   runCmdUntilRes#1 in 3999 ms
[2025-08-21 14:39:39][358451328160208][4525 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:40:33][351877478109503][0 ms][INFO] === Request start ===
[2025-08-21 14:40:33][351877478109503][0 ms][DEBUG] START check_frida
[2025-08-21 14:40:33][351877478109503][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:40:34][351877478109503][248 ms][DEBUG] SU: done in 247 ms; outroot          4632     1 2332716   4012 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:40:34][351877478109503][248 ms][DEBUG] check_frida: running
[2025-08-21 14:40:34][351877478109503][248 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 14:40:34][351877478109503][248 ms][DEBUG] START check_internet
[2025-08-21 14:40:34][351877478109503][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:40:34][351877478109503][699 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.527/202.527/202.527/0.000 ms\n
[2025-08-21 14:40:34][351877478109503][699 ms][DEBUG] check_internet: online
[2025-08-21 14:40:34][351877478109503][699 ms][DEBUG] END   check_internet in 451 ms
[2025-08-21 14:40:34][351877478109503][699 ms][DEBUG] START check_scloud
[2025-08-21 14:40:34][351877478109503][699 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:40:34][351877478109503][980 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23985544 104792 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:40:34][351877478109503][980 ms][DEBUG] targetPkg: running
[2025-08-21 14:40:34][351877478109503][980 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 14:40:34][351877478109503][980 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:40:34][351877478109503][980 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc4MTA5NTAzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MFg4WDNLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTExMyJ9'" -e "main()" -q"
[2025-08-21 14:40:34][351877478109503][980 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:40:34][351877478109503][980 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc4MTA5NTAzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MFg4WDNLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTExMyJ9'" -e "main()" -q"
[2025-08-21 14:40:36][351877478109503][2948 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDc4MTA5NTAzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MFg4WDNLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTExMyJ9"\r\n
[2025-08-21 14:40:38][351877478109503][4979 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec36e5d8-5232-4051-8d32-079104c4b0e1","id":"QR_ec36e5d8-5232-4051-8d32-079104c4b0e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:40:38][351877478109503][4979 ms][DEBUG] proc_open done in 3999 ms; code=0; res.len=3152
[2025-08-21 14:40:38][351877478109503][4979 ms][DEBUG] END   runCmdUntilRes#1 in 3999 ms
[2025-08-21 14:40:38][351877478109503][4979 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:41:06][350637543250877][0 ms][INFO] === Request start ===
[2025-08-21 14:41:06][350637543250877][1 ms][DEBUG] START check_frida
[2025-08-21 14:41:06][350637543250877][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:41:06][350637543250877][308 ms][DEBUG] SU: done in 306 ms; outroot          4632     1 2332716   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:41:06][350637543250877][308 ms][DEBUG] check_frida: running
[2025-08-21 14:41:06][350637543250877][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 14:41:06][350637543250877][308 ms][DEBUG] START check_scloud
[2025-08-21 14:41:06][350637543250877][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:41:07][350637543250877][606 ms][DEBUG] SU: done in 298 ms; outu0_a118       7086 20714 23985544 105616 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:41:07][350637543250877][606 ms][DEBUG] targetPkg: running
[2025-08-21 14:41:07][350637543250877][606 ms][DEBUG] END   check_scloud in 299 ms
[2025-08-21 14:41:07][350637543250877][607 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:41:07][350637543250877][607 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQzMjUwODc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFRBMDFUUlNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIxMSJ9'" -e "main()" -q"
[2025-08-21 14:41:07][350637543250877][607 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:41:07][350637543250877][607 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQzMjUwODc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFRBMDFUUlNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIxMSJ9'" -e "main()" -q"
[2025-08-21 14:41:08][350637543250877][2573 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjM3NTQzMjUwODc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFRBMDFUUlNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIxMSJ9"\r\n
[2025-08-21 14:41:11][350637543250877][5025 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36992e16-0dbd-4ed2-ab00-fc371738d71f","id":"QR_36992e16-0dbd-4ed2-ab00-fc371738d71f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:41:11][350637543250877][5025 ms][DEBUG] proc_open done in 4418 ms; code=0; res.len=3152
[2025-08-21 14:41:11][350637543250877][5025 ms][DEBUG] END   runCmdUntilRes#1 in 4418 ms
[2025-08-21 14:41:11][350637543250877][5025 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:43:06][356317530522745][1 ms][INFO] === Request start ===
[2025-08-21 14:43:06][356317530522745][1 ms][DEBUG] START check_frida
[2025-08-21 14:43:06][356317530522745][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:43:07][356317530522745][303 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2332716   4016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:43:07][356317530522745][303 ms][DEBUG] check_frida: running
[2025-08-21 14:43:07][356317530522745][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 14:43:07][356317530522745][303 ms][DEBUG] START check_scloud
[2025-08-21 14:43:07][356317530522745][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:43:07][356317530522745][584 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23985416 102240 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:43:07][356317530522745][585 ms][DEBUG] targetPkg: running
[2025-08-21 14:43:07][356317530522745][585 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 14:43:07][356317530522745][585 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:43:07][356317530522745][585 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzE3NTMwNTIyNzQ1IiwibW9kZWwiOiJTTS1GOTI2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1JBMEY4WjNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTE5In0='" -e "main()" -q"
[2025-08-21 14:43:07][356317530522745][585 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:43:07][356317530522745][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzE3NTMwNTIyNzQ1IiwibW9kZWwiOiJTTS1GOTI2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1JBMEY4WjNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTE5In0='" -e "main()" -q"
[2025-08-21 14:43:07][357358510372635][0 ms][INFO] === Request start ===
[2025-08-21 14:43:09][356317530522745][2521 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MzE3NTMwNTIyNzQ1IiwibW9kZWwiOiJTTS1GOTI2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1JBMEY4WjNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTE5In0="\r\n
[2025-08-21 14:43:12][356317530522745][5521 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b705074-767e-447e-af12-9b89d9e16136","id":"QR_0b705074-767e-447e-af12-9b89d9e16136","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:43:12][356317530522745][5521 ms][DEBUG] proc_open done in 4936 ms; code=0; res.len=3152
[2025-08-21 14:43:12][356317530522745][5521 ms][DEBUG] END   runCmdUntilRes#1 in 4936 ms
[2025-08-21 14:43:12][356317530522745][5521 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:43:12][357358510372635][5063 ms][DEBUG] START check_frida
[2025-08-21 14:43:12][357358510372635][5063 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:43:13][357358510372635][5360 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:43:13][357358510372635][5360 ms][DEBUG] check_frida: running
[2025-08-21 14:43:13][357358510372635][5360 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 14:43:13][357358510372635][5360 ms][DEBUG] START check_scloud
[2025-08-21 14:43:13][357358510372635][5360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:43:13][357358510372635][5610 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 24001836 102792 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:43:13][357358510372635][5610 ms][DEBUG] targetPkg: running
[2025-08-21 14:43:13][357358510372635][5610 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 14:43:13][357358510372635][5610 ms][DEBUG] rawBody.length=1159
[2025-08-21 14:43:13][357358510372635][5610 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzU4NTEwMzcyNjM1IiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWEMwQjZOMEQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiVFBBIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzQ4NTcifQ=='" -e "main()" -q"
[2025-08-21 14:43:13][357358510372635][5610 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:43:13][357358510372635][5610 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzU4NTEwMzcyNjM1IiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWEMwQjZOMEQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiVFBBIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzQ4NTcifQ=='" -e "main()" -q"
[2025-08-21 14:43:15][357358510372635][7563 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MzU4NTEwMzcyNjM1IiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWEMwQjZOMEQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiVFBBIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzQ4NTcifQ=="\r\n
[2025-08-21 14:43:18][357358510372635][10609 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b48ce7fb-a61c-44e2-bb83-e568b515e19b","id":"QR_b48ce7fb-a61c-44e2-bb83-e568b515e19b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:43:18][357358510372635][10609 ms][DEBUG] proc_open done in 4999 ms; code=0; res.len=3152
[2025-08-21 14:43:18][357358510372635][10609 ms][DEBUG] END   runCmdUntilRes#1 in 4999 ms
[2025-08-21 14:43:18][357358510372635][10609 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:43:35][353600810914697][0 ms][INFO] === Request start ===
[2025-08-21 14:43:35][353600810914697][1 ms][DEBUG] START check_frida
[2025-08-21 14:43:35][353600810914697][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:43:35][353600810914697][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2332716   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:43:35][353600810914697][293 ms][DEBUG] check_frida: running
[2025-08-21 14:43:35][353600810914697][293 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 14:43:35][353600810914697][293 ms][DEBUG] START check_scloud
[2025-08-21 14:43:35][353600810914697][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:43:35][353600810914697][591 ms][DEBUG] SU: done in 299 ms; outu0_a118       7086 20714 23985544 103432 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:43:35][353600810914697][591 ms][DEBUG] targetPkg: running
[2025-08-21 14:43:35][353600810914697][591 ms][DEBUG] END   check_scloud in 299 ms
[2025-08-21 14:43:35][353600810914697][592 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:43:35][353600810914697][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODEwOTE0Njk3IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ1MDVTWlBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODY2In0='" -e "main()" -q"
[2025-08-21 14:43:35][353600810914697][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:43:35][353600810914697][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODEwOTE0Njk3IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ1MDVTWlBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODY2In0='" -e "main()" -q"
[2025-08-21 14:43:37][353600810914697][2526 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjAwODEwOTE0Njk3IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ1MDVTWlBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODY2In0="\r\n
[2025-08-21 14:43:42][353600810914697][7244 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8dddf4ff-c32d-4074-9e99-3679304269dc","id":"QR_8dddf4ff-c32d-4074-9e99-3679304269dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:43:42][353600810914697][7244 ms][DEBUG] proc_open done in 6653 ms; code=0; res.len=3152
[2025-08-21 14:43:42][353600810914697][7244 ms][DEBUG] END   runCmdUntilRes#1 in 6653 ms
[2025-08-21 14:43:42][353600810914697][7245 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:43:56][353960260258155][0 ms][INFO] === Request start ===
[2025-08-21 14:43:56][353960260258155][1 ms][DEBUG] START check_frida
[2025-08-21 14:43:56][353960260258155][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:43:56][353960260258155][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2332716   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:43:56][353960260258155][295 ms][DEBUG] check_frida: running
[2025-08-21 14:43:56][353960260258155][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 14:43:56][353960260258155][295 ms][DEBUG] START check_scloud
[2025-08-21 14:43:56][353960260258155][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:43:56][353960260258155][607 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23985416 103864 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:43:56][353960260258155][607 ms][DEBUG] targetPkg: running
[2025-08-21 14:43:56][353960260258155][607 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 14:43:56][353960260258155][607 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:43:56][353960260258155][607 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTYwMjYwMjU4MTU1IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI1MENRU0pCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzkxIn0='" -e "main()" -q"
[2025-08-21 14:43:56][353960260258155][607 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:43:56][353960260258155][607 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTYwMjYwMjU4MTU1IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI1MENRU0pCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzkxIn0='" -e "main()" -q"
[2025-08-21 14:43:58][353960260258155][2544 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTYwMjYwMjU4MTU1IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI1MENRU0pCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzkxIn0="\r\n
[2025-08-21 14:44:01][353960260258155][5371 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07954869-232f-459c-95ea-4b95a1898768","id":"QR_07954869-232f-459c-95ea-4b95a1898768","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:44:01][353960260258155][5371 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 14:44:01][353960260258155][5371 ms][DEBUG] END   runCmdUntilRes#1 in 4764 ms
[2025-08-21 14:44:01][353960260258155][5371 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:44:35][351285623549252][0 ms][INFO] === Request start ===
[2025-08-21 14:44:35][351285623549252][1 ms][DEBUG] START check_frida
[2025-08-21 14:44:35][351285623549252][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:44:35][351285623549252][257 ms][DEBUG] SU: done in 256 ms; outroot          4632     1 2332716   4020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:44:35][351285623549252][257 ms][DEBUG] check_frida: running
[2025-08-21 14:44:35][351285623549252][257 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 14:44:35][351285623549252][257 ms][DEBUG] START check_internet
[2025-08-21 14:44:35][351285623549252][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:44:36][351285623549252][725 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.920/204.920/204.920/0.000 ms\n
[2025-08-21 14:44:36][351285623549252][725 ms][DEBUG] check_internet: online
[2025-08-21 14:44:36][351285623549252][725 ms][DEBUG] END   check_internet in 468 ms
[2025-08-21 14:44:36][351285623549252][725 ms][DEBUG] START check_scloud
[2025-08-21 14:44:36][351285623549252][725 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:44:36][351285623549252][1022 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23985544 104544 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:44:36][351285623549252][1022 ms][DEBUG] targetPkg: running
[2025-08-21 14:44:36][351285623549252][1022 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:44:36][351285623549252][1022 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:44:36][351285623549252][1022 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjg1NjIzNTQ5MjUyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMxMiJ9'" -e "main()" -q"
[2025-08-21 14:44:36][351285623549252][1023 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:44:36][351285623549252][1023 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjg1NjIzNTQ5MjUyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMxMiJ9'" -e "main()" -q"
[2025-08-21 14:44:38][351285623549252][2959 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjg1NjIzNTQ5MjUyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMxMiJ9"\r\n
[2025-08-21 14:44:40][351285623549252][4911 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 14:44:40][351285623549252][4912 ms][DEBUG] proc_open done in 3889 ms; code=0; res.len=107
[2025-08-21 14:44:40][351285623549252][4912 ms][DEBUG] END   runCmdUntilRes#1 in 3889 ms
[2025-08-21 14:44:40][351285623549252][4912 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 14:44:40][][0 ms][INFO] === Request start ===
[2025-08-21 14:44:40][][1 ms][DEBUG] START check_frida
[2025-08-21 14:44:40][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:44:40][][255 ms][DEBUG] SU: done in 254 ms; outroot          4632     1 2349136   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:44:40][][255 ms][DEBUG] check_frida: running
[2025-08-21 14:44:40][][255 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 14:44:40][][255 ms][DEBUG] START check_internet
[2025-08-21 14:44:40][][255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:44:41][][490 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.036/143.036/143.036/0.000 ms\n
[2025-08-21 14:44:41][][490 ms][DEBUG] check_internet: online
[2025-08-21 14:44:41][][490 ms][DEBUG] END   check_internet in 235 ms
[2025-08-21 14:44:41][][490 ms][DEBUG] START check_scloud
[2025-08-21 14:44:41][][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:44:41][][786 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 24001964 105164 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:44:41][][787 ms][DEBUG] targetPkg: running
[2025-08-21 14:44:41][][787 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:44:41][][787 ms][DEBUG] rawBody.length=1131
[2025-08-21 14:44:41][][787 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgyNyJ9'" -e "main()" -q"
[2025-08-21 14:44:41][][787 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:44:41][][787 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgyNyJ9'" -e "main()" -q"
[2025-08-21 14:44:43][][2708 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgyNyJ9"\r\n
[2025-08-21 14:44:44][][4161 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 14:44:44][][4161 ms][DEBUG] proc_open done in 3374 ms; code=0; res.len=107
[2025-08-21 14:44:44][][4161 ms][DEBUG] END   runCmdUntilRes#1 in 3374 ms
[2025-08-21 14:44:44][][4161 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 14:44:45][][0 ms][INFO] === Request start ===
[2025-08-21 14:44:45][][1 ms][DEBUG] START check_frida
[2025-08-21 14:44:45][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:44:45][][256 ms][DEBUG] SU: done in 255 ms; outroot          4632     1 2349136   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:44:45][][256 ms][DEBUG] check_frida: running
[2025-08-21 14:44:45][][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 14:44:45][][256 ms][DEBUG] START check_internet
[2025-08-21 14:44:45][][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:44:45][][490 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.524/144.524/144.524/0.000 ms\n
[2025-08-21 14:44:45][][490 ms][DEBUG] check_internet: online
[2025-08-21 14:44:45][][490 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 14:44:45][][490 ms][DEBUG] START check_scloud
[2025-08-21 14:44:45][][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:44:45][][724 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 24001964 102388 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:44:45][][724 ms][DEBUG] targetPkg: running
[2025-08-21 14:44:45][][724 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 14:44:45][][724 ms][DEBUG] rawBody.length=1131
[2025-08-21 14:44:45][][724 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTUxOCJ9'" -e "main()" -q"
[2025-08-21 14:44:45][][724 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:44:45][][724 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTUxOCJ9'" -e "main()" -q"
[2025-08-21 14:44:47][][2646 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTUxOCJ9"\r\n
[2025-08-21 14:44:49][][4005 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 14:44:49][][4005 ms][DEBUG] proc_open done in 3280 ms; code=0; res.len=107
[2025-08-21 14:44:49][][4005 ms][DEBUG] END   runCmdUntilRes#1 in 3280 ms
[2025-08-21 14:44:49][][4005 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 14:44:51][351285623549252][0 ms][INFO] === Request start ===
[2025-08-21 14:44:51][351285623549252][0 ms][DEBUG] START check_frida
[2025-08-21 14:44:51][351285623549252][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:44:51][351285623549252][290 ms][DEBUG] SU: done in 290 ms; outroot          4632     1 2349136   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:44:51][351285623549252][290 ms][DEBUG] check_frida: running
[2025-08-21 14:44:51][351285623549252][290 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 14:44:51][351285623549252][290 ms][DEBUG] START check_internet
[2025-08-21 14:44:51][351285623549252][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:44:51][351285623549252][526 ms][DEBUG] SU: done in 236 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.109/145.109/145.109/0.000 ms\n
[2025-08-21 14:44:51][351285623549252][526 ms][DEBUG] check_internet: online
[2025-08-21 14:44:51][351285623549252][526 ms][DEBUG] END   check_internet in 236 ms
[2025-08-21 14:44:51][351285623549252][526 ms][DEBUG] START check_scloud
[2025-08-21 14:44:51][351285623549252][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:44:52][351285623549252][821 ms][DEBUG] SU: done in 295 ms; outu0_a118       7086 20714 24001964 102944 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:44:52][351285623549252][822 ms][DEBUG] targetPkg: running
[2025-08-21 14:44:52][351285623549252][822 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 14:44:52][351285623549252][822 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:44:52][351285623549252][822 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjg1NjIzNTQ5MjUyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDUyIn0='" -e "main()" -q"
[2025-08-21 14:44:52][351285623549252][822 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:44:52][351285623549252][822 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjg1NjIzNTQ5MjUyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDUyIn0='" -e "main()" -q"
[2025-08-21 14:44:54][351285623549252][2758 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjg1NjIzNTQ5MjUyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMjlCQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDUyIn0="\r\n
[2025-08-21 14:44:57][351285623549252][6023 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99a7ecb1-470d-4baa-830c-11df2edf6325","id":"QR_99a7ecb1-470d-4baa-830c-11df2edf6325","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:44:57][351285623549252][6023 ms][DEBUG] proc_open done in 5201 ms; code=0; res.len=3152
[2025-08-21 14:44:57][351285623549252][6023 ms][DEBUG] END   runCmdUntilRes#1 in 5202 ms
[2025-08-21 14:44:57][351285623549252][6023 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:47:08][356835250921979][1 ms][INFO] === Request start ===
[2025-08-21 14:47:08][356835250921979][2 ms][DEBUG] START check_frida
[2025-08-21 14:47:08][356835250921979][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:47:08][356835250921979][241 ms][DEBUG] SU: done in 239 ms; outroot          4632     1 2332716   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:47:08][356835250921979][241 ms][DEBUG] check_frida: running
[2025-08-21 14:47:08][356835250921979][241 ms][DEBUG] END   check_frida in 239 ms
[2025-08-21 14:47:08][356835250921979][241 ms][DEBUG] START check_scloud
[2025-08-21 14:47:08][356835250921979][241 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:47:09][356835250921979][553 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23985544 103504 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:47:09][356835250921979][553 ms][DEBUG] targetPkg: running
[2025-08-21 14:47:09][356835250921979][553 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 14:47:09][356835250921979][553 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:47:09][356835250921979][553 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2ODM1MjUwOTIxOTc5IiwibW9kZWwiOiJTTS1BMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFIzMERTTkdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzcyOCJ9'" -e "main()" -q"
[2025-08-21 14:47:09][356835250921979][553 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:47:09][356835250921979][553 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2ODM1MjUwOTIxOTc5IiwibW9kZWwiOiJTTS1BMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFIzMERTTkdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzcyOCJ9'" -e "main()" -q"
[2025-08-21 14:47:11][356835250921979][2490 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2ODM1MjUwOTIxOTc5IiwibW9kZWwiOiJTTS1BMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFIzMERTTkdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRlIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzcyOCJ9"\r\n
[2025-08-21 14:47:13][356835250921979][4536 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b67b8ce-6e3f-4452-bb84-9154a79270a4","id":"QR_6b67b8ce-6e3f-4452-bb84-9154a79270a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:47:13][356835250921979][4537 ms][DEBUG] proc_open done in 3983 ms; code=0; res.len=3152
[2025-08-21 14:47:13][356835250921979][4537 ms][DEBUG] END   runCmdUntilRes#1 in 3983 ms
[2025-08-21 14:47:13][356835250921979][4537 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:48:04][357435843795078][0 ms][INFO] === Request start ===
[2025-08-21 14:48:04][357435843795078][1 ms][DEBUG] START check_frida
[2025-08-21 14:48:04][357435843795078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:48:04][357435843795078][312 ms][DEBUG] SU: done in 311 ms; outroot          4632     1 2332716   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:48:04][357435843795078][313 ms][DEBUG] check_frida: running
[2025-08-21 14:48:04][357435843795078][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 14:48:04][357435843795078][313 ms][DEBUG] START check_internet
[2025-08-21 14:48:04][357435843795078][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:48:05][357435843795078][906 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.008/202.008/202.008/0.000 ms\n
[2025-08-21 14:48:05][357435843795078][906 ms][DEBUG] check_internet: online
[2025-08-21 14:48:05][357435843795078][906 ms][DEBUG] END   check_internet in 594 ms
[2025-08-21 14:48:05][357435843795078][906 ms][DEBUG] START check_scloud
[2025-08-21 14:48:05][357435843795078][906 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:48:05][357435843795078][1187 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23985672 104204 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:48:05][357435843795078][1187 ms][DEBUG] targetPkg: running
[2025-08-21 14:48:05][357435843795078][1187 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 14:48:05][357435843795078][1187 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:48:05][357435843795078][1187 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQzNzk1MDc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MTFFNkpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEyNSJ9'" -e "main()" -q"
[2025-08-21 14:48:05][357435843795078][1187 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:48:05][357435843795078][1187 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQzNzk1MDc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MTFFNkpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEyNSJ9'" -e "main()" -q"
[2025-08-21 14:48:07][357435843795078][3124 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDM1ODQzNzk1MDc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MTFFNkpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEyNSJ9"\r\n
[2025-08-21 14:48:09][357435843795078][5092 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f16c8ee-d95b-4633-aac0-f556fb5fc559","id":"QR_8f16c8ee-d95b-4633-aac0-f556fb5fc559","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:48:09][357435843795078][5092 ms][DEBUG] proc_open done in 3905 ms; code=0; res.len=3152
[2025-08-21 14:48:09][357435843795078][5092 ms][DEBUG] END   runCmdUntilRes#1 in 3905 ms
[2025-08-21 14:48:09][357435843795078][5092 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:49:08][350341125045066][1 ms][INFO] === Request start ===
[2025-08-21 14:49:08][350341125045066][1 ms][DEBUG] START check_frida
[2025-08-21 14:49:08][350341125045066][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:49:08][350341125045066][247 ms][DEBUG] SU: done in 245 ms; outroot          4632     1 2332716   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:49:08][350341125045066][247 ms][DEBUG] check_frida: running
[2025-08-21 14:49:08][350341125045066][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 14:49:08][350341125045066][247 ms][DEBUG] START check_scloud
[2025-08-21 14:49:08][350341125045066][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:49:08][350341125045066][544 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23985416 104800 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:49:08][350341125045066][544 ms][DEBUG] targetPkg: running
[2025-08-21 14:49:08][350341125045066][544 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 14:49:08][350341125045066][544 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:49:08][350341125045066][544 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzQxMTI1MDQ1MDY2IiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFcxMDBSVE5IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Njk3In0='" -e "main()" -q"
[2025-08-21 14:49:08][350341125045066][544 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:49:08][350341125045066][544 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzQxMTI1MDQ1MDY2IiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFcxMDBSVE5IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Njk3In0='" -e "main()" -q"
[2025-08-21 14:49:10][350341125045066][2481 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzQxMTI1MDQ1MDY2IiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFcxMDBSVE5IIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Njk3In0="\r\n
[2025-08-21 14:49:14][350341125045066][6105 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4aa38b67-7cc5-49c5-b7aa-bfe1ae56ec5a","id":"QR_4aa38b67-7cc5-49c5-b7aa-bfe1ae56ec5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:49:14][350341125045066][6105 ms][DEBUG] proc_open done in 5560 ms; code=0; res.len=3152
[2025-08-21 14:49:14][350341125045066][6105 ms][DEBUG] END   runCmdUntilRes#1 in 5561 ms
[2025-08-21 14:49:14][350341125045066][6105 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:51:06][351864717342269][1 ms][INFO] === Request start ===
[2025-08-21 14:51:06][351864717342269][2 ms][DEBUG] START check_frida
[2025-08-21 14:51:06][351864717342269][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:51:07][351864717342269][298 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:51:07][351864717342269][298 ms][DEBUG] check_frida: running
[2025-08-21 14:51:07][351864717342269][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 14:51:07][351864717342269][298 ms][DEBUG] START check_scloud
[2025-08-21 14:51:07][351864717342269][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:51:07][351864717342269][533 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23985416 102624 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:51:07][351864717342269][533 ms][DEBUG] targetPkg: running
[2025-08-21 14:51:07][351864717342269][533 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 14:51:07][351864717342269][533 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:51:07][351864717342269][533 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODY0NzE3MzQyMjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDZMVjNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDgxIn0='" -e "main()" -q"
[2025-08-21 14:51:07][351864717342269][533 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:51:07][351864717342269][533 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODY0NzE3MzQyMjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDZMVjNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDgxIn0='" -e "main()" -q"
[2025-08-21 14:51:09][351864717342269][2501 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODY0NzE3MzQyMjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDZMVjNNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDgxIn0="\r\n
[2025-08-21 14:51:14][351864717342269][8077 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c982ab56-c157-4446-80ad-72874b1ecacf","id":"QR_c982ab56-c157-4446-80ad-72874b1ecacf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:51:14][351864717342269][8078 ms][DEBUG] proc_open done in 7545 ms; code=0; res.len=3152
[2025-08-21 14:51:14][351864717342269][8078 ms][DEBUG] END   runCmdUntilRes#1 in 7545 ms
[2025-08-21 14:51:14][351864717342269][8078 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:52:21][351559421085200][0 ms][INFO] === Request start ===
[2025-08-21 14:52:21][351559421085200][0 ms][DEBUG] START check_frida
[2025-08-21 14:52:21][351559421085200][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:52:21][351559421085200][309 ms][DEBUG] SU: done in 309 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:52:21][351559421085200][309 ms][DEBUG] check_frida: running
[2025-08-21 14:52:21][351559421085200][309 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 14:52:21][351559421085200][309 ms][DEBUG] START check_internet
[2025-08-21 14:52:21][351559421085200][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:52:22][351559421085200][762 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.882/202.882/202.882/0.000 ms\n
[2025-08-21 14:52:22][351559421085200][762 ms][DEBUG] check_internet: online
[2025-08-21 14:52:22][351559421085200][762 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 14:52:22][351559421085200][762 ms][DEBUG] START check_scloud
[2025-08-21 14:52:22][351559421085200][762 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:52:22][351559421085200][996 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23985544 103296 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:52:22][351559421085200][996 ms][DEBUG] targetPkg: running
[2025-08-21 14:52:22][351559421085200][996 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 14:52:22][351559421085200][996 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:52:22][351559421085200][996 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTU5NDIxMDg1MjAwIiwibW9kZWwiOiJTTS1TOTE4RCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dCMkoyUExCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJEQ00iLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc1NCJ9'" -e "main()" -q"
[2025-08-21 14:52:22][351559421085200][996 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:52:22][351559421085200][996 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTU5NDIxMDg1MjAwIiwibW9kZWwiOiJTTS1TOTE4RCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dCMkoyUExCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJEQ00iLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc1NCJ9'" -e "main()" -q"
[2025-08-21 14:52:24][351559421085200][2933 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTU5NDIxMDg1MjAwIiwibW9kZWwiOiJTTS1TOTE4RCIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dCMkoyUExCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJEQ00iLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc1NCJ9"\r\n
[2025-08-21 14:52:26][351559421085200][5152 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8e035a6-5c66-4dd4-bc92-919c0ae4e5ae","id":"QR_f8e035a6-5c66-4dd4-bc92-919c0ae4e5ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:52:26][351559421085200][5152 ms][DEBUG] proc_open done in 4155 ms; code=0; res.len=3152
[2025-08-21 14:52:26][351559421085200][5152 ms][DEBUG] END   runCmdUntilRes#1 in 4155 ms
[2025-08-21 14:52:26][351559421085200][5152 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:52:55][351263051490653][0 ms][INFO] === Request start ===
[2025-08-21 14:52:55][351263051490653][1 ms][DEBUG] START check_frida
[2025-08-21 14:52:55][351263051490653][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:52:55][351263051490653][250 ms][DEBUG] SU: done in 248 ms; outroot          4632     1 2332716   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:52:55][351263051490653][250 ms][DEBUG] check_frida: running
[2025-08-21 14:52:55][351263051490653][250 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 14:52:55][351263051490653][250 ms][DEBUG] START check_internet
[2025-08-21 14:52:55][351263051490653][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:52:55][351263051490653][515 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.640/179.640/179.640/0.000 ms\n
[2025-08-21 14:52:55][351263051490653][515 ms][DEBUG] check_internet: online
[2025-08-21 14:52:55][351263051490653][515 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 14:52:55][351263051490653][515 ms][DEBUG] START check_scloud
[2025-08-21 14:52:55][351263051490653][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:52:56][351263051490653][796 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23985544 103832 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:52:56][351263051490653][796 ms][DEBUG] targetPkg: running
[2025-08-21 14:52:56][351263051490653][796 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 14:52:56][351263051490653][796 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:52:56][351263051490653][796 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjYzMDUxNDkwNjUzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFgyMDEwUjJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQzNSJ9'" -e "main()" -q"
[2025-08-21 14:52:56][351263051490653][796 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:52:56][351263051490653][796 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjYzMDUxNDkwNjUzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFgyMDEwUjJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQzNSJ9'" -e "main()" -q"
[2025-08-21 14:52:58][351263051490653][2733 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjYzMDUxNDkwNjUzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFgyMDEwUjJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQzNSJ9"\r\n
[2025-08-21 14:53:00][351263051490653][4842 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c51aad5-fb3e-49fc-ace3-9f95b4665091","id":"QR_6c51aad5-fb3e-49fc-ace3-9f95b4665091","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:53:00][351263051490653][4842 ms][DEBUG] proc_open done in 4046 ms; code=0; res.len=3152
[2025-08-21 14:53:00][351263051490653][4842 ms][DEBUG] END   runCmdUntilRes#1 in 4046 ms
[2025-08-21 14:53:00][351263051490653][4842 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:53:07][352885872930233][0 ms][INFO] === Request start ===
[2025-08-21 14:53:07][352885872930233][1 ms][DEBUG] START check_frida
[2025-08-21 14:53:07][352885872930233][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:53:07][352885872930233][246 ms][DEBUG] SU: done in 245 ms; outroot          4632     1 2349136   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:53:07][352885872930233][246 ms][DEBUG] check_frida: running
[2025-08-21 14:53:07][352885872930233][246 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 14:53:07][352885872930233][246 ms][DEBUG] START check_scloud
[2025-08-21 14:53:07][352885872930233][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:53:08][352885872930233][528 ms][DEBUG] SU: done in 282 ms; outu0_a118       7086 20714 24001836 104292 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:53:08][352885872930233][528 ms][DEBUG] targetPkg: running
[2025-08-21 14:53:08][352885872930233][528 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 14:53:08][352885872930233][528 ms][DEBUG] rawBody.length=1160
[2025-08-21 14:53:08][352885872930233][528 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODg1ODcyOTMwMjMzIiwibW9kZWwiOiJTTS1BNTE1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5CNEFDR1haIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjk1In0='" -e "main()" -q"
[2025-08-21 14:53:08][352885872930233][528 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:53:08][352885872930233][529 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODg1ODcyOTMwMjMzIiwibW9kZWwiOiJTTS1BNTE1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5CNEFDR1haIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjk1In0='" -e "main()" -q"
[2025-08-21 14:53:10][352885872930233][2480 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyODg1ODcyOTMwMjMzIiwibW9kZWwiOiJTTS1BNTE1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5CNEFDR1haIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjk1In0="\r\n
[2025-08-21 14:53:13][352885872930233][5682 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33a0e7da-4279-48ea-bad2-c222d95b4dfa","id":"QR_33a0e7da-4279-48ea-bad2-c222d95b4dfa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:53:13][352885872930233][5683 ms][DEBUG] proc_open done in 5154 ms; code=0; res.len=3152
[2025-08-21 14:53:13][352885872930233][5683 ms][DEBUG] END   runCmdUntilRes#1 in 5155 ms
[2025-08-21 14:53:13][352885872930233][5683 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:57:14][351786693048661][1 ms][INFO] === Request start ===
[2025-08-21 14:57:14][351786693048661][2 ms][DEBUG] START check_frida
[2025-08-21 14:57:14][351786693048661][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:57:15][351786693048661][307 ms][DEBUG] SU: done in 305 ms; outroot          4632     1 2332716   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:57:15][351786693048661][307 ms][DEBUG] check_frida: running
[2025-08-21 14:57:15][351786693048661][307 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 14:57:15][351786693048661][307 ms][DEBUG] START check_scloud
[2025-08-21 14:57:15][351786693048661][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:57:15][351786693048661][611 ms][DEBUG] SU: done in 304 ms; outu0_a118       7086 20714 23958380 75740 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:57:15][351786693048661][611 ms][DEBUG] targetPkg: running
[2025-08-21 14:57:15][351786693048661][611 ms][DEBUG] END   check_scloud in 304 ms
[2025-08-21 14:57:15][351786693048661][611 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:57:15][351786693048661][611 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzg2NjkzMDQ4NjYxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMDI2WjBEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg5OCJ9'" -e "main()" -q"
[2025-08-21 14:57:15][351786693048661][611 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:57:15][351786693048661][611 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzg2NjkzMDQ4NjYxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMDI2WjBEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg5OCJ9'" -e "main()" -q"
[2025-08-21 14:57:17][351786693048661][2632 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzg2NjkzMDQ4NjYxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMDI2WjBEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg5OCJ9"\r\n
[2025-08-21 14:57:25][351786693048661][10315 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a8586c6-f0fb-4523-ac8e-748f3b6cc119","id":"QR_8a8586c6-f0fb-4523-ac8e-748f3b6cc119","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:57:25][351786693048661][10315 ms][DEBUG] proc_open done in 9703 ms; code=0; res.len=3152
[2025-08-21 14:57:25][351786693048661][10315 ms][DEBUG] END   runCmdUntilRes#1 in 9704 ms
[2025-08-21 14:57:25][351786693048661][10315 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:58:07][352009441440554][1 ms][INFO] === Request start ===
[2025-08-21 14:58:07][352009441440554][2 ms][DEBUG] START check_frida
[2025-08-21 14:58:07][352009441440554][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:58:07][352009441440554][256 ms][DEBUG] SU: done in 255 ms; outroot          4632     1 2332716   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:58:07][352009441440554][256 ms][DEBUG] check_frida: running
[2025-08-21 14:58:07][352009441440554][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 14:58:07][352009441440554][256 ms][DEBUG] START check_internet
[2025-08-21 14:58:07][352009441440554][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 14:58:08][352009441440554][743 ms][DEBUG] SU: done in 486 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.102/203.102/203.102/0.000 ms\n
[2025-08-21 14:58:08][352009441440554][743 ms][DEBUG] check_internet: online
[2025-08-21 14:58:08][352009441440554][743 ms][DEBUG] END   check_internet in 486 ms
[2025-08-21 14:58:08][352009441440554][743 ms][DEBUG] START check_scloud
[2025-08-21 14:58:08][352009441440554][743 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:58:08][352009441440554][1045 ms][DEBUG] SU: done in 303 ms; outu0_a118       7086 20714 23958316 88220 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:58:08][352009441440554][1046 ms][DEBUG] targetPkg: running
[2025-08-21 14:58:08][352009441440554][1046 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 14:58:08][352009441440554][1046 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:58:08][352009441440554][1046 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDA5NDQxNDQwNTU0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MlE3M1pKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc4NSJ9'" -e "main()" -q"
[2025-08-21 14:58:08][352009441440554][1046 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:58:08][352009441440554][1046 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDA5NDQxNDQwNTU0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MlE3M1pKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc4NSJ9'" -e "main()" -q"
[2025-08-21 14:58:10][352009441440554][2951 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDA5NDQxNDQwNTU0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MlE3M1pKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc4NSJ9"\r\n
[2025-08-21 14:58:12][352009441440554][5337 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fbd31fa-1861-435e-a98a-c60d208fb5a8","id":"QR_0fbd31fa-1861-435e-a98a-c60d208fb5a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:58:12][352009441440554][5338 ms][DEBUG] proc_open done in 4292 ms; code=0; res.len=3152
[2025-08-21 14:58:12][352009441440554][5338 ms][DEBUG] END   runCmdUntilRes#1 in 4292 ms
[2025-08-21 14:58:12][352009441440554][5338 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 14:59:06][354747958737668][0 ms][INFO] === Request start ===
[2025-08-21 14:59:06][354747958737668][1 ms][DEBUG] START check_frida
[2025-08-21 14:59:06][354747958737668][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 14:59:07][354747958737668][305 ms][DEBUG] SU: done in 304 ms; outroot          4632     1 2332716   4048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 14:59:07][354747958737668][305 ms][DEBUG] check_frida: running
[2025-08-21 14:59:07][354747958737668][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 14:59:07][354747958737668][305 ms][DEBUG] START check_scloud
[2025-08-21 14:59:07][354747958737668][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 14:59:07][354747958737668][622 ms][DEBUG] SU: done in 317 ms; outu0_a118       7086 20714 23958188 88972 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 14:59:07][354747958737668][622 ms][DEBUG] targetPkg: running
[2025-08-21 14:59:07][354747958737668][622 ms][DEBUG] END   check_scloud in 317 ms
[2025-08-21 14:59:07][354747958737668][622 ms][DEBUG] rawBody.length=1161
[2025-08-21 14:59:07][354747958737668][622 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTU4NzM3NjY4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MFlSUlFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEyMiJ9'" -e "main()" -q"
[2025-08-21 14:59:07][354747958737668][622 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 14:59:07][354747958737668][622 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTU4NzM3NjY4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MFlSUlFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEyMiJ9'" -e "main()" -q"
[2025-08-21 14:59:09][354747958737668][2511 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTU4NzM3NjY4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MFlSUlFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEyMiJ9"\r\n
[2025-08-21 14:59:12][354747958737668][5294 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae7d6c30-a947-4e27-b102-259a85c7e29f","id":"QR_ae7d6c30-a947-4e27-b102-259a85c7e29f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 14:59:12][354747958737668][5294 ms][DEBUG] proc_open done in 4672 ms; code=0; res.len=3152
[2025-08-21 14:59:12][354747958737668][5294 ms][DEBUG] END   runCmdUntilRes#1 in 4672 ms
[2025-08-21 14:59:12][354747958737668][5294 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:02:06][356414813404194][1 ms][INFO] === Request start ===
[2025-08-21 15:02:06][356414813404194][2 ms][DEBUG] START check_frida
[2025-08-21 15:02:06][356414813404194][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:02:07][356414813404194][260 ms][DEBUG] SU: done in 258 ms; outroot          4632     1 2332716   4048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:02:07][356414813404194][260 ms][DEBUG] check_frida: running
[2025-08-21 15:02:07][356414813404194][260 ms][DEBUG] END   check_frida in 259 ms
[2025-08-21 15:02:07][356414813404194][260 ms][DEBUG] START check_internet
[2025-08-21 15:02:07][356414813404194][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:02:07][356414813404194][745 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.340/203.340/203.340/0.000 ms\n
[2025-08-21 15:02:07][356414813404194][745 ms][DEBUG] check_internet: online
[2025-08-21 15:02:07][356414813404194][745 ms][DEBUG] END   check_internet in 485 ms
[2025-08-21 15:02:07][356414813404194][745 ms][DEBUG] START check_scloud
[2025-08-21 15:02:07][356414813404194][745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:02:07][356414813404194][1046 ms][DEBUG] SU: done in 301 ms; outu0_a118       7086 20714 23958060 89728 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:02:07][356414813404194][1046 ms][DEBUG] targetPkg: running
[2025-08-21 15:02:07][356414813404194][1046 ms][DEBUG] END   check_scloud in 301 ms
[2025-08-21 15:02:07][356414813404194][1046 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:02:07][356414813404194][1046 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODEzNDA0MTk0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRBMEczUUpXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQyMyJ9'" -e "main()" -q"
[2025-08-21 15:02:07][356414813404194][1046 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:02:07][356414813404194][1046 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE0ODEzNDA0MTk0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRBMEczUUpXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQyMyJ9'" -e "main()" -q"
[2025-08-21 15:02:09][356414813404194][2976 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE0ODEzNDA0MTk0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFRBMEczUUpXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQyMyJ9"\r\n
[2025-08-21 15:02:12][356414813404194][5228 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ab4bd63-9611-4c84-9a91-1321837c3b9b","id":"QR_1ab4bd63-9611-4c84-9a91-1321837c3b9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:02:12][356414813404194][5228 ms][DEBUG] proc_open done in 4182 ms; code=0; res.len=3152
[2025-08-21 15:02:12][356414813404194][5228 ms][DEBUG] END   runCmdUntilRes#1 in 4182 ms
[2025-08-21 15:02:12][356414813404194][5228 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:02:34][350962635008094][1 ms][INFO] === Request start ===
[2025-08-21 15:02:34][350962635008094][2 ms][DEBUG] START check_frida
[2025-08-21 15:02:34][350962635008094][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:02:35][350962635008094][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2332716   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:02:35][350962635008094][292 ms][DEBUG] check_frida: running
[2025-08-21 15:02:35][350962635008094][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 15:02:35][350962635008094][292 ms][DEBUG] START check_internet
[2025-08-21 15:02:35][350962635008094][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:02:35][350962635008094][535 ms][DEBUG] SU: done in 242 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.904/141.904/141.904/0.000 ms\n
[2025-08-21 15:02:35][350962635008094][535 ms][DEBUG] check_internet: online
[2025-08-21 15:02:35][350962635008094][535 ms][DEBUG] END   check_internet in 242 ms
[2025-08-21 15:02:35][350962635008094][535 ms][DEBUG] START check_scloud
[2025-08-21 15:02:35][350962635008094][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:02:35][350962635008094][837 ms][DEBUG] SU: done in 302 ms; outu0_a118       7086 20714 23958060 94144 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:02:35][350962635008094][837 ms][DEBUG] targetPkg: running
[2025-08-21 15:02:35][350962635008094][837 ms][DEBUG] END   check_scloud in 302 ms
[2025-08-21 15:02:35][350962635008094][837 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:02:35][350962635008094][837 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTYyNjM1MDA4MDk0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c5MVhYODFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDQ5In0='" -e "main()" -q"
[2025-08-21 15:02:35][350962635008094][837 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:02:35][350962635008094][837 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTYyNjM1MDA4MDk0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c5MVhYODFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDQ5In0='" -e "main()" -q"
[2025-08-21 15:02:37][350962635008094][2736 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTYyNjM1MDA4MDk0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c5MVhYODFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDQ5In0="\r\n
[2025-08-21 15:02:41][350962635008094][6571 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3e9546b-ff6f-446b-8d55-c2fc09a566e8","id":"QR_a3e9546b-ff6f-446b-8d55-c2fc09a566e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:02:41][350962635008094][6571 ms][DEBUG] proc_open done in 5734 ms; code=0; res.len=3152
[2025-08-21 15:02:41][350962635008094][6571 ms][DEBUG] END   runCmdUntilRes#1 in 5735 ms
[2025-08-21 15:02:41][350962635008094][6571 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:03:05][352631114680479][0 ms][INFO] === Request start ===
[2025-08-21 15:03:05][352631114680479][1 ms][DEBUG] START check_frida
[2025-08-21 15:03:05][352631114680479][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:03:06][352631114680479][264 ms][DEBUG] SU: done in 263 ms; outroot          4632     1 2332716   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:03:06][352631114680479][264 ms][DEBUG] check_frida: running
[2025-08-21 15:03:06][352631114680479][264 ms][DEBUG] END   check_frida in 263 ms
[2025-08-21 15:03:06][352631114680479][264 ms][DEBUG] START check_scloud
[2025-08-21 15:03:06][352631114680479][264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:03:06][352631114680479][567 ms][DEBUG] SU: done in 303 ms; outu0_a118       7086 20714 23958220 94908 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:03:06][352631114680479][567 ms][DEBUG] targetPkg: running
[2025-08-21 15:03:06][352631114680479][567 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:03:06][352631114680479][567 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:03:06][352631114680479][567 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjMxMTE0NjgwNDc5IiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE4zMVBNNkJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNSUQiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ0NCJ9'" -e "main()" -q"
[2025-08-21 15:03:06][352631114680479][567 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:03:06][352631114680479][567 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjMxMTE0NjgwNDc5IiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE4zMVBNNkJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNSUQiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ0NCJ9'" -e "main()" -q"
[2025-08-21 15:03:08][352631114680479][2482 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjMxMTE0NjgwNDc5IiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE4zMVBNNkJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNSUQiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ0NCJ9"\r\n
[2025-08-21 15:03:10][352631114680479][4344 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52c86b19-d8e3-44cc-a42d-79c3fb6813d7","id":"QR_52c86b19-d8e3-44cc-a42d-79c3fb6813d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:03:10][352631114680479][4344 ms][DEBUG] proc_open done in 3777 ms; code=0; res.len=3152
[2025-08-21 15:03:10][352631114680479][4344 ms][DEBUG] END   runCmdUntilRes#1 in 3777 ms
[2025-08-21 15:03:10][352631114680479][4344 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:05:07][352257980187595][1 ms][INFO] === Request start ===
[2025-08-21 15:05:07][352257980187595][2 ms][DEBUG] START check_frida
[2025-08-21 15:05:07][352257980187595][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:05:08][352257980187595][299 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:05:08][352257980187595][299 ms][DEBUG] check_frida: running
[2025-08-21 15:05:08][352257980187595][299 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 15:05:08][352257980187595][299 ms][DEBUG] START check_scloud
[2025-08-21 15:05:08][352257980187595][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:05:08][352257980187595][599 ms][DEBUG] SU: done in 300 ms; outu0_a118       7086 20714 23958348 95632 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:05:08][352257980187595][599 ms][DEBUG] targetPkg: running
[2025-08-21 15:05:08][352257980187595][599 ms][DEBUG] END   check_scloud in 300 ms
[2025-08-21 15:05:08][352257980187595][599 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:05:08][352257980187595][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEzOCJ9'" -e "main()" -q"
[2025-08-21 15:05:08][352257980187595][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:05:08][352257980187595][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEzOCJ9'" -e "main()" -q"
[2025-08-21 15:05:10][352257980187595][2501 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEzOCJ9"\r\n
[2025-08-21 15:05:12][352257980187595][4401 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 15:05:12][352257980187595][4401 ms][DEBUG] proc_open done in 3802 ms; code=0; res.len=93
[2025-08-21 15:05:12][352257980187595][4401 ms][DEBUG] END   runCmdUntilRes#1 in 3802 ms
[2025-08-21 15:05:12][352257980187595][4401 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 15:05:12][][0 ms][INFO] === Request start ===
[2025-08-21 15:05:12][][1 ms][DEBUG] START check_frida
[2025-08-21 15:05:12][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:05:13][][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2349136   4060 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:05:13][][293 ms][DEBUG] check_frida: running
[2025-08-21 15:05:13][][293 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 15:05:13][][293 ms][DEBUG] START check_scloud
[2025-08-21 15:05:13][][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:05:13][][580 ms][DEBUG] SU: done in 287 ms; outu0_a118       7086 20714 23974640 94164 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:05:13][][580 ms][DEBUG] targetPkg: running
[2025-08-21 15:05:13][][580 ms][DEBUG] END   check_scloud in 287 ms
[2025-08-21 15:05:13][][580 ms][DEBUG] rawBody.length=1131
[2025-08-21 15:05:13][][580 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg4NiJ9'" -e "main()" -q"
[2025-08-21 15:05:13][][580 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:05:13][][580 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg4NiJ9'" -e "main()" -q"
[2025-08-21 15:05:15][][2543 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg4NiJ9"\r\n
[2025-08-21 15:05:16][][4006 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:05:16][][4006 ms][DEBUG] proc_open done in 3426 ms; code=0; res.len=107
[2025-08-21 15:05:16][][4006 ms][DEBUG] END   runCmdUntilRes#1 in 3426 ms
[2025-08-21 15:05:16][][4006 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:05:17][][0 ms][INFO] === Request start ===
[2025-08-21 15:05:17][][1 ms][DEBUG] START check_frida
[2025-08-21 15:05:17][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:05:17][][311 ms][DEBUG] SU: done in 310 ms; outroot          4632     1 2349136   4048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:05:17][][311 ms][DEBUG] check_frida: running
[2025-08-21 15:05:17][][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 15:05:17][][311 ms][DEBUG] START check_scloud
[2025-08-21 15:05:17][][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:05:17][][554 ms][DEBUG] SU: done in 243 ms; outu0_a118       7086 20714 23974768 94704 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:05:17][][554 ms][DEBUG] targetPkg: running
[2025-08-21 15:05:17][][554 ms][DEBUG] END   check_scloud in 243 ms
[2025-08-21 15:05:17][][554 ms][DEBUG] rawBody.length=1131
[2025-08-21 15:05:17][][554 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDE5MiJ9'" -e "main()" -q"
[2025-08-21 15:05:17][][554 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:05:17][][554 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDE5MiJ9'" -e "main()" -q"
[2025-08-21 15:05:19][][2456 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDE5MiJ9"\r\n
[2025-08-21 15:05:21][][4148 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:05:21][][4148 ms][DEBUG] proc_open done in 3594 ms; code=0; res.len=107
[2025-08-21 15:05:21][][4148 ms][DEBUG] END   runCmdUntilRes#1 in 3594 ms
[2025-08-21 15:05:21][][4148 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:05:23][352257980187595][0 ms][INFO] === Request start ===
[2025-08-21 15:05:23][352257980187595][1 ms][DEBUG] START check_frida
[2025-08-21 15:05:23][352257980187595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:05:23][352257980187595][260 ms][DEBUG] SU: done in 259 ms; outroot          4632     1 2349136   4060 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:05:23][352257980187595][260 ms][DEBUG] check_frida: running
[2025-08-21 15:05:23][352257980187595][260 ms][DEBUG] END   check_frida in 259 ms
[2025-08-21 15:05:23][352257980187595][260 ms][DEBUG] START check_scloud
[2025-08-21 15:05:23][352257980187595][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:05:24][352257980187595][563 ms][DEBUG] SU: done in 303 ms; outu0_a118       7086 20714 23974640 94292 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:05:24][352257980187595][563 ms][DEBUG] targetPkg: running
[2025-08-21 15:05:24][352257980187595][563 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:05:24][352257980187595][563 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:05:24][352257980187595][563 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTU2In0='" -e "main()" -q"
[2025-08-21 15:05:24][352257980187595][563 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:05:24][352257980187595][563 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTU2In0='" -e "main()" -q"
[2025-08-21 15:05:26][352257980187595][2490 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTU2In0="\r\n
[2025-08-21 15:05:29][352257980187595][6053 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e52547f-089b-4f1d-89e8-46cd4845b8fc","id":"QR_8e52547f-089b-4f1d-89e8-46cd4845b8fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:05:29][352257980187595][6053 ms][DEBUG] proc_open done in 5490 ms; code=0; res.len=3152
[2025-08-21 15:05:29][352257980187595][6053 ms][DEBUG] END   runCmdUntilRes#1 in 5490 ms
[2025-08-21 15:05:29][352257980187595][6053 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:08:07][359021828727183][1 ms][INFO] === Request start ===
[2025-08-21 15:08:07][359021828727183][2 ms][DEBUG] START check_frida
[2025-08-21 15:08:07][359021828727183][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:08:07][359021828727183][303 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2332716   4064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:08:07][359021828727183][303 ms][DEBUG] check_frida: running
[2025-08-21 15:08:07][359021828727183][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 15:08:07][359021828727183][304 ms][DEBUG] START check_internet
[2025-08-21 15:08:07][359021828727183][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:08:08][359021828727183][742 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.409/201.409/201.409/0.000 ms\n
[2025-08-21 15:08:08][359021828727183][742 ms][DEBUG] check_internet: online
[2025-08-21 15:08:08][359021828727183][742 ms][DEBUG] END   check_internet in 438 ms
[2025-08-21 15:08:08][359021828727183][742 ms][DEBUG] START check_scloud
[2025-08-21 15:08:08][359021828727183][742 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:08:08][359021828727183][1015 ms][DEBUG] SU: done in 274 ms; outu0_a118       7086 20714 23958348 95200 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:08:08][359021828727183][1016 ms][DEBUG] targetPkg: running
[2025-08-21 15:08:08][359021828727183][1016 ms][DEBUG] END   check_scloud in 274 ms
[2025-08-21 15:08:08][359021828727183][1016 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:08:08][359021828727183][1016 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MDIxODI4NzI3MTgzIiwibW9kZWwiOiJTTS1BNzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI3MDFUS0FCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY1NiJ9'" -e "main()" -q"
[2025-08-21 15:08:08][359021828727183][1016 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:08:08][359021828727183][1016 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MDIxODI4NzI3MTgzIiwibW9kZWwiOiJTTS1BNzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI3MDFUS0FCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY1NiJ9'" -e "main()" -q"
[2025-08-21 15:08:10][359021828727183][2901 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MDIxODI4NzI3MTgzIiwibW9kZWwiOiJTTS1BNzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI3MDFUS0FCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY1NiJ9"\r\n
[2025-08-21 15:08:13][359021828727183][5722 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f9fca25-ee71-4ee2-a6d5-cca608579475","id":"QR_9f9fca25-ee71-4ee2-a6d5-cca608579475","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:08:13][359021828727183][5722 ms][DEBUG] proc_open done in 4707 ms; code=0; res.len=3152
[2025-08-21 15:08:13][359021828727183][5723 ms][DEBUG] END   runCmdUntilRes#1 in 4707 ms
[2025-08-21 15:08:13][359021828727183][5723 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:10:10][350013880306419][1 ms][INFO] === Request start ===
[2025-08-21 15:10:10][350013880306419][2 ms][DEBUG] START check_frida
[2025-08-21 15:10:10][350013880306419][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:10:11][350013880306419][267 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2332716   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:10:11][350013880306419][267 ms][DEBUG] check_frida: running
[2025-08-21 15:10:11][350013880306419][267 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 15:10:11][350013880306419][267 ms][DEBUG] START check_internet
[2025-08-21 15:10:11][350013880306419][267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:10:11][350013880306419][659 ms][DEBUG] SU: done in 392 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.824/292.824/292.824/0.000 ms\n
[2025-08-21 15:10:11][350013880306419][659 ms][DEBUG] check_internet: online
[2025-08-21 15:10:11][350013880306419][659 ms][DEBUG] END   check_internet in 392 ms
[2025-08-21 15:10:11][350013880306419][659 ms][DEBUG] START check_scloud
[2025-08-21 15:10:11][350013880306419][659 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:10:11][350013880306419][932 ms][DEBUG] SU: done in 273 ms; outu0_a118       7086 20714 23958348 94860 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:10:11][350013880306419][932 ms][DEBUG] targetPkg: running
[2025-08-21 15:10:11][350013880306419][932 ms][DEBUG] END   check_scloud in 273 ms
[2025-08-21 15:10:11][350013880306419][932 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:10:11][350013880306419][932 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgwMzA2NDE5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MDlEQjBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI4NSJ9'" -e "main()" -q"
[2025-08-21 15:10:11][350013880306419][932 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:10:11][350013880306419][932 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgwMzA2NDE5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MDlEQjBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI4NSJ9'" -e "main()" -q"
[2025-08-21 15:10:13][350013880306419][2851 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODgwMzA2NDE5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MDlEQjBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI4NSJ9"\r\n
[2025-08-21 15:10:15][350013880306419][5112 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ba3eebc-fbbc-418d-a059-ebfb747830f2","id":"QR_6ba3eebc-fbbc-418d-a059-ebfb747830f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:10:15][350013880306419][5113 ms][DEBUG] proc_open done in 4181 ms; code=0; res.len=3152
[2025-08-21 15:10:15][350013880306419][5113 ms][DEBUG] END   runCmdUntilRes#1 in 4181 ms
[2025-08-21 15:10:15][350013880306419][5113 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:11:09][357334341663484][1 ms][INFO] === Request start ===
[2025-08-21 15:11:09][357334341663484][2 ms][DEBUG] START check_frida
[2025-08-21 15:11:09][357334341663484][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:11:10][357334341663484][292 ms][DEBUG] SU: done in 290 ms; outroot          4632     1 2332716   4060 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:11:10][357334341663484][292 ms][DEBUG] check_frida: running
[2025-08-21 15:11:10][357334341663484][292 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 15:11:10][357334341663484][292 ms][DEBUG] START check_scloud
[2025-08-21 15:11:10][357334341663484][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:11:10][357334341663484][594 ms][DEBUG] SU: done in 302 ms; outu0_a118       7086 20714 23958476 95536 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:11:10][357334341663484][594 ms][DEBUG] targetPkg: running
[2025-08-21 15:11:10][357334341663484][594 ms][DEBUG] END   check_scloud in 302 ms
[2025-08-21 15:11:10][357334341663484][594 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:11:10][357334341663484][594 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzM0MzQxNjYzNDg0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MlI3MjFXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA0OCJ9'" -e "main()" -q"
[2025-08-21 15:11:10][357334341663484][594 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:11:10][357334341663484][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzM0MzQxNjYzNDg0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MlI3MjFXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA0OCJ9'" -e "main()" -q"
[2025-08-21 15:11:12][357334341663484][2542 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MzM0MzQxNjYzNDg0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MlI3MjFXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA0OCJ9"\r\n
[2025-08-21 15:11:14][357334341663484][4748 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_530d50d4-9f95-454c-a5e6-809334daf24b","id":"QR_530d50d4-9f95-454c-a5e6-809334daf24b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:11:14][357334341663484][4749 ms][DEBUG] proc_open done in 4154 ms; code=0; res.len=3152
[2025-08-21 15:11:14][357334341663484][4749 ms][DEBUG] END   runCmdUntilRes#1 in 4154 ms
[2025-08-21 15:11:14][357334341663484][4749 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:11:26][357651712731834][1 ms][INFO] === Request start ===
[2025-08-21 15:11:26][357651712731834][2 ms][DEBUG] START check_frida
[2025-08-21 15:11:26][357651712731834][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:11:26][357651712731834][258 ms][DEBUG] SU: done in 257 ms; outroot          4632     1 2349136   4056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:11:26][357651712731834][258 ms][DEBUG] check_frida: running
[2025-08-21 15:11:26][357651712731834][259 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 15:11:26][357651712731834][259 ms][DEBUG] START check_scloud
[2025-08-21 15:11:26][357651712731834][259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:11:26][357651712731834][545 ms][DEBUG] SU: done in 287 ms; outu0_a118       7086 20714 23974640 94624 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:11:26][357651712731834][545 ms][DEBUG] targetPkg: running
[2025-08-21 15:11:26][357651712731834][546 ms][DEBUG] END   check_scloud in 287 ms
[2025-08-21 15:11:26][357651712731834][546 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:11:26][357651712731834][546 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzEyNzMxODM0IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ2MDAxMVpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjkwIn0='" -e "main()" -q"
[2025-08-21 15:11:26][357651712731834][546 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:11:26][357651712731834][546 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzEyNzMxODM0IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ2MDAxMVpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjkwIn0='" -e "main()" -q"
[2025-08-21 15:11:28][357651712731834][2477 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzEyNzMxODM0IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ2MDAxMVpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjkwIn0="\r\n
[2025-08-21 15:11:31][357651712731834][5741 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d82d82e-decf-4e1a-be3c-41eaeba0de2f","id":"QR_5d82d82e-decf-4e1a-be3c-41eaeba0de2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:11:31][357651712731834][5741 ms][DEBUG] proc_open done in 5196 ms; code=0; res.len=3152
[2025-08-21 15:11:31][357651712731834][5741 ms][DEBUG] END   runCmdUntilRes#1 in 5196 ms
[2025-08-21 15:11:31][357651712731834][5741 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:13:27][352855860233544][1 ms][INFO] === Request start ===
[2025-08-21 15:13:27][352855860233544][2 ms][DEBUG] START check_frida
[2025-08-21 15:13:27][352855860233544][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:13:27][352855860233544][296 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2332716   4048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:13:27][352855860233544][296 ms][DEBUG] check_frida: running
[2025-08-21 15:13:27][352855860233544][296 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 15:13:27][352855860233544][296 ms][DEBUG] START check_scloud
[2025-08-21 15:13:27][352855860233544][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:13:28][352855860233544][598 ms][DEBUG] SU: done in 302 ms; outu0_a118       7086 20714 23958348 95320 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:13:28][352855860233544][598 ms][DEBUG] targetPkg: running
[2025-08-21 15:13:28][352855860233544][598 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:13:28][352855860233544][598 ms][DEBUG] rawBody.length=1159
[2025-08-21 15:13:28][352855860233544][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODU1ODYwMjMzNTQ0IiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyUjgwMkdTQkQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzE3OTUifQ=='" -e "main()" -q"
[2025-08-21 15:13:28][352855860233544][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:13:28][352855860233544][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODU1ODYwMjMzNTQ0IiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyUjgwMkdTQkQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzE3OTUifQ=='" -e "main()" -q"
[2025-08-21 15:13:30][352855860233544][2547 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyODU1ODYwMjMzNTQ0IiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyUjgwMkdTQkQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzE3OTUifQ=="\r\n
[2025-08-21 15:13:33][352855860233544][5352 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b295669-0577-429f-80d2-b14e219ff1e9","id":"QR_8b295669-0577-429f-80d2-b14e219ff1e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:13:33][352855860233544][5352 ms][DEBUG] proc_open done in 4754 ms; code=0; res.len=3152
[2025-08-21 15:13:33][352855860233544][5352 ms][DEBUG] END   runCmdUntilRes#1 in 4754 ms
[2025-08-21 15:13:33][352855860233544][5352 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:13:47][357799157584240][0 ms][INFO] === Request start ===
[2025-08-21 15:13:47][357799157584240][1 ms][DEBUG] START check_frida
[2025-08-21 15:13:47][357799157584240][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:13:48][357799157584240][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2332716   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:13:48][357799157584240][297 ms][DEBUG] check_frida: running
[2025-08-21 15:13:48][357799157584240][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 15:13:48][357799157584240][297 ms][DEBUG] START check_scloud
[2025-08-21 15:13:48][357799157584240][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:13:48][357799157584240][598 ms][DEBUG] SU: done in 301 ms; outu0_a118       7086 20714 23958476 94760 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:13:48][357799157584240][598 ms][DEBUG] targetPkg: running
[2025-08-21 15:13:48][357799157584240][598 ms][DEBUG] END   check_scloud in 301 ms
[2025-08-21 15:13:48][357799157584240][598 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:13:48][357799157584240][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzk5MTU3NTg0MjQwIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c1MDRSOTZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MjAwIn0='" -e "main()" -q"
[2025-08-21 15:13:48][357799157584240][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:13:48][357799157584240][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzk5MTU3NTg0MjQwIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c1MDRSOTZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MjAwIn0='" -e "main()" -q"
[2025-08-21 15:13:50][357799157584240][2553 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Nzk5MTU3NTg0MjQwIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c1MDRSOTZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MjAwIn0="\r\n
[2025-08-21 15:13:53][357799157584240][5739 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6a6ed20-621f-42e4-bea0-c6cfadf2c8ee","id":"QR_f6a6ed20-621f-42e4-bea0-c6cfadf2c8ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:13:53][357799157584240][5739 ms][DEBUG] proc_open done in 5140 ms; code=0; res.len=3152
[2025-08-21 15:13:53][357799157584240][5739 ms][DEBUG] END   runCmdUntilRes#1 in 5141 ms
[2025-08-21 15:13:53][357799157584240][5740 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:14:05][350250412598176][1 ms][INFO] === Request start ===
[2025-08-21 15:14:05][350250412598176][2 ms][DEBUG] START check_frida
[2025-08-21 15:14:05][350250412598176][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:14:05][350250412598176][275 ms][DEBUG] SU: done in 273 ms; outroot          4632     1 2349136   4072 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:14:05][350250412598176][275 ms][DEBUG] check_frida: running
[2025-08-21 15:14:05][350250412598176][275 ms][DEBUG] END   check_frida in 273 ms
[2025-08-21 15:14:05][350250412598176][275 ms][DEBUG] START check_internet
[2025-08-21 15:14:05][350250412598176][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:14:05][350250412598176][728 ms][DEBUG] SU: done in 454 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.239/202.239/202.239/0.000 ms\n
[2025-08-21 15:14:05][350250412598176][728 ms][DEBUG] check_internet: online
[2025-08-21 15:14:05][350250412598176][728 ms][DEBUG] END   check_internet in 454 ms
[2025-08-21 15:14:05][350250412598176][728 ms][DEBUG] START check_scloud
[2025-08-21 15:14:05][350250412598176][728 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:14:06][350250412598176][1030 ms][DEBUG] SU: done in 302 ms; outu0_a118       7086 20714 23958476 95344 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:14:06][350250412598176][1030 ms][DEBUG] targetPkg: running
[2025-08-21 15:14:06][350250412598176][1030 ms][DEBUG] END   check_scloud in 302 ms
[2025-08-21 15:14:06][350250412598176][1030 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:14:06][350250412598176][1030 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjUwNDEyNTk4MTc2IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MU5WOVlIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMyOCJ9'" -e "main()" -q"
[2025-08-21 15:14:06][350250412598176][1030 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:14:06][350250412598176][1030 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjUwNDEyNTk4MTc2IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MU5WOVlIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMyOCJ9'" -e "main()" -q"
[2025-08-21 15:14:08][350250412598176][2946 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjUwNDEyNTk4MTc2IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MU5WOVlIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMyOCJ9"\r\n
[2025-08-21 15:14:10][350250412598176][5426 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b04fec59-fe58-4b3e-947c-660f925c24b4","id":"QR_b04fec59-fe58-4b3e-947c-660f925c24b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:14:10][350250412598176][5426 ms][DEBUG] proc_open done in 4395 ms; code=0; res.len=3152
[2025-08-21 15:14:10][350250412598176][5426 ms][DEBUG] END   runCmdUntilRes#1 in 4395 ms
[2025-08-21 15:14:10][350250412598176][5426 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:15:06][350100283504151][0 ms][INFO] === Request start ===
[2025-08-21 15:15:06][350100283504151][1 ms][DEBUG] START check_frida
[2025-08-21 15:15:06][350100283504151][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:15:07][350100283504151][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:15:07][350100283504151][290 ms][DEBUG] check_frida: running
[2025-08-21 15:15:07][350100283504151][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 15:15:07][350100283504151][290 ms][DEBUG] START check_scloud
[2025-08-21 15:15:07][350100283504151][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:15:07][350100283504151][593 ms][DEBUG] SU: done in 303 ms; outu0_a118       7086 20714 23958220 97884 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:15:07][350100283504151][593 ms][DEBUG] targetPkg: running
[2025-08-21 15:15:07][350100283504151][593 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:15:07][350100283504151][593 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:15:07][350100283504151][593 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTAwMjgzNTA0MTUxIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hDMkI5Qk5OIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgwNyJ9'" -e "main()" -q"
[2025-08-21 15:15:07][350100283504151][593 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:15:07][350100283504151][593 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTAwMjgzNTA0MTUxIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hDMkI5Qk5OIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgwNyJ9'" -e "main()" -q"
[2025-08-21 15:15:09][350100283504151][2511 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTAwMjgzNTA0MTUxIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hDMkI5Qk5OIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgwNyJ9"\r\n
[2025-08-21 15:15:11][350100283504151][4956 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86509bd2-879f-40aa-9509-0e9e6dfb8bab","id":"QR_86509bd2-879f-40aa-9509-0e9e6dfb8bab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:15:11][350100283504151][4956 ms][DEBUG] proc_open done in 4363 ms; code=0; res.len=3152
[2025-08-21 15:15:11][350100283504151][4956 ms][DEBUG] END   runCmdUntilRes#1 in 4363 ms
[2025-08-21 15:15:11][350100283504151][4956 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:16:07][355857114097953][1 ms][INFO] === Request start ===
[2025-08-21 15:16:07][355857114097953][2 ms][DEBUG] START check_frida
[2025-08-21 15:16:07][355857114097953][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:16:07][355857114097953][247 ms][DEBUG] SU: done in 245 ms; outroot          4632     1 2332716   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:16:07][355857114097953][247 ms][DEBUG] check_frida: running
[2025-08-21 15:16:07][355857114097953][247 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 15:16:07][355857114097953][247 ms][DEBUG] START check_internet
[2025-08-21 15:16:07][355857114097953][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:16:08][355857114097953][699 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.629/201.629/201.629/0.000 ms\n
[2025-08-21 15:16:08][355857114097953][699 ms][DEBUG] check_internet: online
[2025-08-21 15:16:08][355857114097953][699 ms][DEBUG] END   check_internet in 452 ms
[2025-08-21 15:16:08][355857114097953][699 ms][DEBUG] START check_scloud
[2025-08-21 15:16:08][355857114097953][699 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:16:08][355857114097953][972 ms][DEBUG] SU: done in 272 ms; outu0_a118       7086 20714 23958476 98664 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:16:08][355857114097953][972 ms][DEBUG] targetPkg: running
[2025-08-21 15:16:08][355857114097953][972 ms][DEBUG] END   check_scloud in 272 ms
[2025-08-21 15:16:08][355857114097953][972 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:16:08][355857114097953][972 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU3MTE0MDk3OTUzIiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ044MFJYTjBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTA0OCJ9'" -e "main()" -q"
[2025-08-21 15:16:08][355857114097953][972 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:16:08][355857114097953][972 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODU3MTE0MDk3OTUzIiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ044MFJYTjBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTA0OCJ9'" -e "main()" -q"
[2025-08-21 15:16:10][355857114097953][2861 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODU3MTE0MDk3OTUzIiwibW9kZWwiOiJTTS1OOTg2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ044MFJYTjBZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTA0OCJ9"\r\n
[2025-08-21 15:16:12][355857114097953][5358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c98bbb45-5ec1-45da-9ff4-710fce1a6cef","id":"QR_c98bbb45-5ec1-45da-9ff4-710fce1a6cef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:16:12][355857114097953][5358 ms][DEBUG] proc_open done in 4386 ms; code=0; res.len=3152
[2025-08-21 15:16:12][355857114097953][5358 ms][DEBUG] END   runCmdUntilRes#1 in 4386 ms
[2025-08-21 15:16:12][355857114097953][5358 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:16:19][350987615751793][0 ms][INFO] === Request start ===
[2025-08-21 15:16:19][350987615751793][1 ms][DEBUG] START check_frida
[2025-08-21 15:16:19][350987615751793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:16:19][350987615751793][265 ms][DEBUG] SU: done in 264 ms; outroot          4632     1 2349136   4064 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:16:19][350987615751793][265 ms][DEBUG] check_frida: running
[2025-08-21 15:16:19][350987615751793][265 ms][DEBUG] END   check_frida in 264 ms
[2025-08-21 15:16:19][350987615751793][265 ms][DEBUG] START check_internet
[2025-08-21 15:16:19][350987615751793][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:16:19][350987615751793][628 ms][DEBUG] SU: done in 363 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.201/256.201/256.201/0.000 ms\n
[2025-08-21 15:16:19][350987615751793][628 ms][DEBUG] check_internet: online
[2025-08-21 15:16:19][350987615751793][628 ms][DEBUG] END   check_internet in 363 ms
[2025-08-21 15:16:19][350987615751793][628 ms][DEBUG] START check_scloud
[2025-08-21 15:16:19][350987615751793][628 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:16:20][350987615751793][931 ms][DEBUG] SU: done in 302 ms; outu0_a118       7086 20714 23974640 97640 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:16:20][350987615751793][931 ms][DEBUG] targetPkg: running
[2025-08-21 15:16:20][350987615751793][931 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:16:20][350987615751793][931 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:16:20][350987615751793][931 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjE1NzUxNzkzIiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MUVUSjVEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM2NiJ9'" -e "main()" -q"
[2025-08-21 15:16:20][350987615751793][931 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:16:20][350987615751793][931 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjE1NzUxNzkzIiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MUVUSjVEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM2NiJ9'" -e "main()" -q"
[2025-08-21 15:16:21][350987615751793][2859 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTg3NjE1NzUxNzkzIiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MUVUSjVEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM2NiJ9"\r\n
[2025-08-21 15:16:23][350987615751793][4791 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d3da881-c32c-45e6-9215-2fed8acac165","id":"QR_4d3da881-c32c-45e6-9215-2fed8acac165","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:16:23][350987615751793][4791 ms][DEBUG] proc_open done in 3860 ms; code=0; res.len=3152
[2025-08-21 15:16:23][350987615751793][4791 ms][DEBUG] END   runCmdUntilRes#1 in 3860 ms
[2025-08-21 15:16:23][350987615751793][4791 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:17:06][352590523819153][0 ms][INFO] === Request start ===
[2025-08-21 15:17:06][352590523819153][1 ms][DEBUG] START check_frida
[2025-08-21 15:17:06][352590523819153][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:17:07][352590523819153][295 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2332716   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:17:07][352590523819153][295 ms][DEBUG] check_frida: running
[2025-08-21 15:17:07][352590523819153][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 15:17:07][352590523819153][295 ms][DEBUG] START check_scloud
[2025-08-21 15:17:07][352590523819153][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:17:07][352590523819153][538 ms][DEBUG] SU: done in 243 ms; outu0_a118       7086 20714 23958476 98620 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:17:07][352590523819153][538 ms][DEBUG] targetPkg: running
[2025-08-21 15:17:07][352590523819153][538 ms][DEBUG] END   check_scloud in 243 ms
[2025-08-21 15:17:07][352590523819153][538 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:17:07][352590523819153][538 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTkwNTIzODE5MTUzIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MTJTTjZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY0NSJ9'" -e "main()" -q"
[2025-08-21 15:17:07][352590523819153][538 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:17:07][352590523819153][538 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTkwNTIzODE5MTUzIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MTJTTjZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY0NSJ9'" -e "main()" -q"
[2025-08-21 15:17:09][352590523819153][2470 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTkwNTIzODE5MTUzIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MTJTTjZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY0NSJ9"\r\n
[2025-08-21 15:17:11][352590523819153][4357 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_909530e8-fa42-46e9-8a94-590ec5ed4a45","id":"QR_909530e8-fa42-46e9-8a94-590ec5ed4a45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:17:11][352590523819153][4357 ms][DEBUG] proc_open done in 3819 ms; code=0; res.len=3152
[2025-08-21 15:17:11][352590523819153][4357 ms][DEBUG] END   runCmdUntilRes#1 in 3819 ms
[2025-08-21 15:17:11][352590523819153][4357 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:17:20][350833965640584][0 ms][INFO] === Request start ===
[2025-08-21 15:17:20][350833965640584][1 ms][DEBUG] START check_frida
[2025-08-21 15:17:20][350833965640584][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:17:20][350833965640584][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:17:20][350833965640584][297 ms][DEBUG] check_frida: running
[2025-08-21 15:17:20][350833965640584][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 15:17:20][350833965640584][297 ms][DEBUG] START check_scloud
[2025-08-21 15:17:20][350833965640584][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:17:20][350833965640584][586 ms][DEBUG] SU: done in 289 ms; outu0_a118       7086 20714 23974768 98392 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:17:20][350833965640584][586 ms][DEBUG] targetPkg: running
[2025-08-21 15:17:20][350833965640584][586 ms][DEBUG] END   check_scloud in 289 ms
[2025-08-21 15:17:20][350833965640584][586 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:17:20][350833965640584][586 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODMzOTY1NjQwNTg0IiwibW9kZWwiOiJTTS1BMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q5MDFNUzZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUyNSJ9'" -e "main()" -q"
[2025-08-21 15:17:20][350833965640584][587 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:17:20][350833965640584][587 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODMzOTY1NjQwNTg0IiwibW9kZWwiOiJTTS1BMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q5MDFNUzZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUyNSJ9'" -e "main()" -q"
[2025-08-21 15:17:22][350833965640584][2502 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODMzOTY1NjQwNTg0IiwibW9kZWwiOiJTTS1BMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q5MDFNUzZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUyNSJ9"\r\n
[2025-08-21 15:17:24][350833965640584][4648 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_abfbec6a-7485-4ec5-995f-6f13980e3ce6","id":"QR_abfbec6a-7485-4ec5-995f-6f13980e3ce6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:17:24][350833965640584][4648 ms][DEBUG] proc_open done in 4061 ms; code=0; res.len=3152
[2025-08-21 15:17:24][350833965640584][4648 ms][DEBUG] END   runCmdUntilRes#1 in 4061 ms
[2025-08-21 15:17:24][350833965640584][4648 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:20:22][352001413605298][1 ms][INFO] === Request start ===
[2025-08-21 15:20:22][352001413605298][2 ms][DEBUG] START check_frida
[2025-08-21 15:20:22][352001413605298][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:20:22][352001413605298][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2332716   4060 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:20:22][352001413605298][290 ms][DEBUG] check_frida: running
[2025-08-21 15:20:22][352001413605298][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 15:20:22][352001413605298][290 ms][DEBUG] START check_internet
[2025-08-21 15:20:22][352001413605298][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:20:23][352001413605298][578 ms][DEBUG] SU: done in 288 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.414/194.414/194.414/0.000 ms\n
[2025-08-21 15:20:23][352001413605298][578 ms][DEBUG] check_internet: online
[2025-08-21 15:20:23][352001413605298][578 ms][DEBUG] END   check_internet in 288 ms
[2025-08-21 15:20:23][352001413605298][578 ms][DEBUG] START check_scloud
[2025-08-21 15:20:23][352001413605298][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:20:23][352001413605298][819 ms][DEBUG] SU: done in 241 ms; outu0_a118       7086 20714 23958348 97848 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:20:23][352001413605298][819 ms][DEBUG] targetPkg: running
[2025-08-21 15:20:23][352001413605298][819 ms][DEBUG] END   check_scloud in 241 ms
[2025-08-21 15:20:23][352001413605298][819 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:20:23][352001413605298][819 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDAxNDEzNjA1Mjk4IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ3MFlIOFRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY2NiJ9'" -e "main()" -q"
[2025-08-21 15:20:23][352001413605298][819 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:20:23][352001413605298][819 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDAxNDEzNjA1Mjk4IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ3MFlIOFRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY2NiJ9'" -e "main()" -q"
[2025-08-21 15:20:25][352001413605298][2724 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDAxNDEzNjA1Mjk4IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQ3MFlIOFRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY2NiJ9"\r\n
[2025-08-21 15:20:27][352001413605298][4868 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0bb81ba-5e60-416f-a83d-bc6a913e2466","id":"QR_b0bb81ba-5e60-416f-a83d-bc6a913e2466","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:20:27][352001413605298][4868 ms][DEBUG] proc_open done in 4049 ms; code=0; res.len=3152
[2025-08-21 15:20:27][352001413605298][4868 ms][DEBUG] END   runCmdUntilRes#1 in 4049 ms
[2025-08-21 15:20:27][352001413605298][4868 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:21:08][357651718538886][0 ms][INFO] === Request start ===
[2025-08-21 15:21:08][357651718538886][1 ms][DEBUG] START check_frida
[2025-08-21 15:21:08][357651718538886][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:21:09][357651718538886][296 ms][DEBUG] SU: done in 295 ms; outroot          4632     1 2332716   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:21:09][357651718538886][296 ms][DEBUG] check_frida: running
[2025-08-21 15:21:09][357651718538886][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 15:21:09][357651718538886][296 ms][DEBUG] START check_scloud
[2025-08-21 15:21:09][357651718538886][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:21:09][357651718538886][599 ms][DEBUG] SU: done in 303 ms; outu0_a118       7086 20714 23958348 98244 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:21:09][357651718538886][599 ms][DEBUG] targetPkg: running
[2025-08-21 15:21:09][357651718538886][600 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:21:09][357651718538886][600 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:21:09][357651718538886][600 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE4NTM4ODg2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ5MDNZSDlCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODAzIn0='" -e "main()" -q"
[2025-08-21 15:21:09][357651718538886][600 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:21:09][357651718538886][600 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE4NTM4ODg2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ5MDNZSDlCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODAzIn0='" -e "main()" -q"
[2025-08-21 15:21:11][357651718538886][2531 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzE4NTM4ODg2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ5MDNZSDlCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODAzIn0="\r\n
[2025-08-21 15:21:14][357651718538886][6051 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76146859-ae44-47bc-af38-891ae4cd0104","id":"QR_76146859-ae44-47bc-af38-891ae4cd0104","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:21:14][357651718538886][6052 ms][DEBUG] proc_open done in 5452 ms; code=0; res.len=3152
[2025-08-21 15:21:14][357651718538886][6052 ms][DEBUG] END   runCmdUntilRes#1 in 5453 ms
[2025-08-21 15:21:14][357651718538886][6052 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:22:21][353960262850827][0 ms][INFO] === Request start ===
[2025-08-21 15:22:21][353960262850827][1 ms][DEBUG] START check_frida
[2025-08-21 15:22:21][353960262850827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:22:22][353960262850827][307 ms][DEBUG] SU: done in 305 ms; outroot          4632     1 2332716   4048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:22:22][353960262850827][307 ms][DEBUG] check_frida: running
[2025-08-21 15:22:22][353960262850827][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 15:22:22][353960262850827][307 ms][DEBUG] START check_internet
[2025-08-21 15:22:22][353960262850827][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:22:22][353960262850827][850 ms][DEBUG] SU: done in 543 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.759/203.759/203.759/0.000 ms\n
[2025-08-21 15:22:22][353960262850827][850 ms][DEBUG] check_internet: online
[2025-08-21 15:22:22][353960262850827][850 ms][DEBUG] END   check_internet in 543 ms
[2025-08-21 15:22:22][353960262850827][850 ms][DEBUG] START check_scloud
[2025-08-21 15:22:22][353960262850827][850 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:22:22][353960262850827][1137 ms][DEBUG] SU: done in 287 ms; outu0_a118       7086 20714 23958476 97920 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:22:22][353960262850827][1137 ms][DEBUG] targetPkg: running
[2025-08-21 15:22:22][353960262850827][1137 ms][DEBUG] END   check_scloud in 287 ms
[2025-08-21 15:22:22][353960262850827][1137 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:22:22][353960262850827][1137 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTYwMjYyODUwODI3IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMDY2NkdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Mzk5In0='" -e "main()" -q"
[2025-08-21 15:22:22][353960262850827][1137 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:22:22][353960262850827][1137 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTYwMjYyODUwODI3IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMDY2NkdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Mzk5In0='" -e "main()" -q"
[2025-08-21 15:22:24][353960262850827][3042 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTYwMjYyODUwODI3IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMDY2NkdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Mzk5In0="\r\n
[2025-08-21 15:22:28][353960262850827][6465 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d9d2ff8-86ac-4f8b-b6eb-974fca42b598","id":"QR_9d9d2ff8-86ac-4f8b-b6eb-974fca42b598","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:22:28][353960262850827][6466 ms][DEBUG] proc_open done in 5328 ms; code=0; res.len=3152
[2025-08-21 15:22:28][353960262850827][6466 ms][DEBUG] END   runCmdUntilRes#1 in 5328 ms
[2025-08-21 15:22:28][353960262850827][6466 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:23:07][350828942091364][1 ms][INFO] === Request start ===
[2025-08-21 15:23:07][350828942091364][1 ms][DEBUG] START check_frida
[2025-08-21 15:23:07][350828942091364][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:23:07][350828942091364][289 ms][DEBUG] SU: done in 288 ms; outroot          4632     1 2332716   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:23:07][350828942091364][290 ms][DEBUG] check_frida: running
[2025-08-21 15:23:07][350828942091364][290 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 15:23:07][350828942091364][290 ms][DEBUG] START check_scloud
[2025-08-21 15:23:07][350828942091364][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:23:07][350828942091364][593 ms][DEBUG] SU: done in 303 ms; outu0_a118       7086 20714 23958476 98496 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:23:07][350828942091364][593 ms][DEBUG] targetPkg: running
[2025-08-21 15:23:07][350828942091364][593 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:23:07][350828942091364][593 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:23:07][350828942091364][593 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI4OTQyMDkxMzY0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhDMDVaMUZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM4NiJ9'" -e "main()" -q"
[2025-08-21 15:23:07][350828942091364][593 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:23:07][350828942091364][593 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI4OTQyMDkxMzY0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhDMDVaMUZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM4NiJ9'" -e "main()" -q"
[2025-08-21 15:23:09][350828942091364][2542 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODI4OTQyMDkxMzY0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhDMDVaMUZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM4NiJ9"\r\n
[2025-08-21 15:23:12][350828942091364][5291 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f073e1c6-d749-4072-b395-9308fc33c4dd","id":"QR_f073e1c6-d749-4072-b395-9308fc33c4dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:23:12][350828942091364][5291 ms][DEBUG] proc_open done in 4697 ms; code=0; res.len=3152
[2025-08-21 15:23:12][350828942091364][5291 ms][DEBUG] END   runCmdUntilRes#1 in 4697 ms
[2025-08-21 15:23:12][350828942091364][5291 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:24:06][353074282837275][0 ms][INFO] === Request start ===
[2025-08-21 15:24:06][353074282837275][1 ms][DEBUG] START check_frida
[2025-08-21 15:24:06][353074282837275][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:24:07][353074282837275][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2332716   4068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:24:07][353074282837275][294 ms][DEBUG] check_frida: running
[2025-08-21 15:24:07][353074282837275][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 15:24:07][353074282837275][294 ms][DEBUG] START check_internet
[2025-08-21 15:24:07][353074282837275][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:24:07][353074282837275][597 ms][DEBUG] SU: done in 303 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.697/204.697/204.697/0.000 ms\n
[2025-08-21 15:24:07][353074282837275][597 ms][DEBUG] check_internet: online
[2025-08-21 15:24:07][353074282837275][597 ms][DEBUG] END   check_internet in 303 ms
[2025-08-21 15:24:07][353074282837275][597 ms][DEBUG] START check_scloud
[2025-08-21 15:24:07][353074282837275][597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:24:07][353074282837275][869 ms][DEBUG] SU: done in 272 ms; outu0_a118       7086 20714 23958348 97568 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:24:07][353074282837275][869 ms][DEBUG] targetPkg: running
[2025-08-21 15:24:07][353074282837275][869 ms][DEBUG] END   check_scloud in 272 ms
[2025-08-21 15:24:07][353074282837275][869 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:24:07][353074282837275][869 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDc0MjgyODM3Mjc1IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q3Mk5URTVIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTIzOSJ9'" -e "main()" -q"
[2025-08-21 15:24:07][353074282837275][869 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:24:07][353074282837275][869 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDc0MjgyODM3Mjc1IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q3Mk5URTVIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTIzOSJ9'" -e "main()" -q"
[2025-08-21 15:24:09][353074282837275][2770 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDc0MjgyODM3Mjc1IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q3Mk5URTVIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTIzOSJ9"\r\n
[2025-08-21 15:24:11][353074282837275][4610 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ac16db9-ba33-4063-ac04-6b89e34334b0","id":"QR_2ac16db9-ba33-4063-ac04-6b89e34334b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:24:11][353074282837275][4610 ms][DEBUG] proc_open done in 3741 ms; code=0; res.len=3152
[2025-08-21 15:24:11][353074282837275][4610 ms][DEBUG] END   runCmdUntilRes#1 in 3741 ms
[2025-08-21 15:24:11][353074282837275][4610 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:24:18][352773714141666][0 ms][INFO] === Request start ===
[2025-08-21 15:24:18][352773714141666][1 ms][DEBUG] START check_frida
[2025-08-21 15:24:18][352773714141666][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:24:18][352773714141666][307 ms][DEBUG] SU: done in 305 ms; outroot          4632     1 2349136   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:24:18][352773714141666][307 ms][DEBUG] check_frida: running
[2025-08-21 15:24:18][352773714141666][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 15:24:18][352773714141666][307 ms][DEBUG] START check_internet
[2025-08-21 15:24:18][352773714141666][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:24:18][352773714141666][684 ms][DEBUG] SU: done in 377 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.606/261.606/261.606/0.000 ms\n
[2025-08-21 15:24:18][352773714141666][684 ms][DEBUG] check_internet: online
[2025-08-21 15:24:18][352773714141666][684 ms][DEBUG] END   check_internet in 377 ms
[2025-08-21 15:24:18][352773714141666][684 ms][DEBUG] START check_scloud
[2025-08-21 15:24:18][352773714141666][684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:24:19][352773714141666][973 ms][DEBUG] SU: done in 289 ms; outu0_a118       7086 20714 23974768 98132 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:24:19][352773714141666][974 ms][DEBUG] targetPkg: running
[2025-08-21 15:24:19][352773714141666][974 ms][DEBUG] END   check_scloud in 289 ms
[2025-08-21 15:24:19][352773714141666][974 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:24:19][352773714141666][974 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzczNzE0MTQxNjY2IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hDMUdQM0dBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk5MSJ9'" -e "main()" -q"
[2025-08-21 15:24:19][352773714141666][974 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:24:19][352773714141666][974 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzczNzE0MTQxNjY2IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hDMUdQM0dBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk5MSJ9'" -e "main()" -q"
[2025-08-21 15:24:20][352773714141666][2905 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzczNzE0MTQxNjY2IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1hDMUdQM0dBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODk5MSJ9"\r\n
[2025-08-21 15:24:23][352773714141666][5138 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd2c5efa-cc14-45e5-81b5-2e48d52e8369","id":"QR_bd2c5efa-cc14-45e5-81b5-2e48d52e8369","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:24:23][352773714141666][5139 ms][DEBUG] proc_open done in 4164 ms; code=0; res.len=3152
[2025-08-21 15:24:23][352773714141666][5139 ms][DEBUG] END   runCmdUntilRes#1 in 4165 ms
[2025-08-21 15:24:23][352773714141666][5139 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:25:06][353117557785883][1 ms][INFO] === Request start ===
[2025-08-21 15:25:06][353117557785883][2 ms][DEBUG] START check_frida
[2025-08-21 15:25:06][353117557785883][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:25:06][353117557785883][253 ms][DEBUG] SU: done in 252 ms; outroot          4632     1 2332716   4060 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:25:06][353117557785883][253 ms][DEBUG] check_frida: running
[2025-08-21 15:25:06][353117557785883][253 ms][DEBUG] END   check_frida in 252 ms
[2025-08-21 15:25:06][353117557785883][253 ms][DEBUG] START check_scloud
[2025-08-21 15:25:06][353117557785883][253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:25:06][353117557785883][497 ms][DEBUG] SU: done in 244 ms; outu0_a118       7086 20714 23958220 98824 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:25:06][353117557785883][497 ms][DEBUG] targetPkg: running
[2025-08-21 15:25:06][353117557785883][497 ms][DEBUG] END   check_scloud in 244 ms
[2025-08-21 15:25:06][353117557785883][497 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:25:06][353117557785883][497 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTE3NTU3Nzg1ODgzIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cyMVFTMjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg2MCJ9'" -e "main()" -q"
[2025-08-21 15:25:06][353117557785883][497 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:25:06][353117557785883][497 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTE3NTU3Nzg1ODgzIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cyMVFTMjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg2MCJ9'" -e "main()" -q"
[2025-08-21 15:25:08][353117557785883][2385 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTE3NTU3Nzg1ODgzIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cyMVFTMjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg2MCJ9"\r\n
[2025-08-21 15:25:10][353117557785883][4486 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8fe83afd-db04-4cdc-8b09-1979ef3c0814","id":"QR_8fe83afd-db04-4cdc-8b09-1979ef3c0814","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:25:10][353117557785883][4486 ms][DEBUG] proc_open done in 3989 ms; code=0; res.len=3152
[2025-08-21 15:25:10][353117557785883][4486 ms][DEBUG] END   runCmdUntilRes#1 in 3989 ms
[2025-08-21 15:25:10][353117557785883][4486 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:25:16][350498055346987][0 ms][INFO] === Request start ===
[2025-08-21 15:25:16][350498055346987][1 ms][DEBUG] START check_frida
[2025-08-21 15:25:16][350498055346987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:25:16][350498055346987][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2349136   4072 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:25:16][350498055346987][290 ms][DEBUG] check_frida: running
[2025-08-21 15:25:16][350498055346987][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 15:25:16][350498055346987][290 ms][DEBUG] START check_scloud
[2025-08-21 15:25:16][350498055346987][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:25:17][350498055346987][579 ms][DEBUG] SU: done in 289 ms; outu0_a118       7086 20714 23974640 98364 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:25:17][350498055346987][579 ms][DEBUG] targetPkg: running
[2025-08-21 15:25:17][350498055346987][579 ms][DEBUG] END   check_scloud in 289 ms
[2025-08-21 15:25:17][350498055346987][579 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:25:17][350498055346987][580 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDU1MzQ2OTg3IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMDBBUVBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU2OCJ9'" -e "main()" -q"
[2025-08-21 15:25:17][350498055346987][580 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:25:17][350498055346987][580 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDU1MzQ2OTg3IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMDBBUVBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU2OCJ9'" -e "main()" -q"
[2025-08-21 15:25:19][350498055346987][2513 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDk4MDU1MzQ2OTg3IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMDBBUVBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTU2OCJ9"\r\n
[2025-08-21 15:25:21][350498055346987][4503 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f8d801b-0a32-4938-ac20-540dc8db715c","id":"QR_3f8d801b-0a32-4938-ac20-540dc8db715c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:25:21][350498055346987][4504 ms][DEBUG] proc_open done in 3924 ms; code=0; res.len=3152
[2025-08-21 15:25:21][350498055346987][4504 ms][DEBUG] END   runCmdUntilRes#1 in 3924 ms
[2025-08-21 15:25:21][350498055346987][4504 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:26:08][351617736078144][0 ms][INFO] === Request start ===
[2025-08-21 15:26:08][351617736078144][1 ms][DEBUG] START check_frida
[2025-08-21 15:26:08][351617736078144][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:26:08][351617736078144][295 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2332716   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:26:08][351617736078144][295 ms][DEBUG] check_frida: running
[2025-08-21 15:26:08][351617736078144][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 15:26:08][351617736078144][295 ms][DEBUG] START check_internet
[2025-08-21 15:26:08][351617736078144][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:26:09][351617736078144][703 ms][DEBUG] SU: done in 407 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.729/202.729/202.729/0.000 ms\n
[2025-08-21 15:26:09][351617736078144][703 ms][DEBUG] check_internet: online
[2025-08-21 15:26:09][351617736078144][703 ms][DEBUG] END   check_internet in 408 ms
[2025-08-21 15:26:09][351617736078144][703 ms][DEBUG] START check_scloud
[2025-08-21 15:26:09][351617736078144][703 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:26:09][351617736078144][975 ms][DEBUG] SU: done in 272 ms; outu0_a118       7086 20714 23958220 97592 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:26:09][351617736078144][975 ms][DEBUG] targetPkg: running
[2025-08-21 15:26:09][351617736078144][975 ms][DEBUG] END   check_scloud in 272 ms
[2025-08-21 15:26:09][351617736078144][975 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:26:09][351617736078144][975 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjE3NzM2MDc4MTQ0IiwibW9kZWwiOiJTTS1BNTQ2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MVBKTDRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDk0In0='" -e "main()" -q"
[2025-08-21 15:26:09][351617736078144][976 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:26:09][351617736078144][976 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjE3NzM2MDc4MTQ0IiwibW9kZWwiOiJTTS1BNTQ2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MVBKTDRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDk0In0='" -e "main()" -q"
[2025-08-21 15:26:11][351617736078144][2893 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjE3NzM2MDc4MTQ0IiwibW9kZWwiOiJTTS1BNTQ2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MVBKTDRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDk0In0="\r\n
[2025-08-21 15:26:14][351617736078144][6518 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b5b1e82-ad61-4304-bee6-edc8cf9ac64d","id":"QR_9b5b1e82-ad61-4304-bee6-edc8cf9ac64d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:26:14][351617736078144][6518 ms][DEBUG] proc_open done in 5542 ms; code=0; res.len=3152
[2025-08-21 15:26:14][351617736078144][6519 ms][DEBUG] END   runCmdUntilRes#1 in 5543 ms
[2025-08-21 15:26:14][351617736078144][6519 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:26:23][356196386346478][1 ms][INFO] === Request start ===
[2025-08-21 15:26:23][356196386346478][2 ms][DEBUG] START check_frida
[2025-08-21 15:26:23][356196386346478][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:26:24][356196386346478][244 ms][DEBUG] SU: done in 243 ms; outroot          4632     1 2349136   4056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:26:24][356196386346478][244 ms][DEBUG] check_frida: running
[2025-08-21 15:26:24][356196386346478][244 ms][DEBUG] END   check_frida in 243 ms
[2025-08-21 15:26:24][356196386346478][244 ms][DEBUG] START check_internet
[2025-08-21 15:26:24][356196386346478][245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:26:24][356196386346478][532 ms][DEBUG] SU: done in 288 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.015/182.015/182.015/0.000 ms\n
[2025-08-21 15:26:24][356196386346478][532 ms][DEBUG] check_internet: online
[2025-08-21 15:26:24][356196386346478][532 ms][DEBUG] END   check_internet in 288 ms
[2025-08-21 15:26:24][356196386346478][532 ms][DEBUG] START check_scloud
[2025-08-21 15:26:24][356196386346478][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:26:24][356196386346478][832 ms][DEBUG] SU: done in 300 ms; outu0_a118       7086 20714 23974768 98112 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:26:24][356196386346478][832 ms][DEBUG] targetPkg: running
[2025-08-21 15:26:24][356196386346478][832 ms][DEBUG] END   check_scloud in 300 ms
[2025-08-21 15:26:24][356196386346478][832 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:26:24][356196386346478][832 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MTk2Mzg2MzQ2NDc4IiwibW9kZWwiOiJTTS1UNTA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUUjkwTjRBVFQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1JRCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzY3In0='" -e "main()" -q"
[2025-08-21 15:26:24][356196386346478][833 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:26:24][356196386346478][833 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MTk2Mzg2MzQ2NDc4IiwibW9kZWwiOiJTTS1UNTA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUUjkwTjRBVFQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1JRCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzY3In0='" -e "main()" -q"
[2025-08-21 15:26:26][356196386346478][2732 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MTk2Mzg2MzQ2NDc4IiwibW9kZWwiOiJTTS1UNTA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUUjkwTjRBVFQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1JRCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzY3In0="\r\n
[2025-08-21 15:26:28][356196386346478][4993 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f7965e5-04fb-40a4-acd4-f2540b5d5e91","id":"QR_7f7965e5-04fb-40a4-acd4-f2540b5d5e91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:26:28][356196386346478][4993 ms][DEBUG] proc_open done in 4160 ms; code=0; res.len=3152
[2025-08-21 15:26:28][356196386346478][4993 ms][DEBUG] END   runCmdUntilRes#1 in 4161 ms
[2025-08-21 15:26:28][356196386346478][4993 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:26:35][350987615550195][0 ms][INFO] === Request start ===
[2025-08-21 15:26:35][350987615550195][1 ms][DEBUG] START check_frida
[2025-08-21 15:26:35][350987615550195][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:26:35][350987615550195][312 ms][DEBUG] SU: done in 311 ms; outroot          4632     1 2349136   4072 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:26:35][350987615550195][312 ms][DEBUG] check_frida: running
[2025-08-21 15:26:35][350987615550195][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 15:26:35][350987615550195][312 ms][DEBUG] START check_internet
[2025-08-21 15:26:35][350987615550195][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:26:36][350987615550195][645 ms][DEBUG] SU: done in 332 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.194/232.194/232.194/0.000 ms\n
[2025-08-21 15:26:36][350987615550195][645 ms][DEBUG] check_internet: online
[2025-08-21 15:26:36][350987615550195][645 ms][DEBUG] END   check_internet in 332 ms
[2025-08-21 15:26:36][350987615550195][645 ms][DEBUG] START check_scloud
[2025-08-21 15:26:36][350987615550195][645 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:26:36][350987615550195][902 ms][DEBUG] SU: done in 257 ms; outu0_a118       7086 20714 23974768 98732 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:26:36][350987615550195][902 ms][DEBUG] targetPkg: running
[2025-08-21 15:26:36][350987615550195][902 ms][DEBUG] END   check_scloud in 257 ms
[2025-08-21 15:26:36][350987615550195][902 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:26:36][350987615550195][902 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjE1NTUwMTk1IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MUhHQ1hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMxOCJ9'" -e "main()" -q"
[2025-08-21 15:26:36][350987615550195][902 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:26:36][350987615550195][902 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjE1NTUwMTk1IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MUhHQ1hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMxOCJ9'" -e "main()" -q"
[2025-08-21 15:26:38][350987615550195][2830 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTg3NjE1NTUwMTk1IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MUhHQ1hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMxOCJ9"\r\n
[2025-08-21 15:26:40][350987615550195][4600 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_341faaf2-79ce-4323-a6b7-7ae3505ccdc4","id":"QR_341faaf2-79ce-4323-a6b7-7ae3505ccdc4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:26:40][350987615550195][4600 ms][DEBUG] proc_open done in 3699 ms; code=0; res.len=3152
[2025-08-21 15:26:40][350987615550195][4600 ms][DEBUG] END   runCmdUntilRes#1 in 3699 ms
[2025-08-21 15:26:40][350987615550195][4601 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:26:47][353600812676450][0 ms][INFO] === Request start ===
[2025-08-21 15:26:47][353600812676450][1 ms][DEBUG] START check_frida
[2025-08-21 15:26:47][353600812676450][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:26:47][353600812676450][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:26:47][353600812676450][298 ms][DEBUG] check_frida: running
[2025-08-21 15:26:47][353600812676450][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 15:26:47][353600812676450][298 ms][DEBUG] START check_internet
[2025-08-21 15:26:47][353600812676450][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:26:47][353600812676450][570 ms][DEBUG] SU: done in 272 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.137/179.137/179.137/0.000 ms\n
[2025-08-21 15:26:47][353600812676450][570 ms][DEBUG] check_internet: online
[2025-08-21 15:26:47][353600812676450][570 ms][DEBUG] END   check_internet in 272 ms
[2025-08-21 15:26:47][353600812676450][570 ms][DEBUG] START check_scloud
[2025-08-21 15:26:47][353600812676450][570 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:26:48][353600812676450][874 ms][DEBUG] SU: done in 303 ms; outu0_a118       7086 20714 23974768 98328 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:26:48][353600812676450][874 ms][DEBUG] targetPkg: running
[2025-08-21 15:26:48][353600812676450][874 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:26:48][353600812676450][874 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:26:48][353600812676450][874 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODEyNjc2NDUwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ3MDFNWTJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTM3In0='" -e "main()" -q"
[2025-08-21 15:26:48][353600812676450][874 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:26:48][353600812676450][874 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODEyNjc2NDUwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ3MDFNWTJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTM3In0='" -e "main()" -q"
[2025-08-21 15:26:49][353600812676450][2775 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjAwODEyNjc2NDUwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ3MDFNWTJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTM3In0="\r\n
[2025-08-21 15:26:53][353600812676450][6382 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c3051fa-b1df-4688-9a6a-ff16e081087a","id":"QR_6c3051fa-b1df-4688-9a6a-ff16e081087a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:26:53][353600812676450][6382 ms][DEBUG] proc_open done in 5508 ms; code=0; res.len=3152
[2025-08-21 15:26:53][353600812676450][6382 ms][DEBUG] END   runCmdUntilRes#1 in 5508 ms
[2025-08-21 15:26:53][353600812676450][6382 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:28:07][357950544490571][0 ms][INFO] === Request start ===
[2025-08-21 15:28:07][357950544490571][1 ms][DEBUG] START check_frida
[2025-08-21 15:28:07][357950544490571][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:28:08][357950544490571][299 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2332716   4056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:28:08][357950544490571][299 ms][DEBUG] check_frida: running
[2025-08-21 15:28:08][357950544490571][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 15:28:08][357950544490571][299 ms][DEBUG] START check_internet
[2025-08-21 15:28:08][357950544490571][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:28:08][357950544490571][557 ms][DEBUG] SU: done in 257 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.634/156.634/156.634/0.000 ms\n
[2025-08-21 15:28:08][357950544490571][557 ms][DEBUG] check_internet: online
[2025-08-21 15:28:08][357950544490571][557 ms][DEBUG] END   check_internet in 258 ms
[2025-08-21 15:28:08][357950544490571][557 ms][DEBUG] START check_scloud
[2025-08-21 15:28:08][357950544490571][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:28:08][357950544490571][844 ms][DEBUG] SU: done in 286 ms; outu0_a118       7086 20714 23958220 97852 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:28:08][357950544490571][844 ms][DEBUG] targetPkg: running
[2025-08-21 15:28:08][357950544490571][844 ms][DEBUG] END   check_scloud in 287 ms
[2025-08-21 15:28:08][357950544490571][844 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:28:08][357950544490571][844 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTUwNTQ0NDkwNTcxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMFBQQk1WIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg4MSJ9'" -e "main()" -q"
[2025-08-21 15:28:08][357950544490571][844 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:28:08][357950544490571][844 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTUwNTQ0NDkwNTcxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMFBQQk1WIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg4MSJ9'" -e "main()" -q"
[2025-08-21 15:28:10][357950544490571][2756 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTUwNTQ0NDkwNTcxIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMFBQQk1WIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzg4MSJ9"\r\n
[2025-08-21 15:28:12][357950544490571][4942 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c50780c-d51f-4266-b0c6-a2c55924e48f","id":"QR_5c50780c-d51f-4266-b0c6-a2c55924e48f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:28:12][357950544490571][4942 ms][DEBUG] proc_open done in 4098 ms; code=0; res.len=3152
[2025-08-21 15:28:12][357950544490571][4942 ms][DEBUG] END   runCmdUntilRes#1 in 4098 ms
[2025-08-21 15:28:12][357950544490571][4942 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:29:07][351477972349760][1 ms][INFO] === Request start ===
[2025-08-21 15:29:07][351477972349760][2 ms][DEBUG] START check_frida
[2025-08-21 15:29:07][351477972349760][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:29:08][351477972349760][300 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2332716   4076 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:29:08][351477972349760][300 ms][DEBUG] check_frida: running
[2025-08-21 15:29:08][351477972349760][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 15:29:08][351477972349760][300 ms][DEBUG] START check_scloud
[2025-08-21 15:29:08][351477972349760][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:29:08][351477972349760][618 ms][DEBUG] SU: done in 318 ms; outu0_a118       7086 20714 23958476 98616 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:29:08][351477972349760][618 ms][DEBUG] targetPkg: running
[2025-08-21 15:29:08][351477972349760][618 ms][DEBUG] END   check_scloud in 318 ms
[2025-08-21 15:29:08][351477972349760][618 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:29:08][351477972349760][618 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTcyMzQ5NzYwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCME5KRENOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM5MyJ9'" -e "main()" -q"
[2025-08-21 15:29:08][351477972349760][619 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:29:08][351477972349760][619 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTcyMzQ5NzYwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCME5KRENOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM5MyJ9'" -e "main()" -q"
[2025-08-21 15:29:10][351477972349760][2532 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDc3OTcyMzQ5NzYwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCME5KRENOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM5MyJ9"\r\n
[2025-08-21 15:29:12][351477972349760][4500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e62a95a-096b-45b7-a44f-848a2febe7ed","id":"QR_6e62a95a-096b-45b7-a44f-848a2febe7ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:29:12][351477972349760][4500 ms][DEBUG] proc_open done in 3881 ms; code=0; res.len=3152
[2025-08-21 15:29:12][351477972349760][4500 ms][DEBUG] END   runCmdUntilRes#1 in 3882 ms
[2025-08-21 15:29:12][351477972349760][4500 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:30:09][351521285956504][1 ms][INFO] === Request start ===
[2025-08-21 15:30:09][351521285956504][2 ms][DEBUG] START check_frida
[2025-08-21 15:30:09][351521285956504][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:30:09][351521285956504][305 ms][DEBUG] SU: done in 303 ms; outroot          4632     1 2332716   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:30:09][351521285956504][305 ms][DEBUG] check_frida: running
[2025-08-21 15:30:09][351521285956504][305 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 15:30:09][351521285956504][305 ms][DEBUG] START check_internet
[2025-08-21 15:30:09][351521285956504][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:30:09][351521285956504][651 ms][DEBUG] SU: done in 346 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.324/242.324/242.324/0.000 ms\n
[2025-08-21 15:30:09][351521285956504][651 ms][DEBUG] check_internet: online
[2025-08-21 15:30:09][351521285956504][651 ms][DEBUG] END   check_internet in 346 ms
[2025-08-21 15:30:09][351521285956504][651 ms][DEBUG] START check_scloud
[2025-08-21 15:30:09][351521285956504][651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:30:10][351521285956504][953 ms][DEBUG] SU: done in 302 ms; outu0_a118       7086 20714 23958476 98112 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:30:10][351521285956504][953 ms][DEBUG] targetPkg: running
[2025-08-21 15:30:10][351521285956504][953 ms][DEBUG] END   check_scloud in 302 ms
[2025-08-21 15:30:10][351521285956504][953 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:30:10][351521285956504][953 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg1OTU2NTA0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1czMU5IQjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU5MSJ9'" -e "main()" -q"
[2025-08-21 15:30:10][351521285956504][954 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:30:10][351521285956504][954 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg1OTU2NTA0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1czMU5IQjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU5MSJ9'" -e "main()" -q"
[2025-08-21 15:30:12][351521285956504][2880 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTIxMjg1OTU2NTA0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1czMU5IQjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU5MSJ9"\r\n
[2025-08-21 15:30:14][351521285956504][5540 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30d8ce3c-8d56-47a4-9055-f20bccb6adaa","id":"QR_30d8ce3c-8d56-47a4-9055-f20bccb6adaa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:30:14][351521285956504][5540 ms][DEBUG] proc_open done in 4587 ms; code=0; res.len=3152
[2025-08-21 15:30:14][351521285956504][5540 ms][DEBUG] END   runCmdUntilRes#1 in 4587 ms
[2025-08-21 15:30:14][351521285956504][5540 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:31:06][352677532020558][1 ms][INFO] === Request start ===
[2025-08-21 15:31:06][352677532020558][2 ms][DEBUG] START check_frida
[2025-08-21 15:31:06][352677532020558][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:31:07][352677532020558][298 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2332716   4060 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:31:07][352677532020558][298 ms][DEBUG] check_frida: running
[2025-08-21 15:31:07][352677532020558][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 15:31:07][352677532020558][298 ms][DEBUG] START check_scloud
[2025-08-21 15:31:07][352677532020558][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:31:07][352677532020558][599 ms][DEBUG] SU: done in 301 ms; outu0_a118       7086 20714 23958220 98420 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:31:07][352677532020558][599 ms][DEBUG] targetPkg: running
[2025-08-21 15:31:07][352677532020558][599 ms][DEBUG] END   check_scloud in 301 ms
[2025-08-21 15:31:07][352677532020558][599 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:31:07][352677532020558][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMyMDIwNTU4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDFXN1pWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjIwNSJ9'" -e "main()" -q"
[2025-08-21 15:31:07][352677532020558][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:31:07][352677532020558][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc3NTMyMDIwNTU4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDFXN1pWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjIwNSJ9'" -e "main()" -q"
[2025-08-21 15:31:09][352677532020558][2514 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjc3NTMyMDIwNTU4IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDFXN1pWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjIwNSJ9"\r\n
[2025-08-21 15:31:11][352677532020558][4327 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc686c81-b368-4a9d-b193-319cc42f241b","id":"QR_dc686c81-b368-4a9d-b193-319cc42f241b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:31:11][352677532020558][4327 ms][DEBUG] proc_open done in 3729 ms; code=0; res.len=3152
[2025-08-21 15:31:11][352677532020558][4327 ms][DEBUG] END   runCmdUntilRes#1 in 3729 ms
[2025-08-21 15:31:11][352677532020558][4327 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:31:34][353809895355698][0 ms][INFO] === Request start ===
[2025-08-21 15:31:34][353809895355698][1 ms][DEBUG] START check_frida
[2025-08-21 15:31:34][353809895355698][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:31:34][353809895355698][250 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2332716   4060 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:31:34][353809895355698][251 ms][DEBUG] check_frida: running
[2025-08-21 15:31:34][353809895355698][251 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 15:31:34][353809895355698][251 ms][DEBUG] START check_scloud
[2025-08-21 15:31:34][353809895355698][251 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:31:35][353809895355698][551 ms][DEBUG] SU: done in 300 ms; outu0_a118       7086 20714 23958476 97980 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:31:35][353809895355698][551 ms][DEBUG] targetPkg: running
[2025-08-21 15:31:35][353809895355698][551 ms][DEBUG] END   check_scloud in 301 ms
[2025-08-21 15:31:35][353809895355698][551 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:31:35][353809895355698][551 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzODA5ODk1MzU1Njk4IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdBMFNDTTZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYwNiJ9'" -e "main()" -q"
[2025-08-21 15:31:35][353809895355698][552 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:31:35][353809895355698][552 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzODA5ODk1MzU1Njk4IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdBMFNDTTZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYwNiJ9'" -e "main()" -q"
[2025-08-21 15:31:35][352288960540859][0 ms][INFO] === Request start ===
[2025-08-21 15:31:36][353809895355698][2533 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzODA5ODk1MzU1Njk4IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdBMFNDTTZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYwNiJ9"\r\n
[2025-08-21 15:31:39][353809895355698][4662 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_659ac388-39c9-4ae8-a64f-2a2f8548e593","id":"QR_659ac388-39c9-4ae8-a64f-2a2f8548e593","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:31:39][353809895355698][4663 ms][DEBUG] proc_open done in 4111 ms; code=0; res.len=3152
[2025-08-21 15:31:39][353809895355698][4663 ms][DEBUG] END   runCmdUntilRes#1 in 4111 ms
[2025-08-21 15:31:39][353809895355698][4663 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:31:39][352288960540859][4031 ms][DEBUG] START check_frida
[2025-08-21 15:31:39][352288960540859][4031 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:31:39][352288960540859][4273 ms][DEBUG] SU: done in 242 ms; outroot          4632     1 2349136   4024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:31:39][352288960540859][4273 ms][DEBUG] check_frida: running
[2025-08-21 15:31:39][352288960540859][4273 ms][DEBUG] END   check_frida in 242 ms
[2025-08-21 15:31:39][352288960540859][4273 ms][DEBUG] START check_scloud
[2025-08-21 15:31:39][352288960540859][4273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:31:39][352288960540859][4576 ms][DEBUG] SU: done in 303 ms; outu0_a118       7086 20714 23974768 98380 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:31:39][352288960540859][4576 ms][DEBUG] targetPkg: running
[2025-08-21 15:31:39][352288960540859][4576 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:31:39][352288960540859][4576 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:31:39][352288960540859][4577 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTYwNTQwODU5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzM0pFNzhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk5NCJ9'" -e "main()" -q"
[2025-08-21 15:31:39][352288960540859][4577 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:31:39][352288960540859][4577 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTYwNTQwODU5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzM0pFNzhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk5NCJ9'" -e "main()" -q"
[2025-08-21 15:31:41][352288960540859][6476 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjg4OTYwNTQwODU5IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzM0pFNzhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk5NCJ9"\r\n
[2025-08-21 15:31:43][352288960540859][8380 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6157fb56-1734-4b4d-9b63-80f18ca8a51b","id":"QR_6157fb56-1734-4b4d-9b63-80f18ca8a51b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:31:43][352288960540859][8380 ms][DEBUG] proc_open done in 3803 ms; code=0; res.len=3152
[2025-08-21 15:31:43][352288960540859][8380 ms][DEBUG] END   runCmdUntilRes#1 in 3803 ms
[2025-08-21 15:31:43][352288960540859][8380 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:32:06][351506556608116][0 ms][INFO] === Request start ===
[2025-08-21 15:32:06][351506556608116][0 ms][DEBUG] START check_frida
[2025-08-21 15:32:06][351506556608116][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:32:06][351506556608116][249 ms][DEBUG] SU: done in 249 ms; outroot          4632     1 2332716   4020 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:32:06][351506556608116][249 ms][DEBUG] check_frida: running
[2025-08-21 15:32:06][351506556608116][249 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 15:32:06][351506556608116][249 ms][DEBUG] START check_internet
[2025-08-21 15:32:06][351506556608116][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:32:07][351506556608116][702 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.668/201.668/201.668/0.000 ms\n
[2025-08-21 15:32:07][351506556608116][702 ms][DEBUG] check_internet: online
[2025-08-21 15:32:07][351506556608116][702 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 15:32:07][351506556608116][702 ms][DEBUG] START check_scloud
[2025-08-21 15:32:07][351506556608116][702 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:32:07][351506556608116][1020 ms][DEBUG] SU: done in 318 ms; outu0_a118       7086 20714 23958348 98972 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:32:07][351506556608116][1020 ms][DEBUG] targetPkg: running
[2025-08-21 15:32:07][351506556608116][1020 ms][DEBUG] END   check_scloud in 318 ms
[2025-08-21 15:32:07][351506556608116][1020 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:32:07][351506556608116][1020 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTA2NTU2NjA4MTE2IiwibW9kZWwiOiJTTS1YMTE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZWDkyNVpURUYiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTI3In0='" -e "main()" -q"
[2025-08-21 15:32:07][351506556608116][1020 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:32:07][351506556608116][1020 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTA2NTU2NjA4MTE2IiwibW9kZWwiOiJTTS1YMTE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZWDkyNVpURUYiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTI3In0='" -e "main()" -q"
[2025-08-21 15:32:09][351506556608116][2937 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTA2NTU2NjA4MTE2IiwibW9kZWwiOiJTTS1YMTE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZWDkyNVpURUYiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTI3In0="\r\n
[2025-08-21 15:32:11][351506556608116][4775 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa90a850-d3aa-403e-9d12-cb30a4e900a7","id":"QR_fa90a850-d3aa-403e-9d12-cb30a4e900a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:32:11][351506556608116][4776 ms][DEBUG] proc_open done in 3756 ms; code=0; res.len=3152
[2025-08-21 15:32:11][351506556608116][4776 ms][DEBUG] END   runCmdUntilRes#1 in 3756 ms
[2025-08-21 15:32:11][351506556608116][4776 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:32:17][356969642899310][0 ms][INFO] === Request start ===
[2025-08-21 15:32:17][356969642899310][1 ms][DEBUG] START check_frida
[2025-08-21 15:32:17][356969642899310][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:32:18][356969642899310][256 ms][DEBUG] SU: done in 255 ms; outroot          4632     1 2349136   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:32:18][356969642899310][256 ms][DEBUG] check_frida: running
[2025-08-21 15:32:18][356969642899310][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 15:32:18][356969642899310][256 ms][DEBUG] START check_internet
[2025-08-21 15:32:18][356969642899310][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:32:18][356969642899310][604 ms][DEBUG] SU: done in 348 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.193/259.193/259.193/0.000 ms\n
[2025-08-21 15:32:18][356969642899310][604 ms][DEBUG] check_internet: online
[2025-08-21 15:32:18][356969642899310][604 ms][DEBUG] END   check_internet in 349 ms
[2025-08-21 15:32:18][356969642899310][604 ms][DEBUG] START check_scloud
[2025-08-21 15:32:18][356969642899310][604 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:32:18][356969642899310][860 ms][DEBUG] SU: done in 255 ms; outu0_a118       7086 20714 23974896 98500 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:32:18][356969642899310][860 ms][DEBUG] targetPkg: running
[2025-08-21 15:32:18][356969642899310][860 ms][DEBUG] END   check_scloud in 255 ms
[2025-08-21 15:32:18][356969642899310][860 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:32:18][356969642899310][860 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTY5NjQyODk5MzEwIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI4M0hEV1JOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE0NyJ9'" -e "main()" -q"
[2025-08-21 15:32:18][356969642899310][860 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:32:18][356969642899310][860 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTY5NjQyODk5MzEwIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI4M0hEV1JOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE0NyJ9'" -e "main()" -q"
[2025-08-21 15:32:20][356969642899310][2779 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTY5NjQyODk5MzEwIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI4M0hEV1JOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE0NyJ9"\r\n
[2025-08-21 15:32:22][356969642899310][4782 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2db92cce-32d2-46b3-be26-30fe481ecb15","id":"QR_2db92cce-32d2-46b3-be26-30fe481ecb15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:32:22][356969642899310][4782 ms][DEBUG] proc_open done in 3923 ms; code=0; res.len=3152
[2025-08-21 15:32:22][356969642899310][4782 ms][DEBUG] END   runCmdUntilRes#1 in 3923 ms
[2025-08-21 15:32:22][356969642899310][4783 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:32:45][351885212988009][0 ms][INFO] === Request start ===
[2025-08-21 15:32:45][351885212988009][1 ms][DEBUG] START check_frida
[2025-08-21 15:32:45][351885212988009][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:32:46][351885212988009][285 ms][DEBUG] SU: done in 284 ms; outroot          4632     1 2332716   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:32:46][351885212988009][285 ms][DEBUG] check_frida: running
[2025-08-21 15:32:46][351885212988009][286 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 15:32:46][351885212988009][286 ms][DEBUG] START check_internet
[2025-08-21 15:32:46][351885212988009][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:32:46][351885212988009][587 ms][DEBUG] SU: done in 301 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.337/199.337/199.337/0.000 ms\n
[2025-08-21 15:32:46][351885212988009][587 ms][DEBUG] check_internet: online
[2025-08-21 15:32:46][351885212988009][587 ms][DEBUG] END   check_internet in 301 ms
[2025-08-21 15:32:46][351885212988009][587 ms][DEBUG] START check_scloud
[2025-08-21 15:32:46][351885212988009][587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:32:46][351885212988009][919 ms][DEBUG] SU: done in 332 ms; outu0_a118       7086 20714 23958476 99344 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:32:46][351885212988009][919 ms][DEBUG] targetPkg: running
[2025-08-21 15:32:46][351885212988009][919 ms][DEBUG] END   check_scloud in 332 ms
[2025-08-21 15:32:46][351885212988009][919 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:32:46][351885212988009][919 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODg1MjEyOTg4MDA5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2OCJ9'" -e "main()" -q"
[2025-08-21 15:32:46][351885212988009][919 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:32:46][351885212988009][919 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODg1MjEyOTg4MDA5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2OCJ9'" -e "main()" -q"
[2025-08-21 15:32:48][351885212988009][2852 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODg1MjEyOTg4MDA5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2OCJ9"\r\n
[2025-08-21 15:32:50][351885212988009][4961 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:32:50][351885212988009][4961 ms][DEBUG] proc_open done in 4043 ms; code=0; res.len=107
[2025-08-21 15:32:50][351885212988009][4962 ms][DEBUG] END   runCmdUntilRes#1 in 4043 ms
[2025-08-21 15:32:50][351885212988009][4962 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:32:51][][0 ms][INFO] === Request start ===
[2025-08-21 15:32:51][][1 ms][DEBUG] START check_frida
[2025-08-21 15:32:51][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:32:51][][255 ms][DEBUG] SU: done in 254 ms; outroot          4632     1 2349136   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:32:51][][255 ms][DEBUG] check_frida: running
[2025-08-21 15:32:51][][255 ms][DEBUG] END   check_frida in 254 ms
[2025-08-21 15:32:51][][255 ms][DEBUG] START check_internet
[2025-08-21 15:32:51][][255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:32:51][][498 ms][DEBUG] SU: done in 244 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.076/150.076/150.076/0.000 ms\n
[2025-08-21 15:32:51][][498 ms][DEBUG] check_internet: online
[2025-08-21 15:32:51][][499 ms][DEBUG] END   check_internet in 244 ms
[2025-08-21 15:32:51][][499 ms][DEBUG] START check_scloud
[2025-08-21 15:32:51][][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:32:52][][828 ms][DEBUG] SU: done in 329 ms; outu0_a118       7086 20714 23974896 98580 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:32:52][][828 ms][DEBUG] targetPkg: running
[2025-08-21 15:32:52][][828 ms][DEBUG] END   check_scloud in 330 ms
[2025-08-21 15:32:52][][828 ms][DEBUG] rawBody.length=1131
[2025-08-21 15:32:52][][828 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTk1NiJ9'" -e "main()" -q"
[2025-08-21 15:32:52][][828 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:32:52][][828 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTk1NiJ9'" -e "main()" -q"
[2025-08-21 15:32:54][][2730 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTk1NiJ9"\r\n
[2025-08-21 15:32:55][][4177 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:32:55][][4178 ms][DEBUG] proc_open done in 3349 ms; code=0; res.len=107
[2025-08-21 15:32:55][][4178 ms][DEBUG] END   runCmdUntilRes#1 in 3349 ms
[2025-08-21 15:32:55][][4178 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:32:55][][0 ms][INFO] === Request start ===
[2025-08-21 15:32:55][][1 ms][DEBUG] START check_frida
[2025-08-21 15:32:55][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:32:56][][309 ms][DEBUG] SU: done in 308 ms; outroot          4632     1 2349136   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:32:56][][309 ms][DEBUG] check_frida: running
[2025-08-21 15:32:56][][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 15:32:56][][309 ms][DEBUG] START check_internet
[2025-08-21 15:32:56][][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:32:56][][554 ms][DEBUG] SU: done in 245 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.445/145.445/145.445/0.000 ms\n
[2025-08-21 15:32:56][][555 ms][DEBUG] check_internet: online
[2025-08-21 15:32:56][][555 ms][DEBUG] END   check_internet in 245 ms
[2025-08-21 15:32:56][][555 ms][DEBUG] START check_scloud
[2025-08-21 15:32:56][][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:32:56][][809 ms][DEBUG] SU: done in 255 ms; outu0_a118       7086 20714 23974896 99008 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:32:56][][809 ms][DEBUG] targetPkg: running
[2025-08-21 15:32:56][][810 ms][DEBUG] END   check_scloud in 255 ms
[2025-08-21 15:32:56][][810 ms][DEBUG] rawBody.length=1131
[2025-08-21 15:32:56][][810 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjcwNiJ9'" -e "main()" -q"
[2025-08-21 15:32:56][][810 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:32:56][][810 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjcwNiJ9'" -e "main()" -q"
[2025-08-21 15:32:58][][2698 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjcwNiJ9"\r\n
[2025-08-21 15:32:59][][4160 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:32:59][][4160 ms][DEBUG] proc_open done in 3350 ms; code=0; res.len=107
[2025-08-21 15:32:59][][4160 ms][DEBUG] END   runCmdUntilRes#1 in 3350 ms
[2025-08-21 15:32:59][][4160 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:33:03][351885212988009][0 ms][INFO] === Request start ===
[2025-08-21 15:33:03][351885212988009][1 ms][DEBUG] START check_frida
[2025-08-21 15:33:03][351885212988009][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:33:04][351885212988009][307 ms][DEBUG] SU: done in 306 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:33:04][351885212988009][307 ms][DEBUG] check_frida: running
[2025-08-21 15:33:04][351885212988009][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 15:33:04][351885212988009][307 ms][DEBUG] START check_scloud
[2025-08-21 15:33:04][351885212988009][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:33:04][351885212988009][623 ms][DEBUG] SU: done in 316 ms; outu0_a118       7086 20714 23974896 98520 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:33:04][351885212988009][623 ms][DEBUG] targetPkg: running
[2025-08-21 15:33:04][351885212988009][623 ms][DEBUG] END   check_scloud in 316 ms
[2025-08-21 15:33:04][351885212988009][623 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:33:04][351885212988009][623 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODg1MjEyOTg4MDA5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDg3In0='" -e "main()" -q"
[2025-08-21 15:33:04][351885212988009][623 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:33:04][351885212988009][623 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODg1MjEyOTg4MDA5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDg3In0='" -e "main()" -q"
[2025-08-21 15:33:06][351885212988009][2525 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODg1MjEyOTg4MDA5IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMUEwMzFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDg3In0="\r\n
[2025-08-21 15:33:07][350551932446717][1 ms][INFO] === Request start ===
[2025-08-21 15:33:09][351885212988009][5849 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b92cb176-fe01-4a66-84ab-2b4b74f417ae","id":"QR_b92cb176-fe01-4a66-84ab-2b4b74f417ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:33:09][351885212988009][5849 ms][DEBUG] proc_open done in 5226 ms; code=0; res.len=3152
[2025-08-21 15:33:09][351885212988009][5849 ms][DEBUG] END   runCmdUntilRes#1 in 5226 ms
[2025-08-21 15:33:09][351885212988009][5849 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:33:10][350551932446717][3035 ms][DEBUG] START check_frida
[2025-08-21 15:33:10][350551932446717][3035 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:33:10][350551932446717][3337 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2349136   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:33:10][350551932446717][3337 ms][DEBUG] check_frida: running
[2025-08-21 15:33:10][350551932446717][3337 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 15:33:10][350551932446717][3337 ms][DEBUG] START check_scloud
[2025-08-21 15:33:10][350551932446717][3337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:33:10][350551932446717][3639 ms][DEBUG] SU: done in 302 ms; outu0_a118       7086 20714 23974896 99064 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:33:10][350551932446717][3639 ms][DEBUG] targetPkg: running
[2025-08-21 15:33:10][350551932446717][3639 ms][DEBUG] END   check_scloud in 302 ms
[2025-08-21 15:33:10][350551932446717][3639 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:33:10][350551932446717][3639 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTUxOTMyNDQ2NzE3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk1MDRCSkpGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjExIn0='" -e "main()" -q"
[2025-08-21 15:33:10][350551932446717][3639 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:33:10][350551932446717][3639 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTUxOTMyNDQ2NzE3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk1MDRCSkpGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjExIn0='" -e "main()" -q"
[2025-08-21 15:33:12][350551932446717][5523 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTUxOTMyNDQ2NzE3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk1MDRCSkpGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjExIn0="\r\n
[2025-08-21 15:33:15][350551932446717][7974 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f43f81a-3ff2-473e-8a08-af81c29e25db","id":"QR_8f43f81a-3ff2-473e-8a08-af81c29e25db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:33:15][350551932446717][7974 ms][DEBUG] proc_open done in 4335 ms; code=0; res.len=3152
[2025-08-21 15:33:15][350551932446717][7974 ms][DEBUG] END   runCmdUntilRes#1 in 4335 ms
[2025-08-21 15:33:15][350551932446717][7974 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:33:23][353684144756784][0 ms][INFO] === Request start ===
[2025-08-21 15:33:23][353684144756784][1 ms][DEBUG] START check_frida
[2025-08-21 15:33:23][353684144756784][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:33:24][353684144756784][299 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2349136   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:33:24][353684144756784][300 ms][DEBUG] check_frida: running
[2025-08-21 15:33:24][353684144756784][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 15:33:24][353684144756784][300 ms][DEBUG] START check_scloud
[2025-08-21 15:33:24][353684144756784][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:33:24][353684144756784][602 ms][DEBUG] SU: done in 302 ms; outu0_a118       7086 20714 23974640 98400 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:33:24][353684144756784][602 ms][DEBUG] targetPkg: running
[2025-08-21 15:33:24][353684144756784][602 ms][DEBUG] END   check_scloud in 302 ms
[2025-08-21 15:33:24][353684144756784][602 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:33:24][353684144756784][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQ0NzU2Nzg0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MTRZMUZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjMzNCJ9'" -e "main()" -q"
[2025-08-21 15:33:24][353684144756784][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:33:24][353684144756784][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQ0NzU2Nzg0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MTRZMUZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjMzNCJ9'" -e "main()" -q"
[2025-08-21 15:33:26][353684144756784][2517 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjg0MTQ0NzU2Nzg0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MTRZMUZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjMzNCJ9"\r\n
[2025-08-21 15:33:28][353684144756784][4272 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d2964c30-eeda-4169-b27a-515937dbb1e0","id":"QR_d2964c30-eeda-4169-b27a-515937dbb1e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:33:28][353684144756784][4272 ms][DEBUG] proc_open done in 3670 ms; code=0; res.len=3152
[2025-08-21 15:33:28][353684144756784][4272 ms][DEBUG] END   runCmdUntilRes#1 in 3670 ms
[2025-08-21 15:33:28][353684144756784][4272 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:33:33][351642487789855][0 ms][INFO] === Request start ===
[2025-08-21 15:33:33][351642487789855][1 ms][DEBUG] START check_frida
[2025-08-21 15:33:33][351642487789855][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:33:34][351642487789855][301 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:33:34][351642487789855][301 ms][DEBUG] check_frida: running
[2025-08-21 15:33:34][351642487789855][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 15:33:34][351642487789855][301 ms][DEBUG] START check_scloud
[2025-08-21 15:33:34][351642487789855][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:33:34][351642487789855][604 ms][DEBUG] SU: done in 303 ms; outu0_a118       7086 20714 23974896 99136 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:33:34][351642487789855][604 ms][DEBUG] targetPkg: running
[2025-08-21 15:33:34][351642487789855][604 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:33:34][351642487789855][604 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:33:34][351642487789855][604 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDg3Nzg5ODU1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MDMzTDNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTYxMCJ9'" -e "main()" -q"
[2025-08-21 15:33:34][351642487789855][604 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:33:34][351642487789855][604 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDg3Nzg5ODU1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MDMzTDNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTYxMCJ9'" -e "main()" -q"
[2025-08-21 15:33:36][351642487789855][2538 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjQyNDg3Nzg5ODU1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MDMzTDNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTYxMCJ9"\r\n
[2025-08-21 15:33:38][351642487789855][4275 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12e35e69-0ee4-438c-8c24-48b5d9736563","id":"QR_12e35e69-0ee4-438c-8c24-48b5d9736563","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:33:38][351642487789855][4275 ms][DEBUG] proc_open done in 3671 ms; code=0; res.len=3152
[2025-08-21 15:33:38][351642487789855][4275 ms][DEBUG] END   runCmdUntilRes#1 in 3671 ms
[2025-08-21 15:33:38][351642487789855][4275 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:33:45][351642482228651][1 ms][INFO] === Request start ===
[2025-08-21 15:33:45][351642482228651][2 ms][DEBUG] START check_frida
[2025-08-21 15:33:45][351642482228651][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:33:45][351642482228651][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:33:45][351642482228651][297 ms][DEBUG] check_frida: running
[2025-08-21 15:33:45][351642482228651][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 15:33:45][351642482228651][297 ms][DEBUG] START check_scloud
[2025-08-21 15:33:45][351642482228651][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:33:46][351642482228651][599 ms][DEBUG] SU: done in 302 ms; outu0_a118       7086 20714 23974896 98512 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:33:46][351642482228651][599 ms][DEBUG] targetPkg: running
[2025-08-21 15:33:46][351642482228651][599 ms][DEBUG] END   check_scloud in 302 ms
[2025-08-21 15:33:46][351642482228651][599 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:33:46][351642482228651][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDgyMjI4NjUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDFOTERCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI0MCJ9'" -e "main()" -q"
[2025-08-21 15:33:46][351642482228651][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:33:46][351642482228651][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDgyMjI4NjUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDFOTERCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI0MCJ9'" -e "main()" -q"
[2025-08-21 15:33:48][351642482228651][2517 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjQyNDgyMjI4NjUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDFOTERCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI0MCJ9"\r\n
[2025-08-21 15:33:49][351642482228651][4235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71e8ee2d-bbb1-4211-9a8b-2b70210548da","id":"QR_71e8ee2d-bbb1-4211-9a8b-2b70210548da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:33:49][351642482228651][4236 ms][DEBUG] proc_open done in 3637 ms; code=0; res.len=3152
[2025-08-21 15:33:49][351642482228651][4236 ms][DEBUG] END   runCmdUntilRes#1 in 3637 ms
[2025-08-21 15:33:49][351642482228651][4236 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:34:07][350938286345365][0 ms][INFO] === Request start ===
[2025-08-21 15:34:07][350938286345365][1 ms][DEBUG] START check_frida
[2025-08-21 15:34:07][350938286345365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:34:07][350938286345365][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2332716   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:34:07][350938286345365][294 ms][DEBUG] check_frida: running
[2025-08-21 15:34:07][350938286345365][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 15:34:07][350938286345365][294 ms][DEBUG] START check_internet
[2025-08-21 15:34:07][350938286345365][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:34:07][350938286345365][564 ms][DEBUG] SU: done in 269 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.418/141.418/141.418/0.000 ms\n
[2025-08-21 15:34:07][350938286345365][564 ms][DEBUG] check_internet: online
[2025-08-21 15:34:07][350938286345365][564 ms][DEBUG] END   check_internet in 270 ms
[2025-08-21 15:34:07][350938286345365][564 ms][DEBUG] START check_scloud
[2025-08-21 15:34:07][350938286345365][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:34:08][350938286345365][821 ms][DEBUG] SU: done in 258 ms; outu0_a118       7086 20714 23958476 99020 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:34:08][350938286345365][821 ms][DEBUG] targetPkg: running
[2025-08-21 15:34:08][350938286345365][821 ms][DEBUG] END   check_scloud in 258 ms
[2025-08-21 15:34:08][350938286345365][821 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:34:08][350938286345365][821 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA4OSJ9'" -e "main()" -q"
[2025-08-21 15:34:08][350938286345365][821 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:34:08][350938286345365][821 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA4OSJ9'" -e "main()" -q"
[2025-08-21 15:34:10][350938286345365][2720 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjA4OSJ9"\r\n
[2025-08-21 15:34:11][350938286345365][4546 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 15:34:11][350938286345365][4546 ms][DEBUG] proc_open done in 3724 ms; code=0; res.len=93
[2025-08-21 15:34:11][350938286345365][4546 ms][DEBUG] END   runCmdUntilRes#1 in 3724 ms
[2025-08-21 15:34:11][350938286345365][4546 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 15:34:12][][0 ms][INFO] === Request start ===
[2025-08-21 15:34:12][][1 ms][DEBUG] START check_frida
[2025-08-21 15:34:12][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:34:12][][252 ms][DEBUG] SU: done in 251 ms; outroot          4632     1 2349136   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:34:12][][252 ms][DEBUG] check_frida: running
[2025-08-21 15:34:12][][252 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 15:34:12][][253 ms][DEBUG] START check_internet
[2025-08-21 15:34:12][][253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:34:12][][493 ms][DEBUG] SU: done in 240 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.145/137.145/137.145/0.000 ms\n
[2025-08-21 15:34:12][][493 ms][DEBUG] check_internet: online
[2025-08-21 15:34:12][][493 ms][DEBUG] END   check_internet in 241 ms
[2025-08-21 15:34:12][][493 ms][DEBUG] START check_scloud
[2025-08-21 15:34:12][][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:34:13][][798 ms][DEBUG] SU: done in 305 ms; outu0_a118       7086 20714 23974896 98140 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:34:13][][798 ms][DEBUG] targetPkg: running
[2025-08-21 15:34:13][][798 ms][DEBUG] END   check_scloud in 305 ms
[2025-08-21 15:34:13][][798 ms][DEBUG] rawBody.length=1131
[2025-08-21 15:34:13][][798 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc3OCJ9'" -e "main()" -q"
[2025-08-21 15:34:13][][798 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:34:13][][798 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc3OCJ9'" -e "main()" -q"
[2025-08-21 15:34:14][][2732 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjc3OCJ9"\r\n
[2025-08-21 15:34:16][][4137 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:34:16][][4137 ms][DEBUG] proc_open done in 3339 ms; code=0; res.len=107
[2025-08-21 15:34:16][][4137 ms][DEBUG] END   runCmdUntilRes#1 in 3339 ms
[2025-08-21 15:34:16][][4137 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:34:16][][0 ms][INFO] === Request start ===
[2025-08-21 15:34:16][][1 ms][DEBUG] START check_frida
[2025-08-21 15:34:16][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:34:16][][300 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2349136   4028 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:34:16][][300 ms][DEBUG] check_frida: running
[2025-08-21 15:34:16][][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 15:34:16][][300 ms][DEBUG] START check_internet
[2025-08-21 15:34:16][][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:34:17][][557 ms][DEBUG] SU: done in 256 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.080/141.080/141.080/0.000 ms\n
[2025-08-21 15:34:17][][557 ms][DEBUG] check_internet: online
[2025-08-21 15:34:17][][557 ms][DEBUG] END   check_internet in 257 ms
[2025-08-21 15:34:17][][557 ms][DEBUG] START check_scloud
[2025-08-21 15:34:17][][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:34:17][][873 ms][DEBUG] SU: done in 317 ms; outu0_a118       7086 20714 23974640 98324 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:34:17][][874 ms][DEBUG] targetPkg: running
[2025-08-21 15:34:17][][874 ms][DEBUG] END   check_scloud in 317 ms
[2025-08-21 15:34:17][][874 ms][DEBUG] rawBody.length=1131
[2025-08-21 15:34:17][][874 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTA2OCJ9'" -e "main()" -q"
[2025-08-21 15:34:17][][874 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:34:17][][874 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTA2OCJ9'" -e "main()" -q"
[2025-08-21 15:34:19][][2773 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTA2OCJ9"\r\n
[2025-08-21 15:34:20][][4178 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:34:20][][4178 ms][DEBUG] proc_open done in 3305 ms; code=0; res.len=107
[2025-08-21 15:34:20][][4178 ms][DEBUG] END   runCmdUntilRes#1 in 3305 ms
[2025-08-21 15:34:20][][4178 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:34:22][350938286345365][0 ms][INFO] === Request start ===
[2025-08-21 15:34:22][350938286345365][1 ms][DEBUG] START check_frida
[2025-08-21 15:34:22][350938286345365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:34:23][350938286345365][304 ms][DEBUG] SU: done in 303 ms; outroot          4632     1 2349136   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:34:23][350938286345365][304 ms][DEBUG] check_frida: running
[2025-08-21 15:34:23][350938286345365][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 15:34:23][350938286345365][304 ms][DEBUG] START check_internet
[2025-08-21 15:34:23][350938286345365][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:34:23][350938286345365][622 ms][DEBUG] SU: done in 317 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.155/192.155/192.155/0.000 ms\n
[2025-08-21 15:34:23][350938286345365][622 ms][DEBUG] check_internet: online
[2025-08-21 15:34:23][350938286345365][622 ms][DEBUG] END   check_internet in 317 ms
[2025-08-21 15:34:23][350938286345365][622 ms][DEBUG] START check_scloud
[2025-08-21 15:34:23][350938286345365][622 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:34:23][350938286345365][938 ms][DEBUG] SU: done in 316 ms; outu0_a118       7086 20714 23974896 98128 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:34:23][350938286345365][938 ms][DEBUG] targetPkg: running
[2025-08-21 15:34:23][350938286345365][938 ms][DEBUG] END   check_scloud in 316 ms
[2025-08-21 15:34:23][350938286345365][938 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:34:23][350938286345365][938 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDU2In0='" -e "main()" -q"
[2025-08-21 15:34:23][350938286345365][938 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:34:23][350938286345365][938 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDU2In0='" -e "main()" -q"
[2025-08-21 15:34:25][350938286345365][2871 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg2MzQ1MzY1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDU2In0="\r\n
[2025-08-21 15:34:28][350938286345365][5713 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-21 15:34:28][350938286345365][5713 ms][DEBUG] proc_open done in 4775 ms; code=0; res.len=93
[2025-08-21 15:34:28][350938286345365][5713 ms][DEBUG] END   runCmdUntilRes#1 in 4775 ms
[2025-08-21 15:34:28][350938286345365][5713 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-21 15:34:28][][0 ms][INFO] === Request start ===
[2025-08-21 15:34:28][][1 ms][DEBUG] START check_frida
[2025-08-21 15:34:28][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:34:29][][308 ms][DEBUG] SU: done in 307 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:34:29][][308 ms][DEBUG] check_frida: running
[2025-08-21 15:34:29][][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 15:34:29][][308 ms][DEBUG] START check_internet
[2025-08-21 15:34:29][][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:34:29][][565 ms][DEBUG] SU: done in 257 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.018/145.018/145.018/0.000 ms\n
[2025-08-21 15:34:29][][565 ms][DEBUG] check_internet: online
[2025-08-21 15:34:29][][565 ms][DEBUG] END   check_internet in 257 ms
[2025-08-21 15:34:29][][565 ms][DEBUG] START check_scloud
[2025-08-21 15:34:29][][565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:34:29][][870 ms][DEBUG] SU: done in 304 ms; outu0_a118       7086 20714 23974896 97736 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:34:29][][870 ms][DEBUG] targetPkg: running
[2025-08-21 15:34:29][][870 ms][DEBUG] END   check_scloud in 304 ms
[2025-08-21 15:34:29][][870 ms][DEBUG] rawBody.length=1130
[2025-08-21 15:34:29][][870 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzk3In0='" -e "main()" -q"
[2025-08-21 15:34:29][][870 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:34:29][][870 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzk3In0='" -e "main()" -q"
[2025-08-21 15:34:31][][2834 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzk3In0="\r\n
[2025-08-21 15:34:34][][5293 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:34:34][][5293 ms][DEBUG] proc_open done in 4423 ms; code=0; res.len=107
[2025-08-21 15:34:34][][5293 ms][DEBUG] END   runCmdUntilRes#1 in 4423 ms
[2025-08-21 15:34:34][][5293 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:34:34][][0 ms][INFO] === Request start ===
[2025-08-21 15:34:34][][1 ms][DEBUG] START check_frida
[2025-08-21 15:34:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:34:34][][339 ms][DEBUG] SU: done in 338 ms; outroot          4632     1 2349136   4016 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:34:34][][339 ms][DEBUG] check_frida: running
[2025-08-21 15:34:34][][339 ms][DEBUG] END   check_frida in 338 ms
[2025-08-21 15:34:34][][339 ms][DEBUG] START check_internet
[2025-08-21 15:34:34][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:34:35][][702 ms][DEBUG] SU: done in 363 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.469/240.469/240.469/0.000 ms\n
[2025-08-21 15:34:35][][702 ms][DEBUG] check_internet: online
[2025-08-21 15:34:35][][702 ms][DEBUG] END   check_internet in 363 ms
[2025-08-21 15:34:35][][702 ms][DEBUG] START check_scloud
[2025-08-21 15:34:35][][702 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:34:35][][1049 ms][DEBUG] SU: done in 346 ms; outu0_a118       7086 20714 23974896 98252 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:34:35][][1049 ms][DEBUG] targetPkg: running
[2025-08-21 15:34:35][][1049 ms][DEBUG] END   check_scloud in 347 ms
[2025-08-21 15:34:35][][1049 ms][DEBUG] rawBody.length=1130
[2025-08-21 15:34:35][][1049 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTc3In0='" -e "main()" -q"
[2025-08-21 15:34:35][][1049 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:34:35][][1049 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTc3In0='" -e "main()" -q"
[2025-08-21 15:34:37][][2994 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMFRCWExMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTc3In0="\r\n
[2025-08-21 15:34:39][][5002 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:34:39][][5002 ms][DEBUG] proc_open done in 3953 ms; code=0; res.len=107
[2025-08-21 15:34:39][][5002 ms][DEBUG] END   runCmdUntilRes#1 in 3953 ms
[2025-08-21 15:34:39][][5002 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:36:07][352566277903658][1 ms][INFO] === Request start ===
[2025-08-21 15:36:07][352566277903658][2 ms][DEBUG] START check_frida
[2025-08-21 15:36:07][352566277903658][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:36:07][352566277903658][367 ms][DEBUG] SU: done in 365 ms; outroot          4632     1 2332716   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:36:07][352566277903658][367 ms][DEBUG] check_frida: running
[2025-08-21 15:36:07][352566277903658][367 ms][DEBUG] END   check_frida in 365 ms
[2025-08-21 15:36:07][352566277903658][367 ms][DEBUG] START check_internet
[2025-08-21 15:36:07][352566277903658][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:36:07][352566277903658][802 ms][DEBUG] SU: done in 435 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.328/141.328/141.328/0.000 ms\n
[2025-08-21 15:36:07][352566277903658][802 ms][DEBUG] check_internet: online
[2025-08-21 15:36:07][352566277903658][802 ms][DEBUG] END   check_internet in 435 ms
[2025-08-21 15:36:07][352566277903658][802 ms][DEBUG] START check_scloud
[2025-08-21 15:36:07][352566277903658][802 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:36:08][352566277903658][1341 ms][DEBUG] SU: done in 540 ms; outu0_a118       7086 20714 23958476 97432 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:36:08][352566277903658][1341 ms][DEBUG] targetPkg: running
[2025-08-21 15:36:08][352566277903658][1341 ms][DEBUG] END   check_scloud in 540 ms
[2025-08-21 15:36:08][352566277903658][1341 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:36:08][352566277903658][1341 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTY2Mjc3OTAzNjU4IiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMzhLMUJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2NyJ9'" -e "main()" -q"
[2025-08-21 15:36:08][352566277903658][1341 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:36:08][352566277903658][1341 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTY2Mjc3OTAzNjU4IiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMzhLMUJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2NyJ9'" -e "main()" -q"
[2025-08-21 15:36:10][352566277903658][3362 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTY2Mjc3OTAzNjU4IiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMzhLMUJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE2NyJ9"\r\n
[2025-08-21 15:36:13][352566277903658][6085 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_245627a4-13ab-4041-8d2d-e5f0b016cf3b","id":"QR_245627a4-13ab-4041-8d2d-e5f0b016cf3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:36:13][352566277903658][6085 ms][DEBUG] proc_open done in 4744 ms; code=0; res.len=3152
[2025-08-21 15:36:13][352566277903658][6085 ms][DEBUG] END   runCmdUntilRes#1 in 4744 ms
[2025-08-21 15:36:13][352566277903658][6085 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:36:20][350637543358795][0 ms][INFO] === Request start ===
[2025-08-21 15:36:20][350637543358795][1 ms][DEBUG] START check_frida
[2025-08-21 15:36:20][350637543358795][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:36:20][350637543358795][304 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2349136   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:36:20][350637543358795][304 ms][DEBUG] check_frida: running
[2025-08-21 15:36:20][350637543358795][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 15:36:20][350637543358795][304 ms][DEBUG] START check_internet
[2025-08-21 15:36:20][350637543358795][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:36:21][350637543358795][801 ms][DEBUG] SU: done in 498 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.647/198.647/198.647/0.000 ms\n
[2025-08-21 15:36:21][350637543358795][801 ms][DEBUG] check_internet: online
[2025-08-21 15:36:21][350637543358795][801 ms][DEBUG] END   check_internet in 498 ms
[2025-08-21 15:36:21][350637543358795][801 ms][DEBUG] START check_scloud
[2025-08-21 15:36:21][350637543358795][801 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:36:21][350637543358795][1165 ms][DEBUG] SU: done in 364 ms; outu0_a118       7086 20714 23974896 97984 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:36:21][350637543358795][1165 ms][DEBUG] targetPkg: running
[2025-08-21 15:36:21][350637543358795][1165 ms][DEBUG] END   check_scloud in 364 ms
[2025-08-21 15:36:21][350637543358795][1165 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:36:21][350637543358795][1165 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQzMzU4Nzk1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFRBMDJIMFlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEwMCJ9'" -e "main()" -q"
[2025-08-21 15:36:21][350637543358795][1165 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:36:21][350637543358795][1165 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQzMzU4Nzk1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFRBMDJIMFlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEwMCJ9'" -e "main()" -q"
[2025-08-21 15:36:23][350637543358795][3130 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjM3NTQzMzU4Nzk1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFRBMDJIMFlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEwMCJ9"\r\n
[2025-08-21 15:36:25][350637543358795][5060 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3b4d491-ab3d-4e7b-b567-10eac2c038f8","id":"QR_f3b4d491-ab3d-4e7b-b567-10eac2c038f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:36:25][350637543358795][5061 ms][DEBUG] proc_open done in 3895 ms; code=0; res.len=3152
[2025-08-21 15:36:25][350637543358795][5061 ms][DEBUG] END   runCmdUntilRes#1 in 3896 ms
[2025-08-21 15:36:25][350637543358795][5061 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:36:41][353313362465684][0 ms][INFO] === Request start ===
[2025-08-21 15:36:41][353313362465684][1 ms][DEBUG] START check_frida
[2025-08-21 15:36:41][353313362465684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:36:42][353313362465684][353 ms][DEBUG] SU: done in 352 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:36:42][353313362465684][353 ms][DEBUG] check_frida: running
[2025-08-21 15:36:42][353313362465684][353 ms][DEBUG] END   check_frida in 352 ms
[2025-08-21 15:36:42][353313362465684][353 ms][DEBUG] START check_internet
[2025-08-21 15:36:42][353313362465684][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:36:42][353313362465684][625 ms][DEBUG] SU: done in 271 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.111/151.111/151.111/0.000 ms\n
[2025-08-21 15:36:42][353313362465684][625 ms][DEBUG] check_internet: online
[2025-08-21 15:36:42][353313362465684][625 ms][DEBUG] END   check_internet in 271 ms
[2025-08-21 15:36:42][353313362465684][625 ms][DEBUG] START check_scloud
[2025-08-21 15:36:42][353313362465684][625 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:36:42][353313362465684][1124 ms][DEBUG] SU: done in 500 ms; outu0_a118       7086 20714 23958348 97408 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:36:42][353313362465684][1124 ms][DEBUG] targetPkg: running
[2025-08-21 15:36:42][353313362465684][1125 ms][DEBUG] END   check_scloud in 500 ms
[2025-08-21 15:36:42][353313362465684][1125 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:36:42][353313362465684][1125 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTQ4In0='" -e "main()" -q"
[2025-08-21 15:36:42][353313362465684][1125 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:36:42][353313362465684][1125 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTQ4In0='" -e "main()" -q"
[2025-08-21 15:36:44][353313362465684][3084 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTQ4In0="\r\n
[2025-08-21 15:36:47][353313362465684][6101 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 15:36:47][353313362465684][6101 ms][DEBUG] proc_open done in 4976 ms; code=0; res.len=115
[2025-08-21 15:36:47][353313362465684][6101 ms][DEBUG] END   runCmdUntilRes#1 in 4976 ms
[2025-08-21 15:36:47][353313362465684][6101 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 15:36:48][][0 ms][INFO] === Request start ===
[2025-08-21 15:36:48][][1 ms][DEBUG] START check_frida
[2025-08-21 15:36:48][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:36:48][][339 ms][DEBUG] SU: done in 338 ms; outroot          4632     1 2349136   4040 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:36:48][][339 ms][DEBUG] check_frida: running
[2025-08-21 15:36:48][][339 ms][DEBUG] END   check_frida in 338 ms
[2025-08-21 15:36:48][][339 ms][DEBUG] START check_internet
[2025-08-21 15:36:48][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:36:48][][596 ms][DEBUG] SU: done in 257 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.261/145.261/145.261/0.000 ms\n
[2025-08-21 15:36:48][][596 ms][DEBUG] check_internet: online
[2025-08-21 15:36:48][][596 ms][DEBUG] END   check_internet in 257 ms
[2025-08-21 15:36:48][][596 ms][DEBUG] START check_scloud
[2025-08-21 15:36:48][][596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:36:49][][1124 ms][DEBUG] SU: done in 528 ms; outu0_a118       7086 20714 23974896 98404 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:36:49][][1124 ms][DEBUG] targetPkg: running
[2025-08-21 15:36:49][][1124 ms][DEBUG] END   check_scloud in 529 ms
[2025-08-21 15:36:49][][1125 ms][DEBUG] rawBody.length=1130
[2025-08-21 15:36:49][][1125 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTM5In0='" -e "main()" -q"
[2025-08-21 15:36:49][][1125 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:36:49][][1125 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTM5In0='" -e "main()" -q"
[2025-08-21 15:36:51][][3101 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTM5In0="\r\n
[2025-08-21 15:36:54][][6366 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:36:54][][6367 ms][DEBUG] proc_open done in 5242 ms; code=0; res.len=107
[2025-08-21 15:36:54][][6367 ms][DEBUG] END   runCmdUntilRes#1 in 5242 ms
[2025-08-21 15:36:54][][6367 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:36:54][][0 ms][INFO] === Request start ===
[2025-08-21 15:36:54][][1 ms][DEBUG] START check_frida
[2025-08-21 15:36:54][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:36:55][][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:36:55][][292 ms][DEBUG] check_frida: running
[2025-08-21 15:36:55][][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 15:36:55][][292 ms][DEBUG] START check_internet
[2025-08-21 15:36:55][][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:36:55][][566 ms][DEBUG] SU: done in 273 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=158 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 158.638/158.638/158.638/0.000 ms\n
[2025-08-21 15:36:55][][566 ms][DEBUG] check_internet: online
[2025-08-21 15:36:55][][566 ms][DEBUG] END   check_internet in 273 ms
[2025-08-21 15:36:55][][566 ms][DEBUG] START check_scloud
[2025-08-21 15:36:55][][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:36:55][][957 ms][DEBUG] SU: done in 391 ms; outu0_a118       7086 20714 23974832 97460 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:36:55][][957 ms][DEBUG] targetPkg: running
[2025-08-21 15:36:55][][957 ms][DEBUG] END   check_scloud in 392 ms
[2025-08-21 15:36:55][][957 ms][DEBUG] rawBody.length=1130
[2025-08-21 15:36:55][][958 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzg0In0='" -e "main()" -q"
[2025-08-21 15:36:55][][958 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:36:55][][958 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzg0In0='" -e "main()" -q"
[2025-08-21 15:36:57][][2931 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzg0In0="\r\n
[2025-08-21 15:37:01][][6400 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:37:01][][6400 ms][DEBUG] proc_open done in 5442 ms; code=0; res.len=107
[2025-08-21 15:37:01][][6400 ms][DEBUG] END   runCmdUntilRes#1 in 5442 ms
[2025-08-21 15:37:01][][6400 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:37:02][353313362465684][0 ms][INFO] === Request start ===
[2025-08-21 15:37:02][353313362465684][1 ms][DEBUG] START check_frida
[2025-08-21 15:37:02][353313362465684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:37:02][353313362465684][347 ms][DEBUG] SU: done in 346 ms; outroot          4632     1 2349136   4060 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:37:02][353313362465684][347 ms][DEBUG] check_frida: running
[2025-08-21 15:37:02][353313362465684][347 ms][DEBUG] END   check_frida in 346 ms
[2025-08-21 15:37:02][353313362465684][347 ms][DEBUG] START check_scloud
[2025-08-21 15:37:02][353313362465684][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:37:02][353313362465684][709 ms][DEBUG] SU: done in 362 ms; outu0_a118       7086 20714 23974896 98060 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:37:02][353313362465684][709 ms][DEBUG] targetPkg: running
[2025-08-21 15:37:02][353313362465684][709 ms][DEBUG] END   check_scloud in 362 ms
[2025-08-21 15:37:02][353313362465684][709 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:37:02][353313362465684][709 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzk1NCJ9'" -e "main()" -q"
[2025-08-21 15:37:02][353313362465684][709 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:37:02][353313362465684][709 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzk1NCJ9'" -e "main()" -q"
[2025-08-21 15:37:04][353313362465684][2656 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzk1NCJ9"\r\n
[2025-08-21 15:37:05][350518490752174][0 ms][INFO] === Request start ===
[2025-08-21 15:37:07][353313362465684][4919 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65ab3c82-8346-4385-a655-5100b09e889e","id":"QR_65ab3c82-8346-4385-a655-5100b09e889e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:37:07][353313362465684][4920 ms][DEBUG] proc_open done in 4210 ms; code=0; res.len=3152
[2025-08-21 15:37:07][353313362465684][4920 ms][DEBUG] END   runCmdUntilRes#1 in 4211 ms
[2025-08-21 15:37:07][353313362465684][4920 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:37:07][350518490752174][2016 ms][DEBUG] START check_frida
[2025-08-21 15:37:07][350518490752174][2016 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:37:07][350518490752174][2367 ms][DEBUG] SU: done in 351 ms; outroot          4632     1 2349136   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:37:07][350518490752174][2368 ms][DEBUG] check_frida: running
[2025-08-21 15:37:07][350518490752174][2368 ms][DEBUG] END   check_frida in 351 ms
[2025-08-21 15:37:07][350518490752174][2368 ms][DEBUG] START check_scloud
[2025-08-21 15:37:07][350518490752174][2368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:37:08][350518490752174][2730 ms][DEBUG] SU: done in 362 ms; outu0_a118       7086 20714 23974896 97676 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:37:08][350518490752174][2730 ms][DEBUG] targetPkg: running
[2025-08-21 15:37:08][350518490752174][2730 ms][DEBUG] END   check_scloud in 362 ms
[2025-08-21 15:37:08][350518490752174][2730 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:37:08][350518490752174][2730 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTE4NDkwNzUyMTc0IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMjRQVkVNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE3NyJ9'" -e "main()" -q"
[2025-08-21 15:37:08][350518490752174][2730 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:37:08][350518490752174][2730 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTE4NDkwNzUyMTc0IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMjRQVkVNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE3NyJ9'" -e "main()" -q"
[2025-08-21 15:37:10][350518490752174][4695 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTE4NDkwNzUyMTc0IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMjRQVkVNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE3NyJ9"\r\n
[2025-08-21 15:37:11][350518490752174][6487 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f6d6cac-9a4f-40a3-98a3-c90ab639063c","id":"QR_0f6d6cac-9a4f-40a3-98a3-c90ab639063c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:37:11][350518490752174][6487 ms][DEBUG] proc_open done in 3757 ms; code=0; res.len=3152
[2025-08-21 15:37:11][350518490752174][6487 ms][DEBUG] END   runCmdUntilRes#1 in 3757 ms
[2025-08-21 15:37:11][350518490752174][6487 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:38:11][350961875251737][1 ms][INFO] === Request start ===
[2025-08-21 15:38:11][350961875251737][2 ms][DEBUG] START check_frida
[2025-08-21 15:38:11][350961875251737][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:38:12][350961875251737][345 ms][DEBUG] SU: done in 344 ms; outroot          4632     1 2332716   4056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:38:12][350961875251737][346 ms][DEBUG] check_frida: running
[2025-08-21 15:38:12][350961875251737][346 ms][DEBUG] END   check_frida in 344 ms
[2025-08-21 15:38:12][350961875251737][346 ms][DEBUG] START check_internet
[2025-08-21 15:38:12][350961875251737][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:38:12][350961875251737][738 ms][DEBUG] SU: done in 392 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.706/265.706/265.706/0.000 ms\n
[2025-08-21 15:38:12][350961875251737][738 ms][DEBUG] check_internet: online
[2025-08-21 15:38:12][350961875251737][738 ms][DEBUG] END   check_internet in 392 ms
[2025-08-21 15:38:12][350961875251737][738 ms][DEBUG] START check_scloud
[2025-08-21 15:38:12][350961875251737][738 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:38:13][350961875251737][1330 ms][DEBUG] SU: done in 592 ms; outu0_a118       7086 20714 23958348 98072 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:38:13][350961875251737][1330 ms][DEBUG] targetPkg: running
[2025-08-21 15:38:13][350961875251737][1330 ms][DEBUG] END   check_scloud in 592 ms
[2025-08-21 15:38:13][350961875251737][1330 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:38:13][350961875251737][1330 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTYxODc1MjUxNzM3IiwibW9kZWwiOiJTTS1NMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMEtXNDFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI0OSJ9'" -e "main()" -q"
[2025-08-21 15:38:13][350961875251737][1330 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:38:13][350961875251737][1330 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTYxODc1MjUxNzM3IiwibW9kZWwiOiJTTS1NMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMEtXNDFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI0OSJ9'" -e "main()" -q"
[2025-08-21 15:38:15][350961875251737][3370 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTYxODc1MjUxNzM3IiwibW9kZWwiOiJTTS1NMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMEtXNDFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODI0OSJ9"\r\n
[2025-08-21 15:38:17][350961875251737][5817 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7e49529-1369-4656-a1d4-ffead1b0ca73","id":"QR_e7e49529-1369-4656-a1d4-ffead1b0ca73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:38:17][350961875251737][5817 ms][DEBUG] proc_open done in 4487 ms; code=0; res.len=3152
[2025-08-21 15:38:17][350961875251737][5817 ms][DEBUG] END   runCmdUntilRes#1 in 4487 ms
[2025-08-21 15:38:17][350961875251737][5817 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:38:25][355296342651804][0 ms][INFO] === Request start ===
[2025-08-21 15:38:25][355296342651804][1 ms][DEBUG] START check_frida
[2025-08-21 15:38:25][355296342651804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:38:25][355296342651804][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2349136   4068 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:38:25][355296342651804][290 ms][DEBUG] check_frida: running
[2025-08-21 15:38:25][355296342651804][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 15:38:25][355296342651804][290 ms][DEBUG] START check_internet
[2025-08-21 15:38:25][355296342651804][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:38:26][355296342651804][639 ms][DEBUG] SU: done in 349 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.934/239.934/239.934/0.000 ms\n
[2025-08-21 15:38:26][355296342651804][639 ms][DEBUG] check_internet: online
[2025-08-21 15:38:26][355296342651804][639 ms][DEBUG] END   check_internet in 349 ms
[2025-08-21 15:38:26][355296342651804][639 ms][DEBUG] START check_scloud
[2025-08-21 15:38:26][355296342651804][639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:38:26][355296342651804][988 ms][DEBUG] SU: done in 349 ms; outu0_a118       7086 20714 23974896 97388 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:38:26][355296342651804][988 ms][DEBUG] targetPkg: running
[2025-08-21 15:38:26][355296342651804][988 ms][DEBUG] END   check_scloud in 349 ms
[2025-08-21 15:38:26][355296342651804][988 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:38:26][355296342651804][988 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1Mjk2MzQyNjUxODA0IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFkzMDBONDlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzIzIn0='" -e "main()" -q"
[2025-08-21 15:38:26][355296342651804][988 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:38:26][355296342651804][988 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1Mjk2MzQyNjUxODA0IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFkzMDBONDlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzIzIn0='" -e "main()" -q"
[2025-08-21 15:38:28][355296342651804][2999 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1Mjk2MzQyNjUxODA0IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFkzMDBONDlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzIzIn0="\r\n
[2025-08-21 15:38:32][355296342651804][7492 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ffe8f5e2-9f49-4a01-a0f7-d566407de469","id":"QR_ffe8f5e2-9f49-4a01-a0f7-d566407de469","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:38:32][355296342651804][7492 ms][DEBUG] proc_open done in 6504 ms; code=0; res.len=3152
[2025-08-21 15:38:32][355296342651804][7492 ms][DEBUG] END   runCmdUntilRes#1 in 6504 ms
[2025-08-21 15:38:32][355296342651804][7493 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:38:44][358997693657756][0 ms][INFO] === Request start ===
[2025-08-21 15:38:44][358997693657756][1 ms][DEBUG] START check_frida
[2025-08-21 15:38:44][358997693657756][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:38:44][358997693657756][284 ms][DEBUG] SU: done in 283 ms; outroot          4632     1 2332716   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:38:44][358997693657756][284 ms][DEBUG] check_frida: running
[2025-08-21 15:38:44][358997693657756][284 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 15:38:44][358997693657756][285 ms][DEBUG] START check_internet
[2025-08-21 15:38:44][358997693657756][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:38:44][358997693657756][619 ms][DEBUG] SU: done in 334 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.657/227.657/227.657/0.000 ms\n
[2025-08-21 15:38:44][358997693657756][619 ms][DEBUG] check_internet: online
[2025-08-21 15:38:44][358997693657756][619 ms][DEBUG] END   check_internet in 335 ms
[2025-08-21 15:38:44][358997693657756][619 ms][DEBUG] START check_scloud
[2025-08-21 15:38:44][358997693657756][619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:38:45][358997693657756][1178 ms][DEBUG] SU: done in 559 ms; outu0_a118       7086 20714 23958476 97940 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:38:45][358997693657756][1178 ms][DEBUG] targetPkg: running
[2025-08-21 15:38:45][358997693657756][1178 ms][DEBUG] END   check_scloud in 559 ms
[2025-08-21 15:38:45][358997693657756][1178 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:38:45][358997693657756][1179 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4OTk3NjkzNjU3NzU2IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlZVDMwRlpOTU4iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVSCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzYwIn0='" -e "main()" -q"
[2025-08-21 15:38:45][358997693657756][1179 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:38:45][358997693657756][1179 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4OTk3NjkzNjU3NzU2IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlZVDMwRlpOTU4iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVSCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzYwIn0='" -e "main()" -q"
[2025-08-21 15:38:47][358997693657756][3164 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4OTk3NjkzNjU3NzU2IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlZVDMwRlpOTU4iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVSCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzYwIn0="\r\n
[2025-08-21 15:38:49][358997693657756][5235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60c285ee-1418-4f93-9cf9-570fb279c530","id":"QR_60c285ee-1418-4f93-9cf9-570fb279c530","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:38:49][358997693657756][5235 ms][DEBUG] proc_open done in 4056 ms; code=0; res.len=3152
[2025-08-21 15:38:49][358997693657756][5235 ms][DEBUG] END   runCmdUntilRes#1 in 4057 ms
[2025-08-21 15:38:49][358997693657756][5235 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:39:06][350719585349237][0 ms][INFO] === Request start ===
[2025-08-21 15:39:06][350719585349237][1 ms][DEBUG] START check_frida
[2025-08-21 15:39:06][350719585349237][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:39:06][350719585349237][452 ms][DEBUG] SU: done in 450 ms; outroot          4632     1 2332716   4056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:39:06][350719585349237][452 ms][DEBUG] check_frida: running
[2025-08-21 15:39:06][350719585349237][452 ms][DEBUG] END   check_frida in 451 ms
[2025-08-21 15:39:06][350719585349237][452 ms][DEBUG] START check_scloud
[2025-08-21 15:39:06][350719585349237][452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:39:07][350719585349237][815 ms][DEBUG] SU: done in 363 ms; outu0_a118       7086 20714 23958476 97536 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:39:07][350719585349237][815 ms][DEBUG] targetPkg: running
[2025-08-21 15:39:07][350719585349237][815 ms][DEBUG] END   check_scloud in 363 ms
[2025-08-21 15:39:07][350719585349237][815 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:39:07][350719585349237][815 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzE5NTg1MzQ5MjM3IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4M1k0MEgxVkpGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzkxMSJ9'" -e "main()" -q"
[2025-08-21 15:39:07][350719585349237][815 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:39:07][350719585349237][815 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzE5NTg1MzQ5MjM3IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4M1k0MEgxVkpGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzkxMSJ9'" -e "main()" -q"
[2025-08-21 15:39:09][350719585349237][2794 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzE5NTg1MzQ5MjM3IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4M1k0MEgxVkpGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzkxMSJ9"\r\n
[2025-08-21 15:39:11][350719585349237][4862 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48632b60-df0c-48e1-8e3f-8f56d04cc777","id":"QR_48632b60-df0c-48e1-8e3f-8f56d04cc777","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:39:11][350719585349237][4863 ms][DEBUG] proc_open done in 4047 ms; code=0; res.len=3152
[2025-08-21 15:39:11][350719585349237][4863 ms][DEBUG] END   runCmdUntilRes#1 in 4047 ms
[2025-08-21 15:39:11][350719585349237][4863 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:39:16][356761460396259][1 ms][INFO] === Request start ===
[2025-08-21 15:39:16][356761460396259][1 ms][DEBUG] START check_frida
[2025-08-21 15:39:16][356761460396259][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:39:16][356761460396259][350 ms][DEBUG] SU: done in 348 ms; outroot          4632     1 2349136   4056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:39:16][356761460396259][350 ms][DEBUG] check_frida: running
[2025-08-21 15:39:16][356761460396259][350 ms][DEBUG] END   check_frida in 349 ms
[2025-08-21 15:39:16][356761460396259][350 ms][DEBUG] START check_scloud
[2025-08-21 15:39:16][356761460396259][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:39:17][356761460396259][743 ms][DEBUG] SU: done in 392 ms; outu0_a118       7086 20714 23974896 98056 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:39:17][356761460396259][743 ms][DEBUG] targetPkg: running
[2025-08-21 15:39:17][356761460396259][743 ms][DEBUG] END   check_scloud in 392 ms
[2025-08-21 15:39:17][356761460396259][743 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:39:17][356761460396259][743 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzYxNDYwMzk2MjU5IiwibW9kZWwiOiJTTS1TOTE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cxMFRISEZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM3MCJ9'" -e "main()" -q"
[2025-08-21 15:39:17][356761460396259][743 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:39:17][356761460396259][743 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzYxNDYwMzk2MjU5IiwibW9kZWwiOiJTTS1TOTE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cxMFRISEZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM3MCJ9'" -e "main()" -q"
[2025-08-21 15:39:19][356761460396259][2704 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NzYxNDYwMzk2MjU5IiwibW9kZWwiOiJTTS1TOTE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cxMFRISEZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM3MCJ9"\r\n
[2025-08-21 15:39:21][356761460396259][5243 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e7dba36-70c6-463e-a9e9-cdce7e2b7b1d","id":"QR_4e7dba36-70c6-463e-a9e9-cdce7e2b7b1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:39:21][356761460396259][5244 ms][DEBUG] proc_open done in 4501 ms; code=0; res.len=3152
[2025-08-21 15:39:21][356761460396259][5244 ms][DEBUG] END   runCmdUntilRes#1 in 4501 ms
[2025-08-21 15:39:21][356761460396259][5244 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:39:26][352698473617145][0 ms][INFO] === Request start ===
[2025-08-21 15:39:26][352698473617145][1 ms][DEBUG] START check_frida
[2025-08-21 15:39:26][352698473617145][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:39:27][352698473617145][365 ms][DEBUG] SU: done in 364 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:39:27][352698473617145][365 ms][DEBUG] check_frida: running
[2025-08-21 15:39:27][352698473617145][365 ms][DEBUG] END   check_frida in 364 ms
[2025-08-21 15:39:27][352698473617145][365 ms][DEBUG] START check_scloud
[2025-08-21 15:39:27][352698473617145][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:39:27][352698473617145][728 ms][DEBUG] SU: done in 363 ms; outu0_a118       7086 20714 23974896 97208 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:39:27][352698473617145][728 ms][DEBUG] targetPkg: running
[2025-08-21 15:39:27][352698473617145][728 ms][DEBUG] END   check_scloud in 363 ms
[2025-08-21 15:39:27][352698473617145][728 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:39:27][352698473617145][728 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjk4NDczNjE3MTQ1IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c2ME5IVE1WIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQzNyJ9'" -e "main()" -q"
[2025-08-21 15:39:27][352698473617145][728 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:39:27][352698473617145][728 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjk4NDczNjE3MTQ1IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c2ME5IVE1WIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQzNyJ9'" -e "main()" -q"
[2025-08-21 15:39:29][352698473617145][2717 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjk4NDczNjE3MTQ1IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c2ME5IVE1WIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjQzNyJ9"\r\n
[2025-08-21 15:39:31][352698473617145][4769 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07a87590-331b-4973-a0dd-155f0ad8a2f0","id":"QR_07a87590-331b-4973-a0dd-155f0ad8a2f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:39:31][352698473617145][4769 ms][DEBUG] proc_open done in 4041 ms; code=0; res.len=3152
[2025-08-21 15:39:31][352698473617145][4769 ms][DEBUG] END   runCmdUntilRes#1 in 4041 ms
[2025-08-21 15:39:31][352698473617145][4769 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:39:38][354139180302083][0 ms][INFO] === Request start ===
[2025-08-21 15:39:38][354139180302083][1 ms][DEBUG] START check_frida
[2025-08-21 15:39:38][354139180302083][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:39:38][354139180302083][303 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:39:38][354139180302083][303 ms][DEBUG] check_frida: running
[2025-08-21 15:39:38][354139180302083][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 15:39:38][354139180302083][303 ms][DEBUG] START check_scloud
[2025-08-21 15:39:38][354139180302083][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:39:39][354139180302083][606 ms][DEBUG] SU: done in 303 ms; outu0_a118       7086 20714 23974768 97648 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:39:39][354139180302083][606 ms][DEBUG] targetPkg: running
[2025-08-21 15:39:39][354139180302083][606 ms][DEBUG] END   check_scloud in 303 ms
[2025-08-21 15:39:39][354139180302083][606 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:39:39][354139180302083][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTM5MTgwMzAyMDgzIiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE44MUUzQkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDk2In0='" -e "main()" -q"
[2025-08-21 15:39:39][354139180302083][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:39:39][354139180302083][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTM5MTgwMzAyMDgzIiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE44MUUzQkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDk2In0='" -e "main()" -q"
[2025-08-21 15:39:41][354139180302083][2608 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTM5MTgwMzAyMDgzIiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE44MUUzQkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDk2In0="\r\n
[2025-08-21 15:39:46][354139180302083][7763 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d8ef4ff-217e-42f7-99f4-88d73276eddc","id":"QR_4d8ef4ff-217e-42f7-99f4-88d73276eddc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:39:46][354139180302083][7763 ms][DEBUG] proc_open done in 7157 ms; code=0; res.len=3152
[2025-08-21 15:39:46][354139180302083][7763 ms][DEBUG] END   runCmdUntilRes#1 in 7157 ms
[2025-08-21 15:39:46][354139180302083][7763 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:40:07][357576779372059][0 ms][INFO] === Request start ===
[2025-08-21 15:40:07][357576779372059][1 ms][DEBUG] START check_frida
[2025-08-21 15:40:07][357576779372059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:40:08][357576779372059][371 ms][DEBUG] SU: done in 369 ms; outroot          4632     1 2332716   4056 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:40:08][357576779372059][371 ms][DEBUG] check_frida: running
[2025-08-21 15:40:08][357576779372059][371 ms][DEBUG] END   check_frida in 370 ms
[2025-08-21 15:40:08][357576779372059][371 ms][DEBUG] START check_internet
[2025-08-21 15:40:08][357576779372059][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:40:08][357576779372059][703 ms][DEBUG] SU: done in 332 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.133/201.133/201.133/0.000 ms\n
[2025-08-21 15:40:08][357576779372059][703 ms][DEBUG] check_internet: online
[2025-08-21 15:40:08][357576779372059][703 ms][DEBUG] END   check_internet in 332 ms
[2025-08-21 15:40:08][357576779372059][703 ms][DEBUG] START check_scloud
[2025-08-21 15:40:08][357576779372059][703 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:40:09][357576779372059][1083 ms][DEBUG] SU: done in 380 ms; outu0_a118       7086 20714 23958476 97644 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:40:09][357576779372059][1083 ms][DEBUG] targetPkg: running
[2025-08-21 15:40:09][357576779372059][1083 ms][DEBUG] END   check_scloud in 380 ms
[2025-08-21 15:40:09][357576779372059][1083 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:40:09][357576779372059][1083 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2Nzc5MzcyMDU5IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMjlYODNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzU5In0='" -e "main()" -q"
[2025-08-21 15:40:09][357576779372059][1083 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:40:09][357576779372059][1083 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2Nzc5MzcyMDU5IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMjlYODNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzU5In0='" -e "main()" -q"
[2025-08-21 15:40:11][357576779372059][3094 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTc2Nzc5MzcyMDU5IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMjlYODNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzU5In0="\r\n
[2025-08-21 15:40:15][357576779372059][7640 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6254efb1-ec1c-46ab-8929-d26362b04311","id":"QR_6254efb1-ec1c-46ab-8929-d26362b04311","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:40:15][357576779372059][7640 ms][DEBUG] proc_open done in 6557 ms; code=0; res.len=3152
[2025-08-21 15:40:15][357576779372059][7640 ms][DEBUG] END   runCmdUntilRes#1 in 6557 ms
[2025-08-21 15:40:15][357576779372059][7640 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:40:24][354595806239530][0 ms][INFO] === Request start ===
[2025-08-21 15:40:24][354595806239530][1 ms][DEBUG] START check_frida
[2025-08-21 15:40:24][354595806239530][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:40:24][354595806239530][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2349136   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:40:24][354595806239530][290 ms][DEBUG] check_frida: running
[2025-08-21 15:40:24][354595806239530][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 15:40:24][354595806239530][290 ms][DEBUG] START check_internet
[2025-08-21 15:40:24][354595806239530][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:40:24][354595806239530][624 ms][DEBUG] SU: done in 334 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.078/219.078/219.078/0.000 ms\n
[2025-08-21 15:40:24][354595806239530][624 ms][DEBUG] check_internet: online
[2025-08-21 15:40:24][354595806239530][624 ms][DEBUG] END   check_internet in 334 ms
[2025-08-21 15:40:24][354595806239530][624 ms][DEBUG] START check_scloud
[2025-08-21 15:40:24][354595806239530][624 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:40:25][354595806239530][986 ms][DEBUG] SU: done in 362 ms; outu0_a118       7086 20714 23975024 97060 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:40:25][354595806239530][986 ms][DEBUG] targetPkg: running
[2025-08-21 15:40:25][354595806239530][986 ms][DEBUG] END   check_scloud in 362 ms
[2025-08-21 15:40:25][354595806239530][986 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:40:25][354595806239530][986 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTk1ODA2MjM5NTMwIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMTBBN1FMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgyNyJ9'" -e "main()" -q"
[2025-08-21 15:40:25][354595806239530][986 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:40:25][354595806239530][986 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTk1ODA2MjM5NTMwIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMTBBN1FMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgyNyJ9'" -e "main()" -q"
[2025-08-21 15:40:27][354595806239530][2965 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTk1ODA2MjM5NTMwIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMTBBN1FMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgyNyJ9"\r\n
[2025-08-21 15:40:29][354595806239530][5336 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe2fb90b-cf22-41e0-b5ab-6214a6ff54fb","id":"QR_fe2fb90b-cf22-41e0-b5ab-6214a6ff54fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:40:29][354595806239530][5336 ms][DEBUG] proc_open done in 4350 ms; code=0; res.len=3152
[2025-08-21 15:40:29][354595806239530][5336 ms][DEBUG] END   runCmdUntilRes#1 in 4350 ms
[2025-08-21 15:40:29][354595806239530][5336 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:40:38][350545461940470][0 ms][INFO] === Request start ===
[2025-08-21 15:40:38][350545461940470][1 ms][DEBUG] START check_frida
[2025-08-21 15:40:38][350545461940470][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:40:38][350545461940470][331 ms][DEBUG] SU: done in 330 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:40:38][350545461940470][331 ms][DEBUG] check_frida: running
[2025-08-21 15:40:38][350545461940470][331 ms][DEBUG] END   check_frida in 330 ms
[2025-08-21 15:40:38][350545461940470][331 ms][DEBUG] START check_internet
[2025-08-21 15:40:38][350545461940470][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:40:39][350545461940470][649 ms][DEBUG] SU: done in 318 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.516/201.516/201.516/0.000 ms\n
[2025-08-21 15:40:39][350545461940470][650 ms][DEBUG] check_internet: online
[2025-08-21 15:40:39][350545461940470][650 ms][DEBUG] END   check_internet in 318 ms
[2025-08-21 15:40:39][350545461940470][650 ms][DEBUG] START check_scloud
[2025-08-21 15:40:39][350545461940470][650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:40:39][350545461940470][982 ms][DEBUG] SU: done in 333 ms; outu0_a118       7086 20714 23974896 97532 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:40:39][350545461940470][982 ms][DEBUG] targetPkg: running
[2025-08-21 15:40:39][350545461940470][982 ms][DEBUG] END   check_scloud in 333 ms
[2025-08-21 15:40:39][350545461940470][982 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:40:39][350545461940470][982 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYxOTQwNDcwIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlQVDIwNTZXQUUiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVSCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTc2In0='" -e "main()" -q"
[2025-08-21 15:40:39][350545461940470][982 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:40:39][350545461940470][982 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYxOTQwNDcwIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlQVDIwNTZXQUUiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVSCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTc2In0='" -e "main()" -q"
[2025-08-21 15:40:41][350545461940470][2940 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTQ1NDYxOTQwNDcwIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlQVDIwNTZXQUUiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVSCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTc2In0="\r\n
[2025-08-21 15:40:43][350545461940470][4928 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4daf0479-5cc1-4a18-91e8-f387ddd7e2e6","id":"QR_4daf0479-5cc1-4a18-91e8-f387ddd7e2e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:40:43][350545461940470][4928 ms][DEBUG] proc_open done in 3946 ms; code=0; res.len=3152
[2025-08-21 15:40:43][350545461940470][4928 ms][DEBUG] END   runCmdUntilRes#1 in 3946 ms
[2025-08-21 15:40:43][350545461940470][4928 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:41:53][357299881070962][1 ms][INFO] === Request start ===
[2025-08-21 15:41:53][357299881070962][2 ms][DEBUG] START check_frida
[2025-08-21 15:41:53][357299881070962][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:41:53][357299881070962][331 ms][DEBUG] SU: done in 330 ms; outroot          4632     1 2332716   4048 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:41:53][357299881070962][331 ms][DEBUG] check_frida: running
[2025-08-21 15:41:53][357299881070962][331 ms][DEBUG] END   check_frida in 330 ms
[2025-08-21 15:41:53][357299881070962][331 ms][DEBUG] START check_scloud
[2025-08-21 15:41:53][357299881070962][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:41:54][357299881070962][723 ms][DEBUG] SU: done in 392 ms; outu0_a118       7086 20714 23958476 98236 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:41:54][357299881070962][723 ms][DEBUG] targetPkg: running
[2025-08-21 15:41:54][357299881070962][723 ms][DEBUG] END   check_scloud in 392 ms
[2025-08-21 15:41:54][357299881070962][723 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:41:54][357299881070962][723 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Mjk5ODgxMDcwOTYyIiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RCMEpHVzVQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjM3In0='" -e "main()" -q"
[2025-08-21 15:41:54][357299881070962][723 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:41:54][357299881070962][723 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Mjk5ODgxMDcwOTYyIiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RCMEpHVzVQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjM3In0='" -e "main()" -q"
[2025-08-21 15:41:56][357299881070962][2698 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Mjk5ODgxMDcwOTYyIiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RCMEpHVzVQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjM3In0="\r\n
[2025-08-21 15:41:59][357299881070962][6180 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_390c93cf-e64e-49d8-aa2d-02eb2caa63a5","id":"QR_390c93cf-e64e-49d8-aa2d-02eb2caa63a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:41:59][357299881070962][6180 ms][DEBUG] proc_open done in 5456 ms; code=0; res.len=3152
[2025-08-21 15:41:59][357299881070962][6180 ms][DEBUG] END   runCmdUntilRes#1 in 5456 ms
[2025-08-21 15:41:59][357299881070962][6180 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:42:23][350896383586077][1 ms][INFO] === Request start ===
[2025-08-21 15:42:23][350896383586077][2 ms][DEBUG] START check_frida
[2025-08-21 15:42:23][350896383586077][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:42:23][350896383586077][330 ms][DEBUG] SU: done in 328 ms; outroot          4632     1 2332716   4032 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:42:23][350896383586077][330 ms][DEBUG] check_frida: running
[2025-08-21 15:42:23][350896383586077][330 ms][DEBUG] END   check_frida in 328 ms
[2025-08-21 15:42:23][350896383586077][330 ms][DEBUG] START check_internet
[2025-08-21 15:42:23][350896383586077][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:42:23][350896383586077][799 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.797/200.797/200.797/0.000 ms\n
[2025-08-21 15:42:23][350896383586077][799 ms][DEBUG] check_internet: online
[2025-08-21 15:42:23][350896383586077][799 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 15:42:23][350896383586077][799 ms][DEBUG] START check_scloud
[2025-08-21 15:42:23][350896383586077][799 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:42:24][350896383586077][1179 ms][DEBUG] SU: done in 380 ms; outu0_a118       7086 20714 23958476 97784 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:42:24][350896383586077][1179 ms][DEBUG] targetPkg: running
[2025-08-21 15:42:24][350896383586077][1179 ms][DEBUG] END   check_scloud in 380 ms
[2025-08-21 15:42:24][350896383586077][1179 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:42:24][350896383586077][1179 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzNTg2MDc3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODk4In0='" -e "main()" -q"
[2025-08-21 15:42:24][350896383586077][1179 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:42:24][350896383586077][1179 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzNTg2MDc3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODk4In0='" -e "main()" -q"
[2025-08-21 15:42:26][350896383586077][3158 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2MzgzNTg2MDc3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODk4In0="\r\n
[2025-08-21 15:42:28][350896383586077][5183 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 15:42:28][350896383586077][5183 ms][DEBUG] proc_open done in 4004 ms; code=0; res.len=115
[2025-08-21 15:42:28][350896383586077][5183 ms][DEBUG] END   runCmdUntilRes#1 in 4004 ms
[2025-08-21 15:42:28][350896383586077][5183 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 15:42:28][][0 ms][INFO] === Request start ===
[2025-08-21 15:42:28][][1 ms][DEBUG] START check_frida
[2025-08-21 15:42:28][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:42:28][][340 ms][DEBUG] SU: done in 339 ms; outroot          4632     1 2349136   4044 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:42:28][][340 ms][DEBUG] check_frida: running
[2025-08-21 15:42:28][][340 ms][DEBUG] END   check_frida in 339 ms
[2025-08-21 15:42:28][][340 ms][DEBUG] START check_internet
[2025-08-21 15:42:28][][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:42:29][][611 ms][DEBUG] SU: done in 271 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.907/143.907/143.907/0.000 ms\n
[2025-08-21 15:42:29][][611 ms][DEBUG] check_internet: online
[2025-08-21 15:42:29][][611 ms][DEBUG] END   check_internet in 271 ms
[2025-08-21 15:42:29][][611 ms][DEBUG] START check_scloud
[2025-08-21 15:42:29][][611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:42:29][][1079 ms][DEBUG] SU: done in 468 ms; outu0_a118       7086 20714 23974768 96864 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:42:29][][1079 ms][DEBUG] targetPkg: running
[2025-08-21 15:42:29][][1079 ms][DEBUG] END   check_scloud in 468 ms
[2025-08-21 15:42:29][][1079 ms][DEBUG] rawBody.length=1130
[2025-08-21 15:42:29][][1079 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDIzIn0='" -e "main()" -q"
[2025-08-21 15:42:29][][1079 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:42:29][][1079 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDIzIn0='" -e "main()" -q"
[2025-08-21 15:42:31][][3074 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDIzIn0="\r\n
[2025-08-21 15:42:33][][5096 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:42:33][][5097 ms][DEBUG] proc_open done in 4018 ms; code=0; res.len=107
[2025-08-21 15:42:33][][5097 ms][DEBUG] END   runCmdUntilRes#1 in 4018 ms
[2025-08-21 15:42:33][][5097 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:42:33][][0 ms][INFO] === Request start ===
[2025-08-21 15:42:33][][1 ms][DEBUG] START check_frida
[2025-08-21 15:42:33][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:42:34][][479 ms][DEBUG] SU: done in 478 ms; outroot          4632     1 2349136   4052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:42:34][][479 ms][DEBUG] check_frida: running
[2025-08-21 15:42:34][][479 ms][DEBUG] END   check_frida in 478 ms
[2025-08-21 15:42:34][][479 ms][DEBUG] START check_internet
[2025-08-21 15:42:34][][480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:42:34][][754 ms][DEBUG] SU: done in 275 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.794/149.794/149.794/0.000 ms\n
[2025-08-21 15:42:34][][755 ms][DEBUG] check_internet: online
[2025-08-21 15:42:34][][755 ms][DEBUG] END   check_internet in 275 ms
[2025-08-21 15:42:34][][755 ms][DEBUG] START check_scloud
[2025-08-21 15:42:34][][755 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:42:35][][1102 ms][DEBUG] SU: done in 347 ms; outu0_a118       7086 20714 23974768 97392 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:42:35][][1102 ms][DEBUG] targetPkg: running
[2025-08-21 15:42:35][][1102 ms][DEBUG] END   check_scloud in 347 ms
[2025-08-21 15:42:35][][1102 ms][DEBUG] rawBody.length=1130
[2025-08-21 15:42:35][][1102 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MTkzIn0='" -e "main()" -q"
[2025-08-21 15:42:35][][1102 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:42:35][][1102 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MTkzIn0='" -e "main()" -q"
[2025-08-21 15:42:37][][3079 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MTkzIn0="\r\n
[2025-08-21 15:42:39][][5588 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 15:42:39][][5588 ms][DEBUG] proc_open done in 4486 ms; code=0; res.len=107
[2025-08-21 15:42:39][][5588 ms][DEBUG] END   runCmdUntilRes#1 in 4486 ms
[2025-08-21 15:42:39][][5588 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 15:42:40][350896383586077][0 ms][INFO] === Request start ===
[2025-08-21 15:42:40][350896383586077][1 ms][DEBUG] START check_frida
[2025-08-21 15:42:40][350896383586077][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:42:40][350896383586077][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136   4036 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:42:40][350896383586077][297 ms][DEBUG] check_frida: running
[2025-08-21 15:42:40][350896383586077][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 15:42:40][350896383586077][297 ms][DEBUG] START check_internet
[2025-08-21 15:42:40][350896383586077][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:42:41][350896383586077][629 ms][DEBUG] SU: done in 331 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.703/215.703/215.703/0.000 ms\n
[2025-08-21 15:42:41][350896383586077][629 ms][DEBUG] check_internet: online
[2025-08-21 15:42:41][350896383586077][629 ms][DEBUG] END   check_internet in 332 ms
[2025-08-21 15:42:41][350896383586077][629 ms][DEBUG] START check_scloud
[2025-08-21 15:42:41][350896383586077][629 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:42:41][350896383586077][1036 ms][DEBUG] SU: done in 407 ms; outu0_a118       7086 20714 23974768 97924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:42:41][350896383586077][1036 ms][DEBUG] targetPkg: running
[2025-08-21 15:42:41][350896383586077][1036 ms][DEBUG] END   check_scloud in 407 ms
[2025-08-21 15:42:41][350896383586077][1036 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:42:41][350896383586077][1036 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzNTg2MDc3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3MCJ9'" -e "main()" -q"
[2025-08-21 15:42:41][350896383586077][1036 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:42:41][350896383586077][1036 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzNTg2MDc3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3MCJ9'" -e "main()" -q"
[2025-08-21 15:42:43][350896383586077][3013 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2MzgzNTg2MDc3IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEM2NjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3MCJ9"\r\n
[2025-08-21 15:42:45][350896383586077][5144 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08b57028-1980-4299-8655-9cbb8c44293c","id":"QR_08b57028-1980-4299-8655-9cbb8c44293c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:42:45][350896383586077][5144 ms][DEBUG] proc_open done in 4108 ms; code=0; res.len=3152
[2025-08-21 15:42:45][350896383586077][5144 ms][DEBUG] END   runCmdUntilRes#1 in 4108 ms
[2025-08-21 15:42:45][350896383586077][5144 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:46:44][352288965012177][1 ms][INFO] === Request start ===
[2025-08-21 15:46:44][352288965012177][2 ms][DEBUG] START check_frida
[2025-08-21 15:46:44][352288965012177][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:46:48][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:46:48][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:46:49][352288965012177][5127 ms][DEBUG] SU: done in 5125 ms; out* daemon not running. starting it now at tcp:5037 *\n* daemon started successfully *\n
[2025-08-21 15:46:49][352288965012177][5127 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:46:49][352288965012177][5127 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:46:49][352288965012177][5158 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:46:49][352288965012177][5158 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:46:49][352288965012177][5190 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:46:51][352288965012177][7205 ms][DEBUG] END   check_frida in 7204 ms
[2025-08-21 15:46:51][352288965012177][7206 ms][DEBUG] START check_internet
[2025-08-21 15:46:51][352288965012177][7206 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:46:51][352288965012177][7252 ms][DEBUG] SU: done in 46 ms; out
[2025-08-21 15:46:51][352288965012177][7252 ms][WARN] check_internet: offline
[2025-08-21 15:46:51][352288965012177][7252 ms][DEBUG] END   check_internet in 47 ms
[2025-08-21 15:46:53][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:46:53][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:47:07][352575634100387][1 ms][INFO] === Request start ===
[2025-08-21 15:47:07][352575634100387][1 ms][DEBUG] START check_frida
[2025-08-21 15:47:07][352575634100387][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:47:07][352575634100387][27 ms][DEBUG] SU: done in 26 ms; out
[2025-08-21 15:47:07][352575634100387][27 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:47:07][352575634100387][27 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:47:07][352575634100387][59 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:07][352575634100387][59 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:47:07][352575634100387][90 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:10][352575634100387][2102 ms][DEBUG] END   check_frida in 2101 ms
[2025-08-21 15:47:10][352575634100387][2102 ms][DEBUG] START check_scloud
[2025-08-21 15:47:10][352575634100387][2102 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:47:10][352575634100387][2148 ms][DEBUG] SU: done in 46 ms; out
[2025-08-21 15:47:10][352575634100387][2148 ms][WARN] targetPkg: not running, restarting
[2025-08-21 15:47:10][352575634100387][2148 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 15:47:10][352575634100387][2192 ms][DEBUG] SU: done in 44 ms; out
[2025-08-21 15:47:10][352575634100387][2192 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 15:47:10][352575634100387][2222 ms][DEBUG] SU: done in 30 ms; out
[2025-08-21 15:47:11][350957913748163][1 ms][INFO] === Request start ===
[2025-08-21 15:47:12][352575634100387][4228 ms][DEBUG] END   check_scloud in 2126 ms
[2025-08-21 15:47:12][352575634100387][4228 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:47:12][352575634100387][4228 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTc1NjM0MTAwMzg3IiwibW9kZWwiOiJTTS1ONzcwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE5DMUE1RkpWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLU0EiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgyMCJ9'" -e "main()" -q"
[2025-08-21 15:47:12][352575634100387][4229 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:47:12][352575634100387][4229 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTc1NjM0MTAwMzg3IiwibW9kZWwiOiJTTS1ONzcwRiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE5DMUE1RkpWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLU0EiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTgyMCJ9'" -e "main()" -q"
[2025-08-21 15:47:14][352575634100387][6184 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 15:47:14][352575634100387][6340 ms][DEBUG] proc_open done in 2111 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 15:47:14][352575634100387][6340 ms][DEBUG] END   runCmdUntilRes#1 in 2112 ms
[2025-08-21 15:47:14][352575634100387][6340 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 15:47:14][350957913748163][3026 ms][DEBUG] START check_frida
[2025-08-21 15:47:14][350957913748163][3026 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:47:14][350957913748163][3073 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 15:47:14][350957913748163][3073 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:47:14][350957913748163][3073 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:47:14][350957913748163][3104 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:14][350957913748163][3104 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:47:14][350957913748163][3136 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:16][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:47:16][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:47:16][350957913748163][5151 ms][DEBUG] END   check_frida in 2125 ms
[2025-08-21 15:47:16][350957913748163][5151 ms][DEBUG] START check_scloud
[2025-08-21 15:47:16][350957913748163][5151 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:47:16][350957913748163][5182 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:16][350957913748163][5182 ms][WARN] targetPkg: not running, restarting
[2025-08-21 15:47:16][350957913748163][5182 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 15:47:16][350957913748163][5214 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:16][350957913748163][5214 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 15:47:16][350957913748163][5245 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:18][350957913748163][7260 ms][DEBUG] END   check_scloud in 2109 ms
[2025-08-21 15:47:18][350957913748163][7260 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:47:18][350957913748163][7261 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTU3OTEzNzQ4MTYzIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c1ME44RzZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODAyIn0='" -e "main()" -q"
[2025-08-21 15:47:18][350957913748163][7261 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:47:18][350957913748163][7261 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTU3OTEzNzQ4MTYzIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c1ME44RzZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODAyIn0='" -e "main()" -q"
[2025-08-21 15:47:20][350957913748163][9026 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 15:47:20][350957913748163][9182 ms][DEBUG] proc_open done in 1921 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 15:47:20][350957913748163][9182 ms][DEBUG] END   runCmdUntilRes#1 in 1921 ms
[2025-08-21 15:47:20][350957913748163][9182 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 15:47:22][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:47:22][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:47:47][352288965012177][1 ms][INFO] === Request start ===
[2025-08-21 15:47:47][352288965012177][1 ms][DEBUG] START check_frida
[2025-08-21 15:47:47][352288965012177][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:47:47][352288965012177][40 ms][DEBUG] SU: done in 38 ms; out
[2025-08-21 15:47:47][352288965012177][40 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:47:47][352288965012177][40 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:47:47][352288965012177][71 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:47][352288965012177][71 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:47:47][352288965012177][102 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:49][352288965012177][2117 ms][DEBUG] END   check_frida in 2116 ms
[2025-08-21 15:47:49][352288965012177][2117 ms][DEBUG] START check_scloud
[2025-08-21 15:47:49][352288965012177][2117 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:47:49][352288965012177][2148 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:49][352288965012177][2148 ms][WARN] targetPkg: not running, restarting
[2025-08-21 15:47:49][352288965012177][2148 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 15:47:49][352288965012177][2180 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:49][352288965012177][2180 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 15:47:49][352288965012177][2211 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:47:51][352288965012177][4226 ms][DEBUG] END   check_scloud in 2109 ms
[2025-08-21 15:47:51][352288965012177][4226 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:47:51][352288965012177][4226 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTY1MDEyMTc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MTFCNUFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1ZTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzU3In0='" -e "main()" -q"
[2025-08-21 15:47:51][352288965012177][4227 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:47:51][352288965012177][4227 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTY1MDEyMTc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MTFCNUFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1ZTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzU3In0='" -e "main()" -q"
[2025-08-21 15:47:53][352288965012177][6007 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 15:47:53][352288965012177][6163 ms][DEBUG] proc_open done in 1936 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 15:47:53][352288965012177][6163 ms][DEBUG] END   runCmdUntilRes#1 in 1937 ms
[2025-08-21 15:47:53][352288965012177][6163 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 15:47:55][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:47:55][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:48:09][354086980537303][0 ms][INFO] === Request start ===
[2025-08-21 15:48:09][354086980537303][0 ms][DEBUG] START check_frida
[2025-08-21 15:48:09][354086980537303][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:48:09][354086980537303][30 ms][DEBUG] SU: done in 30 ms; out
[2025-08-21 15:48:09][354086980537303][30 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:48:09][354086980537303][30 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:48:09][354086980537303][62 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:48:09][354086980537303][62 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:48:09][354086980537303][93 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:48:10][352575634100387][1 ms][INFO] === Request start ===
[2025-08-21 15:48:11][354086980537303][2108 ms][DEBUG] END   check_frida in 2107 ms
[2025-08-21 15:48:11][354086980537303][2108 ms][DEBUG] START check_internet
[2025-08-21 15:48:11][354086980537303][2108 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:48:11][354086980537303][2155 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 15:48:11][354086980537303][2155 ms][WARN] check_internet: offline
[2025-08-21 15:48:11][354086980537303][2155 ms][DEBUG] END   check_internet in 47 ms
[2025-08-21 15:48:11][352575634100387][1016 ms][DEBUG] START check_frida
[2025-08-21 15:48:11][352575634100387][1016 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:48:11][352575634100387][1047 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:48:11][352575634100387][1047 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:48:11][352575634100387][1047 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:48:11][352575634100387][1078 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:48:11][352575634100387][1078 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:48:11][352575634100387][1109 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:48:13][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:48:13][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:48:13][352575634100387][3124 ms][DEBUG] END   check_frida in 2108 ms
[2025-08-21 15:48:13][352575634100387][3125 ms][DEBUG] START check_internet
[2025-08-21 15:48:13][352575634100387][3125 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:48:13][352575634100387][3155 ms][DEBUG] SU: done in 30 ms; out
[2025-08-21 15:48:13][352575634100387][3155 ms][WARN] check_internet: offline
[2025-08-21 15:48:13][352575634100387][3155 ms][DEBUG] END   check_internet in 30 ms
[2025-08-21 15:48:15][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:48:15][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:48:49][351773116673978][1 ms][INFO] === Request start ===
[2025-08-21 15:48:49][351773116673978][2 ms][DEBUG] START check_frida
[2025-08-21 15:48:49][351773116673978][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:48:49][351773116673978][28 ms][DEBUG] SU: done in 27 ms; out
[2025-08-21 15:48:49][351773116673978][28 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:48:49][351773116673978][28 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:48:49][351773116673978][60 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:48:49][351773116673978][60 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:48:49][351773116673978][91 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:48:51][351773116673978][2107 ms][DEBUG] END   check_frida in 2105 ms
[2025-08-21 15:48:51][351773116673978][2107 ms][DEBUG] START check_internet
[2025-08-21 15:48:51][351773116673978][2107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:48:52][351773116673978][2138 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:48:52][351773116673978][2138 ms][WARN] check_internet: offline
[2025-08-21 15:48:52][351773116673978][2138 ms][DEBUG] END   check_internet in 31 ms
[2025-08-21 15:48:53][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:48:53][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:49:03][][10161 ms][DEBUG] ADB: done in 10161 ms; out
t
[2025-08-21 15:49:03][][50627 ms][DEBUG] ADB: done in 50627 ms; out
[2025-08-21 15:49:03][][50627 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 15:49:03][][101229 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 15:49:03][][68165 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 15:49:03][][48255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 15:49:03][][107734 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 15:49:06][354086980537303][1 ms][INFO] === Request start ===
[2025-08-21 15:49:06][354086980537303][1 ms][DEBUG] START check_frida
[2025-08-21 15:49:06][354086980537303][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:49:06][354086980537303][37 ms][DEBUG] SU: done in 35 ms; out
[2025-08-21 15:49:06][354086980537303][37 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:49:06][354086980537303][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:49:06][354086980537303][68 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:06][354086980537303][68 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:49:06][354086980537303][99 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:08][354086980537303][2115 ms][DEBUG] END   check_frida in 2113 ms
[2025-08-21 15:49:08][354086980537303][2115 ms][DEBUG] START check_scloud
[2025-08-21 15:49:08][354086980537303][2115 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:49:08][354086980537303][2161 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 15:49:08][354086980537303][2161 ms][WARN] targetPkg: not running, restarting
[2025-08-21 15:49:08][354086980537303][2162 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 15:49:08][354086980537303][2193 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:08][354086980537303][2193 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 15:49:08][354086980537303][2224 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:09][][106510 ms][DEBUG] SU: done in 5281 ms; out* daemon not running. starting it now at tcp:5037 *\n* daemon started successfully *\n
[2025-08-21 15:49:09][][106510 ms][DEBUG] END   check_boot_completed in 106510 ms
[2025-08-21 15:49:09][350957913748163][106510 ms][INFO] === Request start ===
[2025-08-21 15:49:09][350957913748163][106510 ms][DEBUG] START check_frida
[2025-08-21 15:49:09][350957913748163][106510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:49:09][350957913748163][106541 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:09][350957913748163][106541 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:49:09][350957913748163][106541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:49:09][350957913748163][106573 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:09][350957913748163][106573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:49:09][350957913748163][106604 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:10][354086980537303][4224 ms][DEBUG] END   check_scloud in 2110 ms
[2025-08-21 15:49:10][354086980537303][4224 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:49:10][354086980537303][4224 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDg2OTgwNTM3MzAzIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MERUVlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYQVUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIxMCJ9'" -e "main()" -q"
[2025-08-21 15:49:10][354086980537303][4225 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:49:10][354086980537303][4225 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDg2OTgwNTM3MzAzIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MERUVlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYQVUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIxMCJ9'" -e "main()" -q"
[2025-08-21 15:49:11][350957913748163][108604 ms][DEBUG] END   check_frida in 2094 ms
[2025-08-21 15:49:11][350957913748163][108604 ms][DEBUG] START check_scloud
[2025-08-21 15:49:11][350957913748163][108605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:49:11][350957913748163][108651 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 15:49:11][350957913748163][108651 ms][WARN] targetPkg: not running, restarting
[2025-08-21 15:49:11][350957913748163][108651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 15:49:11][350957913748163][108682 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:11][350957913748163][108682 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 15:49:11][350957913748163][108713 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:12][354086980537303][6005 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 15:49:12][354086980537303][6161 ms][DEBUG] proc_open done in 1936 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 15:49:12][354086980537303][6162 ms][DEBUG] END   runCmdUntilRes#1 in 1937 ms
[2025-08-21 15:49:12][354086980537303][6162 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 15:49:13][350957913748163][110729 ms][DEBUG] END   check_scloud in 2124 ms
[2025-08-21 15:49:13][350957913748163][110729 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:49:13][350957913748163][110729 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTU3OTEzNzQ4MTYzIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c1ME44RzZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODAyIn0='" -e "main()" -q"
[2025-08-21 15:49:13][350957913748163][110729 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:49:13][350957913748163][110729 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTU3OTEzNzQ4MTYzIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c1ME44RzZQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODAyIn0='" -e "main()" -q"
[2025-08-21 15:49:14][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:49:14][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:49:15][350957913748163][112510 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 15:49:15][350957913748163][112666 ms][DEBUG] proc_open done in 1937 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 15:49:15][350957913748163][112666 ms][DEBUG] END   runCmdUntilRes#1 in 1937 ms
[2025-08-21 15:49:15][350957913748163][112667 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 15:49:48][351773116673978][0 ms][INFO] === Request start ===
[2025-08-21 15:49:48][351773116673978][0 ms][DEBUG] START check_frida
[2025-08-21 15:49:48][351773116673978][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:49:48][351773116673978][25 ms][DEBUG] SU: done in 24 ms; out
[2025-08-21 15:49:48][351773116673978][25 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:49:48][351773116673978][25 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:49:48][351773116673978][56 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:48][351773116673978][56 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:49:48][351773116673978][87 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:50][351773116673978][2088 ms][DEBUG] END   check_frida in 2087 ms
[2025-08-21 15:49:50][351773116673978][2088 ms][DEBUG] START check_scloud
[2025-08-21 15:49:50][351773116673978][2088 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:49:50][351773116673978][2119 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:50][351773116673978][2119 ms][WARN] targetPkg: not running, restarting
[2025-08-21 15:49:50][351773116673978][2119 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 15:49:50][351773116673978][2150 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:50][351773116673978][2150 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 15:49:50][351773116673978][2181 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:49:52][351773116673978][4197 ms][DEBUG] END   check_scloud in 2109 ms
[2025-08-21 15:49:52][351773116673978][4197 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:49:52][351773116673978][4197 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzczMTE2NjczOTc4IiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MTNXSlhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklUViIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDExIn0='" -e "main()" -q"
[2025-08-21 15:49:52][351773116673978][4197 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:49:52][351773116673978][4197 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzczMTE2NjczOTc4IiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MTNXSlhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklUViIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDExIn0='" -e "main()" -q"
[2025-08-21 15:49:54][351773116673978][5947 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 15:49:54][351773116673978][6103 ms][DEBUG] proc_open done in 1907 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 15:49:54][351773116673978][6103 ms][DEBUG] END   runCmdUntilRes#1 in 1907 ms
[2025-08-21 15:49:54][351773116673978][6103 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 15:49:55][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:49:55][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:50:08][359847108888281][1 ms][INFO] === Request start ===
[2025-08-21 15:50:08][359847108888281][2 ms][DEBUG] START check_frida
[2025-08-21 15:50:08][359847108888281][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:50:08][359847108888281][29 ms][DEBUG] SU: done in 27 ms; out
[2025-08-21 15:50:08][359847108888281][29 ms][WARN] check_frida: not running, restarting
[2025-08-21 15:50:08][359847108888281][29 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 15:50:08][359847108888281][60 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:50:08][359847108888281][60 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 15:50:08][359847108888281][91 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 15:50:10][359847108888281][2106 ms][DEBUG] END   check_frida in 2105 ms
[2025-08-21 15:50:10][359847108888281][2107 ms][DEBUG] START check_internet
[2025-08-21 15:50:10][359847108888281][2107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:50:10][359847108888281][2153 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 15:50:10][359847108888281][2153 ms][WARN] check_internet: offline
[2025-08-21 15:50:10][359847108888281][2153 ms][DEBUG] END   check_internet in 47 ms
[2025-08-21 15:50:12][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 15:50:12][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 15:50:32][][36427 ms][DEBUG] ADB: done in 36426 ms; out
[2025-08-21 15:50:32][][36427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 15:50:32][][20171 ms][DEBUG] ADB: done in 20171 ms; out
[2025-08-21 15:50:32][][20171 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 15:50:32][][36489 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 15:50:32][][36489 ms][DEBUG] END   check_boot_completed in 36489 ms
[2025-08-21 15:50:32][351773116673978][36489 ms][INFO] === Request start ===
[2025-08-21 15:50:32][351773116673978][36489 ms][DEBUG] START check_frida
[2025-08-21 15:50:32][351773116673978][36489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:50:32][][20234 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 15:50:32][][20234 ms][DEBUG] END   check_boot_completed in 20234 ms
[2025-08-21 15:50:32][359847108888281][20234 ms][INFO] === Request start ===
[2025-08-21 15:50:32][351773116673978][36739 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2332716   3868 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:50:32][351773116673978][36739 ms][DEBUG] check_frida: running
[2025-08-21 15:50:32][351773116673978][36739 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 15:50:32][351773116673978][36739 ms][DEBUG] START check_internet
[2025-08-21 15:50:32][351773116673978][36739 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:50:32][][78696 ms][DEBUG] ADB: done in 78696 ms; out
[2025-08-21 15:50:32][][78696 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 15:50:32][][78743 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 15:50:32][][78743 ms][DEBUG] END   check_boot_completed in 78743 ms
[2025-08-21 15:50:32][354086980537303][78743 ms][INFO] === Request start ===
[2025-08-21 15:50:33][351773116673978][37177 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.151/201.151/201.151/0.000 ms\n
[2025-08-21 15:50:33][351773116673978][37177 ms][DEBUG] check_internet: online
[2025-08-21 15:50:33][351773116673978][37177 ms][DEBUG] END   check_internet in 437 ms
[2025-08-21 15:50:33][351773116673978][37177 ms][DEBUG] START check_scloud
[2025-08-21 15:50:33][351773116673978][37177 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:50:33][351773116673978][37443 ms][DEBUG] SU: done in 266 ms; outu0_a118       7086 20714 23787380 89428 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:50:33][351773116673978][37443 ms][DEBUG] targetPkg: running
[2025-08-21 15:50:33][351773116673978][37443 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 15:50:33][351773116673978][37443 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:50:33][351773116673978][37443 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzczMTE2NjczOTc4IiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MTNXSlhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklUViIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDExIn0='" -e "main()" -q"
[2025-08-21 15:50:33][351773116673978][37443 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:50:33][351773116673978][37443 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzczMTE2NjczOTc4IiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MTNXSlhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklUViIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDExIn0='" -e "main()" -q"
[2025-08-21 15:50:35][351773116673978][40083 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzczMTE2NjczOTc4IiwibW9kZWwiOiJTTS1BMzA3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MTNXSlhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklUViIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDExIn0="\r\n
[2025-08-21 15:50:40][351773116673978][44630 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b91eb0a-0aa0-44ef-91d2-0da0c7823af8","id":"QR_5b91eb0a-0aa0-44ef-91d2-0da0c7823af8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:50:40][351773116673978][44630 ms][DEBUG] proc_open done in 7187 ms; code=0; res.len=3152
[2025-08-21 15:50:40][351773116673978][44630 ms][DEBUG] END   runCmdUntilRes#1 in 7187 ms
[2025-08-21 15:50:40][351773116673978][44630 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:50:41][354086980537303][86821 ms][DEBUG] START check_frida
[2025-08-21 15:50:41][354086980537303][86821 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:50:41][354086980537303][87102 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136   4104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:50:41][354086980537303][87103 ms][DEBUG] check_frida: running
[2025-08-21 15:50:41][354086980537303][87103 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 15:50:41][354086980537303][87103 ms][DEBUG] START check_internet
[2025-08-21 15:50:41][354086980537303][87103 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:50:41][354086980537303][87462 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.019/254.019/254.019/0.000 ms\n
[2025-08-21 15:50:41][354086980537303][87462 ms][DEBUG] check_internet: online
[2025-08-21 15:50:41][354086980537303][87462 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 15:50:41][354086980537303][87462 ms][DEBUG] START check_scloud
[2025-08-21 15:50:41][354086980537303][87462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:50:41][354086980537303][87712 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23804896 89104 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:50:41][354086980537303][87712 ms][DEBUG] targetPkg: running
[2025-08-21 15:50:41][354086980537303][87712 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 15:50:41][354086980537303][87712 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:50:41][354086980537303][87712 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDg2OTgwNTM3MzAzIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MERUVlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYQVUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIxMCJ9'" -e "main()" -q"
[2025-08-21 15:50:41][354086980537303][87712 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:50:41][354086980537303][87712 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDg2OTgwNTM3MzAzIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MERUVlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYQVUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIxMCJ9'" -e "main()" -q"
[2025-08-21 15:50:44][354086980537303][90353 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDg2OTgwNTM3MzAzIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MERUVlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYQVUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzIxMCJ9"\r\n
[2025-08-21 15:50:46][354086980537303][92399 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9d0666f-56c4-49b5-b869-a8322104fbec","id":"QR_d9d0666f-56c4-49b5-b869-a8322104fbec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:50:46][354086980537303][92399 ms][DEBUG] proc_open done in 4687 ms; code=0; res.len=3152
[2025-08-21 15:50:46][354086980537303][92399 ms][DEBUG] END   runCmdUntilRes#1 in 4687 ms
[2025-08-21 15:50:46][354086980537303][92399 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:50:47][359847108888281][35359 ms][DEBUG] START check_frida
[2025-08-21 15:50:47][359847108888281][35359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:50:47][359847108888281][35656 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4180 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:50:47][359847108888281][35656 ms][DEBUG] check_frida: running
[2025-08-21 15:50:47][359847108888281][35656 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 15:50:47][359847108888281][35656 ms][DEBUG] START check_internet
[2025-08-21 15:50:47][359847108888281][35656 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:50:48][359847108888281][35890 ms][DEBUG] SU: done in 235 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.921/141.921/141.921/0.000 ms\n
[2025-08-21 15:50:48][359847108888281][35891 ms][DEBUG] check_internet: online
[2025-08-21 15:50:48][359847108888281][35891 ms][DEBUG] END   check_internet in 235 ms
[2025-08-21 15:50:48][359847108888281][35891 ms][DEBUG] START check_scloud
[2025-08-21 15:50:48][359847108888281][35891 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:50:48][359847108888281][36187 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23804928 89784 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:50:48][359847108888281][36187 ms][DEBUG] targetPkg: running
[2025-08-21 15:50:48][359847108888281][36187 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 15:50:48][359847108888281][36187 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:50:48][359847108888281][36187 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5ODQ3MTA4ODg4MjgxIiwibW9kZWwiOiJTTS1HOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ042MDFZSzdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDg3MiJ9'" -e "main()" -q"
[2025-08-21 15:50:48][359847108888281][36187 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:50:48][359847108888281][36187 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5ODQ3MTA4ODg4MjgxIiwibW9kZWwiOiJTTS1HOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ042MDFZSzdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDg3MiJ9'" -e "main()" -q"
[2025-08-21 15:50:51][359847108888281][38812 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5ODQ3MTA4ODg4MjgxIiwibW9kZWwiOiJTTS1HOTg2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ042MDFZSzdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDg3MiJ9"\r\n
[2025-08-21 15:50:52][359847108888281][40620 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01d85df5-393e-4b8f-a40a-4b345a2f10b0","id":"QR_01d85df5-393e-4b8f-a40a-4b345a2f10b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:50:52][359847108888281][40621 ms][DEBUG] proc_open done in 4434 ms; code=0; res.len=3152
[2025-08-21 15:50:52][359847108888281][40621 ms][DEBUG] END   runCmdUntilRes#1 in 4434 ms
[2025-08-21 15:50:52][359847108888281][40621 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:52:22][353117557077851][1 ms][INFO] === Request start ===
[2025-08-21 15:52:22][353117557077851][2 ms][DEBUG] START check_frida
[2025-08-21 15:52:22][353117557077851][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:52:22][353117557077851][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2332716   4272 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:52:22][353117557077851][294 ms][DEBUG] check_frida: running
[2025-08-21 15:52:22][353117557077851][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 15:52:22][353117557077851][294 ms][DEBUG] START check_internet
[2025-08-21 15:52:22][353117557077851][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:52:22][353117557077851][560 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=177 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 177.686/177.686/177.686/0.000 ms\n
[2025-08-21 15:52:22][353117557077851][560 ms][DEBUG] check_internet: online
[2025-08-21 15:52:22][353117557077851][560 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 15:52:22][353117557077851][560 ms][DEBUG] START check_scloud
[2025-08-21 15:52:22][353117557077851][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:52:23][353117557077851][841 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23804960 89276 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:52:23][353117557077851][841 ms][DEBUG] targetPkg: running
[2025-08-21 15:52:23][353117557077851][841 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 15:52:23][353117557077851][841 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:52:23][353117557077851][842 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTE3NTU3MDc3ODUxIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cyMUZRODJWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDM0MCJ9'" -e "main()" -q"
[2025-08-21 15:52:23][353117557077851][842 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:52:23][353117557077851][842 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTE3NTU3MDc3ODUxIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cyMUZRODJWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDM0MCJ9'" -e "main()" -q"
[2025-08-21 15:52:25][353117557077851][3481 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTE3NTU3MDc3ODUxIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cyMUZRODJWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDM0MCJ9"\r\n
[2025-08-21 15:52:28][353117557077851][5762 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1874fc48-3f0b-443a-b2f9-930eb400bf9b","id":"QR_1874fc48-3f0b-443a-b2f9-930eb400bf9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:52:28][353117557077851][5762 ms][DEBUG] proc_open done in 4920 ms; code=0; res.len=3152
[2025-08-21 15:52:28][353117557077851][5762 ms][DEBUG] END   runCmdUntilRes#1 in 4920 ms
[2025-08-21 15:52:28][353117557077851][5762 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:52:37][350828943613687][0 ms][INFO] === Request start ===
[2025-08-21 15:52:37][350828943613687][1 ms][DEBUG] START check_frida
[2025-08-21 15:52:37][350828943613687][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:52:37][350828943613687][296 ms][DEBUG] SU: done in 295 ms; outroot          4632     1 2349136   4248 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:52:37][350828943613687][296 ms][DEBUG] check_frida: running
[2025-08-21 15:52:37][350828943613687][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 15:52:37][350828943613687][296 ms][DEBUG] START check_internet
[2025-08-21 15:52:37][350828943613687][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:52:38][350828943613687][562 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.860/164.860/164.860/0.000 ms\n
[2025-08-21 15:52:38][350828943613687][562 ms][DEBUG] check_internet: online
[2025-08-21 15:52:38][350828943613687][562 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 15:52:38][350828943613687][562 ms][DEBUG] START check_scloud
[2025-08-21 15:52:38][350828943613687][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:52:38][350828943613687][812 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23804992 89924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:52:38][350828943613687][812 ms][DEBUG] targetPkg: running
[2025-08-21 15:52:38][350828943613687][812 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 15:52:38][350828943613687][812 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:52:38][350828943613687][812 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI4OTQzNjEzNjg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMDE2VFBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk4MCJ9'" -e "main()" -q"
[2025-08-21 15:52:38][350828943613687][812 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:52:38][350828943613687][812 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI4OTQzNjEzNjg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMDE2VFBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk4MCJ9'" -e "main()" -q"
[2025-08-21 15:52:41][350828943613687][3436 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODI4OTQzNjEzNjg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkxMDE2VFBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk4MCJ9"\r\n
[2025-08-21 15:52:43][350828943613687][5357 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2340233e-218f-4d61-945c-97f234582cc4","id":"QR_2340233e-218f-4d61-945c-97f234582cc4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:52:43][350828943613687][5358 ms][DEBUG] proc_open done in 4545 ms; code=0; res.len=3152
[2025-08-21 15:52:43][350828943613687][5358 ms][DEBUG] END   runCmdUntilRes#1 in 4546 ms
[2025-08-21 15:52:43][350828943613687][5358 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:53:07][350824194615919][0 ms][INFO] === Request start ===
[2025-08-21 15:53:07][350824194615919][1 ms][DEBUG] START check_frida
[2025-08-21 15:53:07][350824194615919][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:53:07][350824194615919][288 ms][DEBUG] SU: done in 287 ms; outroot          4632     1 2332716   4284 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:53:07][350824194615919][289 ms][DEBUG] check_frida: running
[2025-08-21 15:53:07][350824194615919][289 ms][DEBUG] END   check_frida in 288 ms
[2025-08-21 15:53:07][350824194615919][289 ms][DEBUG] START check_scloud
[2025-08-21 15:53:07][350824194615919][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:53:07][350824194615919][585 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23805024 88548 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:53:07][350824194615919][585 ms][DEBUG] targetPkg: running
[2025-08-21 15:53:07][350824194615919][585 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 15:53:07][350824194615919][585 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:53:07][350824194615919][585 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTk0NjE1OTE5IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMjQ1QkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc1NiJ9'" -e "main()" -q"
[2025-08-21 15:53:07][350824194615919][585 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:53:07][350824194615919][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTk0NjE1OTE5IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMjQ1QkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc1NiJ9'" -e "main()" -q"
[2025-08-21 15:53:10][350824194615919][3163 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODI0MTk0NjE1OTE5IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMjQ1QkJLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc1NiJ9"\r\n
[2025-08-21 15:53:12][350824194615919][5006 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5efa927-6fc7-4bb3-aaf0-274dbcf38795","id":"QR_d5efa927-6fc7-4bb3-aaf0-274dbcf38795","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:53:12][350824194615919][5007 ms][DEBUG] proc_open done in 4421 ms; code=0; res.len=3152
[2025-08-21 15:53:12][350824194615919][5007 ms][DEBUG] END   runCmdUntilRes#1 in 4422 ms
[2025-08-21 15:53:12][350824194615919][5007 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:54:10][354713110372000][1 ms][INFO] === Request start ===
[2025-08-21 15:54:10][354713110372000][1 ms][DEBUG] START check_frida
[2025-08-21 15:54:10][354713110372000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:54:10][354713110372000][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2332716   4296 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:54:10][354713110372000][297 ms][DEBUG] check_frida: running
[2025-08-21 15:54:10][354713110372000][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 15:54:10][354713110372000][297 ms][DEBUG] START check_internet
[2025-08-21 15:54:10][354713110372000][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:54:11][354713110372000][625 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.949/232.949/232.949/0.000 ms\n
[2025-08-21 15:54:11][354713110372000][625 ms][DEBUG] check_internet: online
[2025-08-21 15:54:11][354713110372000][625 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 15:54:11][354713110372000][626 ms][DEBUG] START check_scloud
[2025-08-21 15:54:11][354713110372000][626 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:54:11][354713110372000][922 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23805056 89172 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:54:11][354713110372000][922 ms][DEBUG] targetPkg: running
[2025-08-21 15:54:11][354713110372000][922 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 15:54:11][354713110372000][922 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:54:11][354713110372000][922 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzEzMTEwMzcyMDAwIiwibW9kZWwiOiJTTS1HOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE4zMDZXSzhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTY4In0='" -e "main()" -q"
[2025-08-21 15:54:11][354713110372000][922 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:54:11][354713110372000][923 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzEzMTEwMzcyMDAwIiwibW9kZWwiOiJTTS1HOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE4zMDZXSzhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTY4In0='" -e "main()" -q"
[2025-08-21 15:54:14][354713110372000][3531 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzEzMTEwMzcyMDAwIiwibW9kZWwiOiJTTS1HOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE4zMDZXSzhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTY4In0="\r\n
[2025-08-21 15:54:18][354713110372000][8061 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9910dd8f-821d-4c55-926a-1fc94dfb44ba","id":"QR_9910dd8f-821d-4c55-926a-1fc94dfb44ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:54:18][354713110372000][8061 ms][DEBUG] proc_open done in 7138 ms; code=0; res.len=3152
[2025-08-21 15:54:18][354713110372000][8061 ms][DEBUG] END   runCmdUntilRes#1 in 7138 ms
[2025-08-21 15:54:18][354713110372000][8061 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:54:27][353196394628308][1 ms][INFO] === Request start ===
[2025-08-21 15:54:27][353196394628308][1 ms][DEBUG] START check_frida
[2025-08-21 15:54:27][353196394628308][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:54:27][353196394628308][315 ms][DEBUG] SU: done in 313 ms; outroot          4632     1 2349136   4340 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:54:27][353196394628308][315 ms][DEBUG] check_frida: running
[2025-08-21 15:54:27][353196394628308][315 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 15:54:27][353196394628308][315 ms][DEBUG] START check_internet
[2025-08-21 15:54:27][353196394628308][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:54:27][353196394628308][643 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=230 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 230.220/230.220/230.220/0.000 ms\n
[2025-08-21 15:54:27][353196394628308][644 ms][DEBUG] check_internet: online
[2025-08-21 15:54:27][353196394628308][644 ms][DEBUG] END   check_internet in 329 ms
[2025-08-21 15:54:27][353196394628308][644 ms][DEBUG] START check_scloud
[2025-08-21 15:54:27][353196394628308][644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:54:28][353196394628308][940 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23805088 89072 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:54:28][353196394628308][940 ms][DEBUG] targetPkg: running
[2025-08-21 15:54:28][353196394628308][940 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 15:54:28][353196394628308][940 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:54:28][353196394628308][940 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTk2Mzk0NjI4MzA4IiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k1MEQ0TE5ZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQwOSJ9'" -e "main()" -q"
[2025-08-21 15:54:28][353196394628308][940 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:54:28][353196394628308][941 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTk2Mzk0NjI4MzA4IiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k1MEQ0TE5ZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQwOSJ9'" -e "main()" -q"
[2025-08-21 15:54:30][353196394628308][3533 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTk2Mzk0NjI4MzA4IiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1k1MEQ0TE5ZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQwOSJ9"\r\n
[2025-08-21 15:54:33][353196394628308][5907 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4eb8cd62-2913-4bcb-b5fb-04b01e0593d3","id":"QR_4eb8cd62-2913-4bcb-b5fb-04b01e0593d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:54:33][353196394628308][5907 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 15:54:33][353196394628308][5907 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-21 15:54:33][353196394628308][5907 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:55:08][354971850782651][0 ms][INFO] === Request start ===
[2025-08-21 15:55:08][354971850782651][1 ms][DEBUG] START check_frida
[2025-08-21 15:55:08][354971850782651][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:55:08][354971850782651][298 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716   4292 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:55:08][354971850782651][298 ms][DEBUG] check_frida: running
[2025-08-21 15:55:08][354971850782651][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 15:55:08][354971850782651][298 ms][DEBUG] START check_scloud
[2025-08-21 15:55:08][354971850782651][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:55:08][354971850782651][531 ms][DEBUG] SU: done in 233 ms; outu0_a118       7086 20714 23805120 89856 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:55:08][354971850782651][531 ms][DEBUG] targetPkg: running
[2025-08-21 15:55:08][354971850782651][531 ms][DEBUG] END   check_scloud in 233 ms
[2025-08-21 15:55:08][354971850782651][531 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:55:08][354971850782651][531 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTcxODUwNzgyNjUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5ME1BQjBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQS0QiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQwMSJ9'" -e "main()" -q"
[2025-08-21 15:55:08][354971850782651][531 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:55:08][354971850782651][531 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTcxODUwNzgyNjUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5ME1BQjBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQS0QiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQwMSJ9'" -e "main()" -q"
[2025-08-21 15:55:11][354971850782651][3139 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTcxODUwNzgyNjUxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5ME1BQjBWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQS0QiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQwMSJ9"\r\n
[2025-08-21 15:55:13][354971850782651][5248 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c188b7c7-8eb0-47a4-b552-92be6e60e843","id":"QR_c188b7c7-8eb0-47a4-b552-92be6e60e843","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:55:13][354971850782651][5248 ms][DEBUG] proc_open done in 4718 ms; code=0; res.len=3152
[2025-08-21 15:55:13][354971850782651][5248 ms][DEBUG] END   runCmdUntilRes#1 in 4718 ms
[2025-08-21 15:55:13][354971850782651][5248 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:55:18][357674431941260][1 ms][INFO] === Request start ===
[2025-08-21 15:55:18][357674431941260][1 ms][DEBUG] START check_frida
[2025-08-21 15:55:18][357674431941260][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:55:19][357674431941260][293 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2349136   4296 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:55:19][357674431941260][293 ms][DEBUG] check_frida: running
[2025-08-21 15:55:19][357674431941260][293 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 15:55:19][357674431941260][293 ms][DEBUG] START check_scloud
[2025-08-21 15:55:19][357674431941260][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:55:19][357674431941260][605 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23805152 89312 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:55:19][357674431941260][606 ms][DEBUG] targetPkg: running
[2025-08-21 15:55:19][357674431941260][606 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 15:55:19][357674431941260][606 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:55:19][357674431941260][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Njc0NDMxOTQxMjYwIiwibW9kZWwiOiJTTS1NMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI5MVhXMllNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM3MCJ9'" -e "main()" -q"
[2025-08-21 15:55:19][357674431941260][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:55:19][357674431941260][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Njc0NDMxOTQxMjYwIiwibW9kZWwiOiJTTS1NMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI5MVhXMllNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM3MCJ9'" -e "main()" -q"
[2025-08-21 15:55:22][357674431941260][3230 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Njc0NDMxOTQxMjYwIiwibW9kZWwiOiJTTS1NMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI5MVhXMllNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzM3MCJ9"\r\n
[2025-08-21 15:55:24][357674431941260][5198 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_592118a0-36cb-4056-ad93-a1194927ce9a","id":"QR_592118a0-36cb-4056-ad93-a1194927ce9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:55:24][357674431941260][5198 ms][DEBUG] proc_open done in 4592 ms; code=0; res.len=3152
[2025-08-21 15:55:24][357674431941260][5198 ms][DEBUG] END   runCmdUntilRes#1 in 4592 ms
[2025-08-21 15:55:24][357674431941260][5198 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:56:36][350274356811353][1 ms][INFO] === Request start ===
[2025-08-21 15:56:36][350274356811353][1 ms][DEBUG] START check_frida
[2025-08-21 15:56:36][350274356811353][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:56:36][350274356811353][261 ms][DEBUG] SU: done in 260 ms; outroot          4632     1 2332716   4288 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:56:36][350274356811353][261 ms][DEBUG] check_frida: running
[2025-08-21 15:56:36][350274356811353][261 ms][DEBUG] END   check_frida in 260 ms
[2025-08-21 15:56:36][350274356811353][261 ms][DEBUG] START check_internet
[2025-08-21 15:56:36][350274356811353][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:56:37][350274356811353][714 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.396/201.396/201.396/0.000 ms\n
[2025-08-21 15:56:37][350274356811353][714 ms][DEBUG] check_internet: online
[2025-08-21 15:56:37][350274356811353][715 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 15:56:37][350274356811353][715 ms][DEBUG] START check_scloud
[2025-08-21 15:56:37][350274356811353][715 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:56:37][350274356811353][997 ms][DEBUG] SU: done in 282 ms; outu0_a118       7086 20714 23805184 89904 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:56:37][350274356811353][997 ms][DEBUG] targetPkg: running
[2025-08-21 15:56:37][350274356811353][997 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 15:56:37][350274356811353][997 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:56:37][350274356811353][998 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzU2ODExMzUzIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEZNNU5XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODYzIn0='" -e "main()" -q"
[2025-08-21 15:56:37][350274356811353][998 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:56:37][350274356811353][998 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzU2ODExMzUzIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEZNNU5XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODYzIn0='" -e "main()" -q"
[2025-08-21 15:56:40][350274356811353][3604 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjc0MzU2ODExMzUzIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEZNNU5XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODYzIn0="\r\n
[2025-08-21 15:56:44][350274356811353][8462 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_646008e8-a306-4764-8119-8cad0d502891","id":"QR_646008e8-a306-4764-8119-8cad0d502891","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:56:44][350274356811353][8462 ms][DEBUG] proc_open done in 7464 ms; code=0; res.len=3152
[2025-08-21 15:56:44][350274356811353][8462 ms][DEBUG] END   runCmdUntilRes#1 in 7464 ms
[2025-08-21 15:56:44][350274356811353][8462 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:57:10][354519745944885][1 ms][INFO] === Request start ===
[2025-08-21 15:57:10][354519745944885][1 ms][DEBUG] START check_frida
[2025-08-21 15:57:10][354519745944885][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:57:10][354519745944885][288 ms][DEBUG] SU: done in 287 ms; outroot          4632     1 2332716   4308 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:57:10][354519745944885][288 ms][DEBUG] check_frida: running
[2025-08-21 15:57:10][354519745944885][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 15:57:10][354519745944885][288 ms][DEBUG] START check_scloud
[2025-08-21 15:57:10][354519745944885][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:57:11][354519745944885][600 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23805216 89600 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:57:11][354519745944885][601 ms][DEBUG] targetPkg: running
[2025-08-21 15:57:11][354519745944885][601 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 15:57:11][354519745944885][601 ms][DEBUG] rawBody.length=1160
[2025-08-21 15:57:11][354519745944885][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTE5NzQ1OTQ0ODg1IiwibW9kZWwiOiJTTS1YNzAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzEwNFpFM0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTg2In0='" -e "main()" -q"
[2025-08-21 15:57:11][354519745944885][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:57:11][354519745944885][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTE5NzQ1OTQ0ODg1IiwibW9kZWwiOiJTTS1YNzAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzEwNFpFM0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTg2In0='" -e "main()" -q"
[2025-08-21 15:57:13][354519745944885][3193 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTE5NzQ1OTQ0ODg1IiwibW9kZWwiOiJTTS1YNzAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzEwNFpFM0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTg2In0="\r\n
[2025-08-21 15:57:15][354519745944885][5162 ms][DEBUG] frida res:res:{"code":5000300,"message":"DEVICE_OPERATION_EXCEPTION","data":"Response from uploadDevicesToServiceFromKdms was empty"}\r\n
[2025-08-21 15:57:15][354519745944885][5162 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=119
[2025-08-21 15:57:15][354519745944885][5162 ms][DEBUG] END   runCmdUntilRes#1 in 4561 ms
[2025-08-21 15:57:15][354519745944885][5162 ms][INFO] SUCCESS response from frida (len=119)
[2025-08-21 15:57:17][353587952010592][0 ms][INFO] === Request start ===
[2025-08-21 15:57:17][353587952010592][1 ms][DEBUG] START check_frida
[2025-08-21 15:57:17][353587952010592][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:57:17][353587952010592][310 ms][DEBUG] SU: done in 309 ms; outroot          4632     1 2349136   4328 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:57:17][353587952010592][310 ms][DEBUG] check_frida: running
[2025-08-21 15:57:17][353587952010592][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 15:57:17][353587952010592][310 ms][DEBUG] START check_scloud
[2025-08-21 15:57:17][353587952010592][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:57:18][353587952010592][591 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23805248 90192 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:57:18][353587952010592][591 ms][DEBUG] targetPkg: running
[2025-08-21 15:57:18][353587952010592][591 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 15:57:18][353587952010592][591 ms][DEBUG] rawBody.length=1159
[2025-08-21 15:57:18][353587952010592][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTg3OTUyMDEwNTkyIiwibW9kZWwiOiJTTS1YNzAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzEwNFpFM0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiRVVCIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzM2MDgifQ=='" -e "main()" -q"
[2025-08-21 15:57:18][353587952010592][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:57:18][353587952010592][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTg3OTUyMDEwNTkyIiwibW9kZWwiOiJTTS1YNzAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzEwNFpFM0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiRVVCIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzM2MDgifQ=='" -e "main()" -q"
[2025-08-21 15:57:19][352549936360734][0 ms][INFO] === Request start ===
[2025-08-21 15:57:20][353587952010592][3199 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNTg3OTUyMDEwNTkyIiwibW9kZWwiOiJTTS1YNzAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzEwNFpFM0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiRVVCIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzM2MDgifQ=="\r\n
[2025-08-21 15:57:24][353587952010592][7105 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54a1ba8d-efae-48b4-a0a7-05935132802b","id":"QR_54a1ba8d-efae-48b4-a0a7-05935132802b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:57:24][353587952010592][7106 ms][DEBUG] proc_open done in 6514 ms; code=0; res.len=3152
[2025-08-21 15:57:24][353587952010592][7106 ms][DEBUG] END   runCmdUntilRes#1 in 6514 ms
[2025-08-21 15:57:24][353587952010592][7106 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:57:25][352549936360734][6084 ms][DEBUG] START check_frida
[2025-08-21 15:57:25][352549936360734][6084 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:57:25][352549936360734][6381 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4272 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:57:25][352549936360734][6381 ms][DEBUG] check_frida: running
[2025-08-21 15:57:25][352549936360734][6381 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 15:57:25][352549936360734][6381 ms][DEBUG] START check_scloud
[2025-08-21 15:57:25][352549936360734][6381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:57:25][352549936360734][6677 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23805280 89580 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:57:25][352549936360734][6677 ms][DEBUG] targetPkg: running
[2025-08-21 15:57:25][352549936360734][6677 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 15:57:25][352549936360734][6677 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:57:25][352549936360734][6677 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM2MzYwNzM0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDlWN1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzY4MiJ9'" -e "main()" -q"
[2025-08-21 15:57:25][352549936360734][6677 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:57:25][352549936360734][6677 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM2MzYwNzM0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDlWN1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzY4MiJ9'" -e "main()" -q"
[2025-08-21 15:57:28][352549936360734][9286 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTQ5OTM2MzYwNzM0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDlWN1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzY4MiJ9"\r\n
[2025-08-21 15:57:30][352549936360734][11067 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac8cf746-8ad2-431d-b350-a789d1432924","id":"QR_ac8cf746-8ad2-431d-b350-a789d1432924","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:57:30][352549936360734][11067 ms][DEBUG] proc_open done in 4390 ms; code=0; res.len=3152
[2025-08-21 15:57:30][352549936360734][11067 ms][DEBUG] END   runCmdUntilRes#1 in 4390 ms
[2025-08-21 15:57:30][352549936360734][11067 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:57:31][350832442578987][0 ms][INFO] === Request start ===
[2025-08-21 15:57:31][350832442578987][1 ms][DEBUG] START check_frida
[2025-08-21 15:57:31][350832442578987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:57:32][350832442578987][295 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2349136   4292 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:57:32][350832442578987][295 ms][DEBUG] check_frida: running
[2025-08-21 15:57:32][350832442578987][295 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 15:57:32][350832442578987][295 ms][DEBUG] START check_scloud
[2025-08-21 15:57:32][350832442578987][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:57:32][350832442578987][592 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23805312 90164 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:57:32][350832442578987][592 ms][DEBUG] targetPkg: running
[2025-08-21 15:57:32][350832442578987][592 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 15:57:32][350832442578987][592 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:57:32][350832442578987][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODMyNDQyNTc4OTg3IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMkRCNk5LIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc2OSJ9'" -e "main()" -q"
[2025-08-21 15:57:32][350832442578987][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:57:32][350832442578987][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODMyNDQyNTc4OTg3IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMkRCNk5LIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc2OSJ9'" -e "main()" -q"
[2025-08-21 15:57:34][351393983268933][1 ms][INFO] === Request start ===
[2025-08-21 15:57:35][350832442578987][3216 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODMyNDQyNTc4OTg3IiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMkRCNk5LIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc2OSJ9"\r\n
[2025-08-21 15:57:36][350832442578987][4966 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d42106ea-7223-4636-93c2-cb5119f3eefb","id":"QR_d42106ea-7223-4636-93c2-cb5119f3eefb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:57:36][350832442578987][4966 ms][DEBUG] proc_open done in 4373 ms; code=0; res.len=3152
[2025-08-21 15:57:36][350832442578987][4966 ms][DEBUG] END   runCmdUntilRes#1 in 4373 ms
[2025-08-21 15:57:36][350832442578987][4966 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:57:36][351393983268933][2019 ms][DEBUG] START check_frida
[2025-08-21 15:57:36][351393983268933][2019 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:57:37][351393983268933][2301 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136   4300 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:57:37][351393983268933][2301 ms][DEBUG] check_frida: running
[2025-08-21 15:57:37][351393983268933][2301 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 15:57:37][351393983268933][2301 ms][DEBUG] START check_scloud
[2025-08-21 15:57:37][351393983268933][2301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:57:37][351393983268933][2582 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23805344 90752 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:57:37][351393983268933][2582 ms][DEBUG] targetPkg: running
[2025-08-21 15:57:37][351393983268933][2582 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 15:57:37][351393983268933][2582 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:57:37][351393983268933][2582 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzkzOTgzMjY4OTMzIiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q1MDZITTBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk1NSJ9'" -e "main()" -q"
[2025-08-21 15:57:37][351393983268933][2582 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:57:37][351393983268933][2582 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzkzOTgzMjY4OTMzIiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q1MDZITTBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk1NSJ9'" -e "main()" -q"
[2025-08-21 15:57:40][351393983268933][5175 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzkzOTgzMjY4OTMzIiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q1MDZITTBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTk1NSJ9"\r\n
[2025-08-21 15:57:42][351393983268933][7143 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_133631b1-3e3f-476b-ae8e-7b67fd626709","id":"QR_133631b1-3e3f-476b-ae8e-7b67fd626709","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:57:42][351393983268933][7144 ms][DEBUG] proc_open done in 4562 ms; code=0; res.len=3152
[2025-08-21 15:57:42][351393983268933][7144 ms][DEBUG] END   runCmdUntilRes#1 in 4562 ms
[2025-08-21 15:57:42][351393983268933][7144 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:58:07][354747950557387][0 ms][INFO] === Request start ===
[2025-08-21 15:58:07][354747950557387][1 ms][DEBUG] START check_frida
[2025-08-21 15:58:07][354747950557387][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:58:08][354747950557387][300 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716   4308 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:58:08][354747950557387][300 ms][DEBUG] check_frida: running
[2025-08-21 15:58:08][354747950557387][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 15:58:08][354747950557387][300 ms][DEBUG] START check_internet
[2025-08-21 15:58:08][354747950557387][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 15:58:08][354747950557387][659 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.919/233.919/233.919/0.000 ms\n
[2025-08-21 15:58:08][354747950557387][660 ms][DEBUG] check_internet: online
[2025-08-21 15:58:08][354747950557387][660 ms][DEBUG] END   check_internet in 360 ms
[2025-08-21 15:58:08][354747950557387][660 ms][DEBUG] START check_scloud
[2025-08-21 15:58:08][354747950557387][660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:58:08][354747950557387][956 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23805376 89940 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:58:08][354747950557387][956 ms][DEBUG] targetPkg: running
[2025-08-21 15:58:08][354747950557387][956 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 15:58:08][354747950557387][956 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:58:08][354747950557387][956 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUwNTU3Mzg3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MFFXWjlEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjI5MSJ9'" -e "main()" -q"
[2025-08-21 15:58:08][354747950557387][956 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:58:08][354747950557387][956 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUwNTU3Mzg3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MFFXWjlEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjI5MSJ9'" -e "main()" -q"
[2025-08-21 15:58:11][354747950557387][3596 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTUwNTU3Mzg3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MFFXWjlEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjI5MSJ9"\r\n
[2025-08-21 15:58:13][354747950557387][5970 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24842b44-2104-4b06-8dfa-fe26d2672bc2","id":"QR_24842b44-2104-4b06-8dfa-fe26d2672bc2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:58:13][354747950557387][5971 ms][DEBUG] proc_open done in 5015 ms; code=0; res.len=3152
[2025-08-21 15:58:13][354747950557387][5972 ms][DEBUG] END   runCmdUntilRes#1 in 5016 ms
[2025-08-21 15:58:13][354747950557387][5972 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 15:59:37][353684147958536][1 ms][INFO] === Request start ===
[2025-08-21 15:59:37][353684147958536][1 ms][DEBUG] START check_frida
[2025-08-21 15:59:37][353684147958536][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 15:59:37][353684147958536][300 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716   4288 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 15:59:37][353684147958536][300 ms][DEBUG] check_frida: running
[2025-08-21 15:59:37][353684147958536][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 15:59:37][353684147958536][301 ms][DEBUG] START check_scloud
[2025-08-21 15:59:37][353684147958536][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 15:59:38][353684147958536][597 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23805408 89344 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 15:59:38][353684147958536][597 ms][DEBUG] targetPkg: running
[2025-08-21 15:59:38][353684147958536][597 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 15:59:38][353684147958536][597 ms][DEBUG] rawBody.length=1161
[2025-08-21 15:59:38][353684147958536][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQ3OTU4NTM2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MEo0N1lNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9'" -e "main()" -q"
[2025-08-21 15:59:38][353684147958536][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 15:59:38][353684147958536][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQ3OTU4NTM2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MEo0N1lNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9'" -e "main()" -q"
[2025-08-21 15:59:40][353684147958536][3221 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjg0MTQ3OTU4NTM2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MEo0N1lNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA3NyJ9"\r\n
[2025-08-21 15:59:42][353684147958536][5174 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24d3f381-110a-4b54-9d38-0976b472e962","id":"QR_24d3f381-110a-4b54-9d38-0976b472e962","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 15:59:42][353684147958536][5174 ms][DEBUG] proc_open done in 4576 ms; code=0; res.len=3152
[2025-08-21 15:59:42][353684147958536][5174 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 15:59:42][353684147958536][5174 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:00:07][350896387124651][1 ms][INFO] === Request start ===
[2025-08-21 16:00:07][350896387124651][2 ms][DEBUG] START check_frida
[2025-08-21 16:00:07][350896387124651][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:00:07][350896387124651][311 ms][DEBUG] SU: done in 310 ms; outroot          4632     1 2332716   4300 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:00:07][350896387124651][311 ms][DEBUG] check_frida: running
[2025-08-21 16:00:07][350896387124651][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 16:00:07][350896387124651][311 ms][DEBUG] START check_internet
[2025-08-21 16:00:07][350896387124651][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:00:07][350896387124651][811 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=392 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 392.048/392.048/392.048/0.000 ms\n
[2025-08-21 16:00:07][350896387124651][811 ms][DEBUG] check_internet: online
[2025-08-21 16:00:07][350896387124651][811 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 16:00:07][350896387124651][811 ms][DEBUG] START check_scloud
[2025-08-21 16:00:07][350896387124651][811 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:00:08][350896387124651][1092 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23805440 90232 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:00:08][350896387124651][1092 ms][DEBUG] targetPkg: running
[2025-08-21 16:00:08][350896387124651][1092 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:00:08][350896387124651][1092 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:00:08][350896387124651][1092 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2Mzg3MTI0NjUxIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFg0QUtXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTIyIn0='" -e "main()" -q"
[2025-08-21 16:00:08][350896387124651][1092 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:00:08][350896387124651][1092 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2Mzg3MTI0NjUxIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFg0QUtXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTIyIn0='" -e "main()" -q"
[2025-08-21 16:00:10][350896387124651][3732 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2Mzg3MTI0NjUxIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFg0QUtXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTIyIn0="\r\n
[2025-08-21 16:00:13][350896387124651][6825 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_042c40ad-1621-4ca2-9283-7fe139ce3a87","id":"QR_042c40ad-1621-4ca2-9283-7fe139ce3a87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:00:13][350896387124651][6825 ms][DEBUG] proc_open done in 5733 ms; code=0; res.len=3152
[2025-08-21 16:00:13][350896387124651][6825 ms][DEBUG] END   runCmdUntilRes#1 in 5733 ms
[2025-08-21 16:00:13][350896387124651][6825 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:00:45][354120803227519][1 ms][INFO] === Request start ===
[2025-08-21 16:00:45][354120803227519][2 ms][DEBUG] START check_frida
[2025-08-21 16:00:45][354120803227519][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:00:45][354120803227519][299 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2332716   4288 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:00:45][354120803227519][300 ms][DEBUG] check_frida: running
[2025-08-21 16:00:45][354120803227519][300 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 16:00:45][354120803227519][300 ms][DEBUG] START check_internet
[2025-08-21 16:00:45][354120803227519][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:00:45][354120803227519][754 ms][DEBUG] SU: done in 454 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.606/200.606/200.606/0.000 ms\n
[2025-08-21 16:00:45][354120803227519][754 ms][DEBUG] check_internet: online
[2025-08-21 16:00:45][354120803227519][754 ms][DEBUG] END   check_internet in 454 ms
[2025-08-21 16:00:45][354120803227519][754 ms][DEBUG] START check_scloud
[2025-08-21 16:00:45][354120803227519][754 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:00:46][354120803227519][1018 ms][DEBUG] SU: done in 264 ms; outu0_a118       7086 20714 23805472 90744 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:00:46][354120803227519][1018 ms][DEBUG] targetPkg: running
[2025-08-21 16:00:46][354120803227519][1018 ms][DEBUG] END   check_scloud in 264 ms
[2025-08-21 16:00:46][354120803227519][1018 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:00:46][354120803227519][1018 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTIwODAzMjI3NTE5IiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RBMVRLUFFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY4MyJ9'" -e "main()" -q"
[2025-08-21 16:00:46][354120803227519][1018 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:00:46][354120803227519][1018 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTIwODAzMjI3NTE5IiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RBMVRLUFFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY4MyJ9'" -e "main()" -q"
[2025-08-21 16:00:48][354120803227519][3658 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTIwODAzMjI3NTE5IiwibW9kZWwiOiJTTS1BMjM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RBMVRLUFFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY4MyJ9"\r\n
[2025-08-21 16:00:51][354120803227519][5985 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d59b42b1-21ba-413d-88e2-03daaf9195c6","id":"QR_d59b42b1-21ba-413d-88e2-03daaf9195c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:00:51][354120803227519][5985 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 16:00:51][354120803227519][5985 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-21 16:00:51][354120803227519][5985 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:02:07][357358148016513][1 ms][INFO] === Request start ===
[2025-08-21 16:02:07][357358148016513][1 ms][DEBUG] START check_frida
[2025-08-21 16:02:07][357358148016513][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:02:07][357358148016513][309 ms][DEBUG] SU: done in 307 ms; outroot          4632     1 2332716   4300 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:02:07][357358148016513][309 ms][DEBUG] check_frida: running
[2025-08-21 16:02:07][357358148016513][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 16:02:07][357358148016513][309 ms][DEBUG] START check_internet
[2025-08-21 16:02:07][357358148016513][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:02:08][357358148016513][574 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.061/174.061/174.061/0.000 ms\n
[2025-08-21 16:02:08][357358148016513][574 ms][DEBUG] check_internet: online
[2025-08-21 16:02:08][357358148016513][574 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 16:02:08][357358148016513][574 ms][DEBUG] START check_scloud
[2025-08-21 16:02:08][357358148016513][574 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:02:08][357358148016513][855 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23805504 90296 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:02:08][357358148016513][855 ms][DEBUG] targetPkg: running
[2025-08-21 16:02:08][357358148016513][856 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:02:08][357358148016513][856 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:02:08][357358148016513][856 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzU4MTQ4MDE2NTEzIiwibW9kZWwiOiJTTS1YMjE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5VFhDMDhDMzJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY1OSJ9'" -e "main()" -q"
[2025-08-21 16:02:08][357358148016513][856 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:02:08][357358148016513][856 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzU4MTQ4MDE2NTEzIiwibW9kZWwiOiJTTS1YMjE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5VFhDMDhDMzJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY1OSJ9'" -e "main()" -q"
[2025-08-21 16:02:11][357358148016513][3464 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MzU4MTQ4MDE2NTEzIiwibW9kZWwiOiJTTS1YMjE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5VFhDMDhDMzJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY1OSJ9"\r\n
[2025-08-21 16:02:13][357358148016513][5682 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21c07913-d4be-48d2-9ef2-0b6a9f4c4977","id":"QR_21c07913-d4be-48d2-9ef2-0b6a9f4c4977","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:02:13][357358148016513][5682 ms][DEBUG] proc_open done in 4826 ms; code=0; res.len=3152
[2025-08-21 16:02:13][357358148016513][5682 ms][DEBUG] END   runCmdUntilRes#1 in 4826 ms
[2025-08-21 16:02:13][357358148016513][5682 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:02:19][354411848566627][0 ms][INFO] === Request start ===
[2025-08-21 16:02:19][354411848566627][1 ms][DEBUG] START check_frida
[2025-08-21 16:02:19][354411848566627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:02:19][354411848566627][296 ms][DEBUG] SU: done in 295 ms; outroot          4632     1 2349136   4296 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:02:19][354411848566627][296 ms][DEBUG] check_frida: running
[2025-08-21 16:02:19][354411848566627][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 16:02:19][354411848566627][296 ms][DEBUG] START check_internet
[2025-08-21 16:02:19][354411848566627][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:02:20][354411848566627][639 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.575/241.575/241.575/0.000 ms\n
[2025-08-21 16:02:20][354411848566627][639 ms][DEBUG] check_internet: online
[2025-08-21 16:02:20][354411848566627][640 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 16:02:20][354411848566627][640 ms][DEBUG] START check_scloud
[2025-08-21 16:02:20][354411848566627][640 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:02:20][352501916160311][0 ms][INFO] === Request start ===
[2025-08-21 16:02:20][354411848566627][889 ms][DEBUG] SU: done in 249 ms; outu0_a118       7086 20714 23805536 89544 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:02:20][354411848566627][889 ms][DEBUG] targetPkg: running
[2025-08-21 16:02:20][354411848566627][889 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 16:02:20][354411848566627][889 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:02:20][354411848566627][890 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDExODQ4NTY2NjI3IiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g3MDU2NE5YIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI0NyJ9'" -e "main()" -q"
[2025-08-21 16:02:20][354411848566627][890 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:02:20][354411848566627][890 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDExODQ4NTY2NjI3IiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g3MDU2NE5YIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI0NyJ9'" -e "main()" -q"
[2025-08-21 16:02:22][354411848566627][3513 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDExODQ4NTY2NjI3IiwibW9kZWwiOiJTTS1BMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g3MDU2NE5YIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI0NyJ9"\r\n
[2025-08-21 16:02:24][354411848566627][5529 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78f65092-9356-41a3-9d9a-9c9d0a7fd8fc","id":"QR_78f65092-9356-41a3-9d9a-9c9d0a7fd8fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:02:24][354411848566627][5529 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 16:02:24][354411848566627][5529 ms][DEBUG] END   runCmdUntilRes#1 in 4639 ms
[2025-08-21 16:02:24][354411848566627][5529 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:02:25][352501916160311][5072 ms][DEBUG] START check_frida
[2025-08-21 16:02:25][352501916160311][5073 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:02:25][352501916160311][5338 ms][DEBUG] SU: done in 266 ms; outroot          4632     1 2349136   4272 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:02:25][352501916160311][5338 ms][DEBUG] check_frida: running
[2025-08-21 16:02:25][352501916160311][5338 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 16:02:25][352501916160311][5338 ms][DEBUG] START check_internet
[2025-08-21 16:02:25][352501916160311][5338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:02:25][352501916160311][5572 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.154/136.154/136.154/0.000 ms\n
[2025-08-21 16:02:25][352501916160311][5572 ms][DEBUG] check_internet: online
[2025-08-21 16:02:25][352501916160311][5572 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 16:02:25][352501916160311][5572 ms][DEBUG] START check_scloud
[2025-08-21 16:02:25][352501916160311][5572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:02:25][352501916160311][5822 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23805568 90128 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:02:25][352501916160311][5822 ms][DEBUG] targetPkg: running
[2025-08-21 16:02:25][352501916160311][5822 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 16:02:25][352501916160311][5822 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:02:25][352501916160311][5822 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTAxOTE2MTYwMzExIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkzMEowMFBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzNCJ9'" -e "main()" -q"
[2025-08-21 16:02:25][352501916160311][5822 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:02:25][352501916160311][5822 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTAxOTE2MTYwMzExIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkzMEowMFBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzNCJ9'" -e "main()" -q"
[2025-08-21 16:02:28][352501916160311][8431 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTAxOTE2MTYwMzExIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkzMEowMFBLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzNCJ9"\r\n
[2025-08-21 16:02:30][352501916160311][10368 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13078672-c6d8-4516-9c2d-54b14868f728","id":"QR_13078672-c6d8-4516-9c2d-54b14868f728","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:02:30][352501916160311][10368 ms][DEBUG] proc_open done in 4546 ms; code=0; res.len=3152
[2025-08-21 16:02:30][352501916160311][10368 ms][DEBUG] END   runCmdUntilRes#1 in 4546 ms
[2025-08-21 16:02:30][352501916160311][10368 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:03:08][353182207193714][0 ms][INFO] === Request start ===
[2025-08-21 16:03:08][353182207193714][1 ms][DEBUG] START check_frida
[2025-08-21 16:03:08][353182207193714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:03:09][353182207193714][305 ms][DEBUG] SU: done in 304 ms; outroot          4632     1 2332716   4276 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:03:09][353182207193714][305 ms][DEBUG] check_frida: running
[2025-08-21 16:03:09][353182207193714][305 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 16:03:09][353182207193714][306 ms][DEBUG] START check_scloud
[2025-08-21 16:03:09][353182207193714][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:03:09][353182207193714][618 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23805600 90668 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:03:09][353182207193714][618 ms][DEBUG] targetPkg: running
[2025-08-21 16:03:09][353182207193714][618 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:03:09][353182207193714][618 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:03:09][353182207193714][618 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTgyMjA3MTkzNzE0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMEFGMzFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYzNCJ9'" -e "main()" -q"
[2025-08-21 16:03:09][353182207193714][618 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:03:09][353182207193714][618 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTgyMjA3MTkzNzE0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMEFGMzFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYzNCJ9'" -e "main()" -q"
[2025-08-21 16:03:12][353182207193714][3242 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTgyMjA3MTkzNzE0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMEFGMzFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYzNCJ9"\r\n
[2025-08-21 16:03:14][353182207193714][5523 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_023a9e6e-543b-4898-9863-1e46b2d88c5a","id":"QR_023a9e6e-543b-4898-9863-1e46b2d88c5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:03:14][353182207193714][5523 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 16:03:14][353182207193714][5523 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 16:03:14][353182207193714][5523 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:04:10][353684140253299][1 ms][INFO] === Request start ===
[2025-08-21 16:04:10][353684140253299][1 ms][DEBUG] START check_frida
[2025-08-21 16:04:10][353684140253299][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:04:10][353684140253299][300 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2332716   4332 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:04:10][353684140253299][300 ms][DEBUG] check_frida: running
[2025-08-21 16:04:10][353684140253299][300 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 16:04:10][353684140253299][300 ms][DEBUG] START check_internet
[2025-08-21 16:04:10][353684140253299][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:04:11][353684140253299][613 ms][DEBUG] SU: done in 314 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.574/214.574/214.574/0.000 ms\n
[2025-08-21 16:04:11][353684140253299][614 ms][DEBUG] check_internet: online
[2025-08-21 16:04:11][353684140253299][614 ms][DEBUG] END   check_internet in 314 ms
[2025-08-21 16:04:11][353684140253299][614 ms][DEBUG] START check_scloud
[2025-08-21 16:04:11][353684140253299][614 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:04:11][353684140253299][862 ms][DEBUG] SU: done in 248 ms; outu0_a118       7086 20714 23805632 90088 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:04:11][353684140253299][862 ms][DEBUG] targetPkg: running
[2025-08-21 16:04:11][353684140253299][862 ms][DEBUG] END   check_scloud in 248 ms
[2025-08-21 16:04:11][353684140253299][862 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:04:11][353684140253299][862 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQwMjUzMjk5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MFBNU0hGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY1MSJ9'" -e "main()" -q"
[2025-08-21 16:04:11][353684140253299][862 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:04:11][353684140253299][862 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQwMjUzMjk5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MFBNU0hGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY1MSJ9'" -e "main()" -q"
[2025-08-21 16:04:14][353684140253299][3502 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjg0MTQwMjUzMjk5IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MFBNU0hGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjY1MSJ9"\r\n
[2025-08-21 16:04:16][353684140253299][5611 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75a46955-4138-4c51-962e-57cdf905e93e","id":"QR_75a46955-4138-4c51-962e-57cdf905e93e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:04:16][353684140253299][5611 ms][DEBUG] proc_open done in 4749 ms; code=0; res.len=3152
[2025-08-21 16:04:16][353684140253299][5611 ms][DEBUG] END   runCmdUntilRes#1 in 4750 ms
[2025-08-21 16:04:16][353684140253299][5612 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:04:22][359468678354222][0 ms][INFO] === Request start ===
[2025-08-21 16:04:22][359468678354222][1 ms][DEBUG] START check_frida
[2025-08-21 16:04:22][359468678354222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:04:23][359468678354222][298 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4280 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:04:23][359468678354222][298 ms][DEBUG] check_frida: running
[2025-08-21 16:04:23][359468678354222][298 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 16:04:23][359468678354222][299 ms][DEBUG] START check_internet
[2025-08-21 16:04:23][359468678354222][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:04:23][359468678354222][579 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.462/171.462/171.462/0.000 ms\n
[2025-08-21 16:04:23][359468678354222][580 ms][DEBUG] check_internet: online
[2025-08-21 16:04:23][359468678354222][580 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 16:04:23][359468678354222][580 ms][DEBUG] START check_scloud
[2025-08-21 16:04:23][359468678354222][580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:04:23][359468678354222][814 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23805664 89496 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:04:23][359468678354222][814 ms][DEBUG] targetPkg: running
[2025-08-21 16:04:23][359468678354222][814 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 16:04:23][359468678354222][814 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:04:23][359468678354222][814 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NDY4Njc4MzU0MjIyIiwibW9kZWwiOiJTTS1FMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kzMjBMQUxWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjAwMiJ9'" -e "main()" -q"
[2025-08-21 16:04:23][359468678354222][814 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:04:23][359468678354222][814 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NDY4Njc4MzU0MjIyIiwibW9kZWwiOiJTTS1FMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kzMjBMQUxWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjAwMiJ9'" -e "main()" -q"
[2025-08-21 16:04:26][359468678354222][3407 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5NDY4Njc4MzU0MjIyIiwibW9kZWwiOiJTTS1FMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kzMjBMQUxWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjAwMiJ9"\r\n
[2025-08-21 16:04:28][359468678354222][5219 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b5a7b1a5-25f5-4bbd-8834-82cb3526ad75","id":"QR_b5a7b1a5-25f5-4bbd-8834-82cb3526ad75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:04:28][359468678354222][5219 ms][DEBUG] proc_open done in 4405 ms; code=0; res.len=3152
[2025-08-21 16:04:28][359468678354222][5219 ms][DEBUG] END   runCmdUntilRes#1 in 4405 ms
[2025-08-21 16:04:28][359468678354222][5219 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:05:08][354086980537303][1 ms][INFO] === Request start ===
[2025-08-21 16:05:08][354086980537303][1 ms][DEBUG] START check_frida
[2025-08-21 16:05:08][354086980537303][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:05:08][354086980537303][299 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716   4288 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:05:08][354086980537303][299 ms][DEBUG] check_frida: running
[2025-08-21 16:05:08][354086980537303][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 16:05:08][354086980537303][299 ms][DEBUG] START check_scloud
[2025-08-21 16:05:08][354086980537303][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:05:08][354086980537303][611 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23805696 90244 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:05:08][354086980537303][611 ms][DEBUG] targetPkg: running
[2025-08-21 16:05:08][354086980537303][611 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:05:08][354086980537303][612 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:05:08][354086980537303][612 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDg2OTgwNTM3MzAzIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MERUVlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Mjg4In0='" -e "main()" -q"
[2025-08-21 16:05:08][354086980537303][612 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:05:08][354086980537303][612 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDg2OTgwNTM3MzAzIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MERUVlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Mjg4In0='" -e "main()" -q"
[2025-08-21 16:05:11][354086980537303][3204 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDg2OTgwNTM3MzAzIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MERUVlZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Mjg4In0="\r\n
[2025-08-21 16:05:14][354086980537303][6657 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aeb0d218-6ad7-4394-b200-23c17c5c9428","id":"QR_aeb0d218-6ad7-4394-b200-23c17c5c9428","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:05:14][354086980537303][6657 ms][DEBUG] proc_open done in 6045 ms; code=0; res.len=3152
[2025-08-21 16:05:14][354086980537303][6658 ms][DEBUG] END   runCmdUntilRes#1 in 6046 ms
[2025-08-21 16:05:14][354086980537303][6658 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:06:36][351272337660708][0 ms][INFO] === Request start ===
[2025-08-21 16:06:36][351272337660708][1 ms][DEBUG] START check_frida
[2025-08-21 16:06:36][351272337660708][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:06:36][351272337660708][310 ms][DEBUG] SU: done in 310 ms; outroot          4632     1 2332716   4284 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:06:36][351272337660708][311 ms][DEBUG] check_frida: running
[2025-08-21 16:06:36][351272337660708][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 16:06:36][351272337660708][311 ms][DEBUG] START check_internet
[2025-08-21 16:06:36][351272337660708][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:06:37][351272337660708][732 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.655/200.655/200.655/0.000 ms\n
[2025-08-21 16:06:37][351272337660708][732 ms][DEBUG] check_internet: online
[2025-08-21 16:06:37][351272337660708][732 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 16:06:37][351272337660708][732 ms][DEBUG] START check_scloud
[2025-08-21 16:06:37][351272337660708][732 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:06:37][351272337660708][1013 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23805728 90800 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:06:37][351272337660708][1013 ms][DEBUG] targetPkg: running
[2025-08-21 16:06:37][351272337660708][1013 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:06:37][351272337660708][1014 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:06:37][351272337660708][1014 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM3NjYwNzA4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MDg4S0FQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ0NiJ9'" -e "main()" -q"
[2025-08-21 16:06:37][351272337660708][1014 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:06:37][351272337660708][1014 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM3NjYwNzA4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MDg4S0FQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ0NiJ9'" -e "main()" -q"
[2025-08-21 16:06:40][351272337660708][3607 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcyMzM3NjYwNzA4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MDg4S0FQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ0NiJ9"\r\n
[2025-08-21 16:06:42][351272337660708][6247 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4d3c9d2-a3b4-4df7-98d9-1ebbd37db5c3","id":"QR_a4d3c9d2-a3b4-4df7-98d9-1ebbd37db5c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:06:42][351272337660708][6247 ms][DEBUG] proc_open done in 5233 ms; code=0; res.len=3152
[2025-08-21 16:06:42][351272337660708][6247 ms][DEBUG] END   runCmdUntilRes#1 in 5234 ms
[2025-08-21 16:06:42][351272337660708][6247 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:07:08][350824194787528][0 ms][INFO] === Request start ===
[2025-08-21 16:07:08][350824194787528][1 ms][DEBUG] START check_frida
[2025-08-21 16:07:08][350824194787528][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:07:08][350824194787528][283 ms][DEBUG] SU: done in 282 ms; outroot          4632     1 2332716   4316 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:07:08][350824194787528][283 ms][DEBUG] check_frida: running
[2025-08-21 16:07:08][350824194787528][283 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 16:07:08][350824194787528][283 ms][DEBUG] START check_scloud
[2025-08-21 16:07:08][350824194787528][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:07:08][350824194787528][595 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23805760 90316 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:07:08][350824194787528][595 ms][DEBUG] targetPkg: running
[2025-08-21 16:07:08][350824194787528][595 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:07:08][350824194787528][595 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:07:08][350824194787528][596 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTk0Nzg3NTI4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMDdFVEZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjgwIn0='" -e "main()" -q"
[2025-08-21 16:07:08][350824194787528][596 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:07:08][350824194787528][596 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTk0Nzg3NTI4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMDdFVEZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjgwIn0='" -e "main()" -q"
[2025-08-21 16:07:11][350824194787528][3219 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODI0MTk0Nzg3NTI4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMDdFVEZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjgwIn0="\r\n
[2025-08-21 16:07:14][350824194787528][6578 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac297560-a922-47d1-a986-97bdb1d7ce16","id":"QR_ac297560-a922-47d1-a986-97bdb1d7ce16","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:07:14][350824194787528][6579 ms][DEBUG] proc_open done in 5983 ms; code=0; res.len=3152
[2025-08-21 16:07:14][350824194787528][6579 ms][DEBUG] END   runCmdUntilRes#1 in 5983 ms
[2025-08-21 16:07:14][350824194787528][6579 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:07:23][357120484021006][1 ms][INFO] === Request start ===
[2025-08-21 16:07:23][357120484021006][1 ms][DEBUG] START check_frida
[2025-08-21 16:07:23][357120484021006][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:07:23][357120484021006][284 ms][DEBUG] SU: done in 283 ms; outroot          4632     1 2349136   4272 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:07:23][357120484021006][284 ms][DEBUG] check_frida: running
[2025-08-21 16:07:23][357120484021006][284 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 16:07:23][357120484021006][284 ms][DEBUG] START check_scloud
[2025-08-21 16:07:23][357120484021006][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:07:24][357120484021006][581 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23805792 89324 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:07:24][357120484021006][581 ms][DEBUG] targetPkg: running
[2025-08-21 16:07:24][357120484021006][581 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:07:24][357120484021006][581 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:07:24][357120484021006][582 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MTIwNDg0MDIxMDA2IiwibW9kZWwiOiJTTS1GNzMxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlQ1TlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODE0In0='" -e "main()" -q"
[2025-08-21 16:07:24][357120484021006][582 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:07:24][357120484021006][582 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MTIwNDg0MDIxMDA2IiwibW9kZWwiOiJTTS1GNzMxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlQ1TlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODE0In0='" -e "main()" -q"
[2025-08-21 16:07:26][357120484021006][3190 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MTIwNDg0MDIxMDA2IiwibW9kZWwiOiJTTS1GNzMxVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlQ1TlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODE0In0="\r\n
[2025-08-21 16:07:29][357120484021006][6049 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_499407a1-8f13-48c3-bc80-2f5105cbf1c7","id":"QR_499407a1-8f13-48c3-bc80-2f5105cbf1c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:07:29][357120484021006][6049 ms][DEBUG] proc_open done in 5467 ms; code=0; res.len=3152
[2025-08-21 16:07:29][357120484021006][6049 ms][DEBUG] END   runCmdUntilRes#1 in 5467 ms
[2025-08-21 16:07:29][357120484021006][6049 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:09:08][354068195299168][1 ms][INFO] === Request start ===
[2025-08-21 16:09:08][354068195299168][1 ms][DEBUG] START check_frida
[2025-08-21 16:09:08][354068195299168][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:09:09][354068195299168][265 ms][DEBUG] SU: done in 263 ms; outroot          4632     1 2332716   4284 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:09:09][354068195299168][265 ms][DEBUG] check_frida: running
[2025-08-21 16:09:09][354068195299168][265 ms][DEBUG] END   check_frida in 263 ms
[2025-08-21 16:09:09][354068195299168][265 ms][DEBUG] START check_scloud
[2025-08-21 16:09:09][354068195299168][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:09:09][354068195299168][561 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23805824 89940 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:09:09][354068195299168][562 ms][DEBUG] targetPkg: running
[2025-08-21 16:09:09][354068195299168][562 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:09:09][354068195299168][562 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:09:09][354068195299168][562 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDY4MTk1Mjk5MTY4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFFLVDZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU2NyJ9'" -e "main()" -q"
[2025-08-21 16:09:09][354068195299168][562 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:09:09][354068195299168][562 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDY4MTk1Mjk5MTY4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFFLVDZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU2NyJ9'" -e "main()" -q"
[2025-08-21 16:09:11][354068195299168][3170 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDY4MTk1Mjk5MTY4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMFFLVDZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU2NyJ9"\r\n
[2025-08-21 16:09:14][354068195299168][5451 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6bf3cd6-cc1d-49f2-84cf-b135512dcca7","id":"QR_a6bf3cd6-cc1d-49f2-84cf-b135512dcca7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:09:14][354068195299168][5451 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 16:09:14][354068195299168][5451 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 16:09:14][354068195299168][5451 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:15:07][351879980972907][1 ms][INFO] === Request start ===
[2025-08-21 16:15:07][351879980972907][1 ms][DEBUG] START check_frida
[2025-08-21 16:15:07][351879980972907][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:15:07][351879980972907][299 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2332716   4308 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:15:07][351879980972907][299 ms][DEBUG] check_frida: running
[2025-08-21 16:15:07][351879980972907][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 16:15:07][351879980972907][299 ms][DEBUG] START check_scloud
[2025-08-21 16:15:07][351879980972907][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:15:08][351879980972907][612 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23805856 89776 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:15:08][351879980972907][612 ms][DEBUG] targetPkg: running
[2025-08-21 16:15:08][351879980972907][612 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 16:15:08][351879980972907][612 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:15:08][351879980972907][612 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc5OTgwOTcyOTA3IiwibW9kZWwiOiJTTS1BNTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMDJDTjZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTczIn0='" -e "main()" -q"
[2025-08-21 16:15:08][351879980972907][612 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:15:08][351879980972907][612 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc5OTgwOTcyOTA3IiwibW9kZWwiOiJTTS1BNTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMDJDTjZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTczIn0='" -e "main()" -q"
[2025-08-21 16:15:09][351317841311619][1 ms][INFO] === Request start ===
[2025-08-21 16:15:10][351879980972907][3236 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc5OTgwOTcyOTA3IiwibW9kZWwiOiJTTS1BNTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMDJDTjZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTczIn0="\r\n
[2025-08-21 16:15:15][351879980972907][7876 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16c6c9d6-65d2-4774-83b8-ea0898168b47","id":"QR_16c6c9d6-65d2-4774-83b8-ea0898168b47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:15:15][351879980972907][7876 ms][DEBUG] proc_open done in 7264 ms; code=0; res.len=3152
[2025-08-21 16:15:15][351879980972907][7876 ms][DEBUG] END   runCmdUntilRes#1 in 7264 ms
[2025-08-21 16:15:15][351879980972907][7876 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:15:16][351317841311619][7105 ms][DEBUG] START check_frida
[2025-08-21 16:15:16][351317841311619][7106 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:15:16][351317841311619][7402 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4288 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:15:16][351317841311619][7402 ms][DEBUG] check_frida: running
[2025-08-21 16:15:16][351317841311619][7402 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 16:15:16][351317841311619][7402 ms][DEBUG] START check_scloud
[2025-08-21 16:15:16][351317841311619][7402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:15:16][351317841311619][7683 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23805888 90348 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:15:16][351317841311619][7684 ms][DEBUG] targetPkg: running
[2025-08-21 16:15:16][351317841311619][7684 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:15:16][351317841311619][7684 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:15:16][351317841311619][7684 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzE3ODQxMzExNjE5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMTRYWFZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwOSJ9'" -e "main()" -q"
[2025-08-21 16:15:16][351317841311619][7684 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:15:16][351317841311619][7684 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzE3ODQxMzExNjE5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMTRYWFZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwOSJ9'" -e "main()" -q"
[2025-08-21 16:15:19][351317841311619][10339 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzE3ODQxMzExNjE5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMTRYWFZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMwOSJ9"\r\n
[2025-08-21 16:15:21][351317841311619][12714 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eda5ad04-73fd-4007-ba57-eca0363751f9","id":"QR_eda5ad04-73fd-4007-ba57-eca0363751f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:15:21][351317841311619][12714 ms][DEBUG] proc_open done in 5030 ms; code=0; res.len=3152
[2025-08-21 16:15:21][351317841311619][12714 ms][DEBUG] END   runCmdUntilRes#1 in 5030 ms
[2025-08-21 16:15:21][351317841311619][12714 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:15:28][352743950953710][0 ms][INFO] === Request start ===
[2025-08-21 16:15:28][352743950953710][0 ms][DEBUG] START check_frida
[2025-08-21 16:15:28][352743950953710][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:15:28][352743950953710][272 ms][DEBUG] SU: done in 272 ms; outroot          4632     1 2349136   4300 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:15:28][352743950953710][272 ms][DEBUG] check_frida: running
[2025-08-21 16:15:28][352743950953710][273 ms][DEBUG] END   check_frida in 272 ms
[2025-08-21 16:15:28][352743950953710][273 ms][DEBUG] START check_scloud
[2025-08-21 16:15:28][352743950953710][273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:15:28][352743950953710][585 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23805920 89440 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:15:28][352743950953710][585 ms][DEBUG] targetPkg: running
[2025-08-21 16:15:28][352743950953710][585 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:15:28][352743950953710][585 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:15:28][352743950953710][585 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzQzOTUwOTUzNzEwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEs0VjZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYzNCJ9'" -e "main()" -q"
[2025-08-21 16:15:28][352743950953710][585 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:15:28][352743950953710][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzQzOTUwOTUzNzEwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEs0VjZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYzNCJ9'" -e "main()" -q"
[2025-08-21 16:15:31][352743950953710][3193 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzQzOTUwOTUzNzEwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MEs0VjZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYzNCJ9"\r\n
[2025-08-21 16:15:33][352743950953710][5021 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bfaba797-640b-4fb9-a970-3d415ed8be94","id":"QR_bfaba797-640b-4fb9-a970-3d415ed8be94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:15:33][352743950953710][5021 ms][DEBUG] proc_open done in 4436 ms; code=0; res.len=3152
[2025-08-21 16:15:33][352743950953710][5021 ms][DEBUG] END   runCmdUntilRes#1 in 4436 ms
[2025-08-21 16:15:33][352743950953710][5021 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:15:42][357967978429354][0 ms][INFO] === Request start ===
[2025-08-21 16:15:42][357967978429354][1 ms][DEBUG] START check_frida
[2025-08-21 16:15:42][357967978429354][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:15:42][357967978429354][252 ms][DEBUG] SU: done in 251 ms; outroot          4632     1 2349136   4276 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:15:42][357967978429354][253 ms][DEBUG] check_frida: running
[2025-08-21 16:15:42][357967978429354][253 ms][DEBUG] END   check_frida in 252 ms
[2025-08-21 16:15:42][357967978429354][253 ms][DEBUG] START check_scloud
[2025-08-21 16:15:42][357967978429354][253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:15:43][357967978429354][533 ms][DEBUG] SU: done in 280 ms; outu0_a118       7086 20714 23805952 90008 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:15:43][357967978429354][534 ms][DEBUG] targetPkg: running
[2025-08-21 16:15:43][357967978429354][534 ms][DEBUG] END   check_scloud in 280 ms
[2025-08-21 16:15:43][357967978429354][534 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:15:43][357967978429354][534 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc4NDI5MzU0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhKNFlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQyMCJ9'" -e "main()" -q"
[2025-08-21 16:15:43][357967978429354][534 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:15:43][357967978429354][534 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc4NDI5MzU0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhKNFlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQyMCJ9'" -e "main()" -q"
[2025-08-21 16:15:45][357967978429354][3127 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTY3OTc4NDI5MzU0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhKNFlBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQyMCJ9"\r\n
[2025-08-21 16:15:47][357967978429354][5126 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7ffefdb-4c6c-4157-b454-e3594703b267","id":"QR_e7ffefdb-4c6c-4157-b454-e3594703b267","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:15:47][357967978429354][5127 ms][DEBUG] proc_open done in 4593 ms; code=0; res.len=3152
[2025-08-21 16:15:47][357967978429354][5127 ms][DEBUG] END   runCmdUntilRes#1 in 4593 ms
[2025-08-21 16:15:47][357967978429354][5127 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:16:07][354721880696078][0 ms][INFO] === Request start ===
[2025-08-21 16:16:07][354721880696078][1 ms][DEBUG] START check_frida
[2025-08-21 16:16:07][354721880696078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:16:07][354721880696078][298 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716   4296 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:16:07][354721880696078][298 ms][DEBUG] check_frida: running
[2025-08-21 16:16:07][354721880696078][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 16:16:07][354721880696078][298 ms][DEBUG] START check_internet
[2025-08-21 16:16:07][354721880696078][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:16:08][354721880696078][813 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.180/199.180/199.180/0.000 ms\n
[2025-08-21 16:16:08][354721880696078][813 ms][DEBUG] check_internet: online
[2025-08-21 16:16:08][354721880696078][813 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 16:16:08][354721880696078][813 ms][DEBUG] START check_scloud
[2025-08-21 16:16:08][354721880696078][813 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:16:08][354721880696078][1079 ms][DEBUG] SU: done in 266 ms; outu0_a118       7086 20714 23805984 90648 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:16:08][354721880696078][1079 ms][DEBUG] targetPkg: running
[2025-08-21 16:16:08][354721880696078][1079 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 16:16:08][354721880696078][1079 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:16:08][354721880696078][1079 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzIxODgwNjk2MDc4IiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1cxMEg0VzRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc4MiJ9'" -e "main()" -q"
[2025-08-21 16:16:08][354721880696078][1079 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:16:08][354721880696078][1079 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzIxODgwNjk2MDc4IiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1cxMEg0VzRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc4MiJ9'" -e "main()" -q"
[2025-08-21 16:16:11][354721880696078][3656 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzIxODgwNjk2MDc4IiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1cxMEg0VzRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc4MiJ9"\r\n
[2025-08-21 16:16:13][354721880696078][5609 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7816e43-fb41-49f9-9a3b-397b4a45d25d","id":"QR_e7816e43-fb41-49f9-9a3b-397b4a45d25d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:16:13][354721880696078][5610 ms][DEBUG] proc_open done in 4531 ms; code=0; res.len=3152
[2025-08-21 16:16:13][354721880696078][5610 ms][DEBUG] END   runCmdUntilRes#1 in 4531 ms
[2025-08-21 16:16:13][354721880696078][5610 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:17:07][350142320489442][1 ms][INFO] === Request start ===
[2025-08-21 16:17:07][350142320489442][1 ms][DEBUG] START check_frida
[2025-08-21 16:17:07][350142320489442][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:17:08][350142320489442][301 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716   4304 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:17:08][350142320489442][301 ms][DEBUG] check_frida: running
[2025-08-21 16:17:08][350142320489442][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 16:17:08][350142320489442][301 ms][DEBUG] START check_scloud
[2025-08-21 16:17:08][350142320489442][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:17:08][350142320489442][583 ms][DEBUG] SU: done in 282 ms; outu0_a118       7086 20714 23806016 90072 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:17:08][350142320489442][583 ms][DEBUG] targetPkg: running
[2025-08-21 16:17:08][350142320489442][583 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 16:17:08][350142320489442][583 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:17:08][350142320489442][583 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTQyMzIwNDg5NDQyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MFc3Rk1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM0MyJ9'" -e "main()" -q"
[2025-08-21 16:17:08][350142320489442][583 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:17:08][350142320489442][583 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTQyMzIwNDg5NDQyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MFc3Rk1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM0MyJ9'" -e "main()" -q"
[2025-08-21 16:17:11][350142320489442][3207 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTQyMzIwNDg5NDQyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk2MFc3Rk1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM0MyJ9"\r\n
[2025-08-21 16:17:13][350142320489442][5362 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8e7b8be-344d-4490-a055-e50c016949f0","id":"QR_b8e7b8be-344d-4490-a055-e50c016949f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:17:13][350142320489442][5362 ms][DEBUG] proc_open done in 4779 ms; code=0; res.len=3152
[2025-08-21 16:17:13][350142320489442][5362 ms][DEBUG] END   runCmdUntilRes#1 in 4779 ms
[2025-08-21 16:17:13][350142320489442][5362 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:18:07][354360416065027][0 ms][INFO] === Request start ===
[2025-08-21 16:18:07][354360416065027][1 ms][DEBUG] START check_frida
[2025-08-21 16:18:07][354360416065027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:18:08][354360416065027][325 ms][DEBUG] SU: done in 324 ms; outroot          4632     1 2332716   4312 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:18:08][354360416065027][325 ms][DEBUG] check_frida: running
[2025-08-21 16:18:08][354360416065027][325 ms][DEBUG] END   check_frida in 324 ms
[2025-08-21 16:18:08][354360416065027][325 ms][DEBUG] START check_internet
[2025-08-21 16:18:08][354360416065027][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:18:08][354360416065027][653 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.914/216.914/216.914/0.000 ms\n
[2025-08-21 16:18:08][354360416065027][653 ms][DEBUG] check_internet: online
[2025-08-21 16:18:08][354360416065027][653 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 16:18:08][354360416065027][654 ms][DEBUG] START check_scloud
[2025-08-21 16:18:08][354360416065027][654 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:18:08][354360416065027][903 ms][DEBUG] SU: done in 249 ms; outu0_a118       7086 20714 23806048 88756 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:18:08][354360416065027][903 ms][DEBUG] targetPkg: running
[2025-08-21 16:18:08][354360416065027][903 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 16:18:08][354360416065027][903 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:18:08][354360416065027][903 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzYwNDE2MDY1MDI3IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRCMTBYTVFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE0OSJ9'" -e "main()" -q"
[2025-08-21 16:18:08][354360416065027][903 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:18:08][354360416065027][903 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzYwNDE2MDY1MDI3IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRCMTBYTVFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE0OSJ9'" -e "main()" -q"
[2025-08-21 16:18:11][354360416065027][3543 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MzYwNDE2MDY1MDI3IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRCMTBYTVFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE0OSJ9"\r\n
[2025-08-21 16:18:13][354360416065027][5745 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_887f29e7-0f93-467d-805c-2274472bb5b9","id":"QR_887f29e7-0f93-467d-805c-2274472bb5b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:18:13][354360416065027][5746 ms][DEBUG] proc_open done in 4842 ms; code=0; res.len=3152
[2025-08-21 16:18:13][354360416065027][5746 ms][DEBUG] END   runCmdUntilRes#1 in 4842 ms
[2025-08-21 16:18:13][354360416065027][5746 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:18:20][353568697294162][0 ms][INFO] === Request start ===
[2025-08-21 16:18:20][353568697294162][1 ms][DEBUG] START check_frida
[2025-08-21 16:18:20][353568697294162][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:18:20][353568697294162][298 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4264 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:18:20][353568697294162][298 ms][DEBUG] check_frida: running
[2025-08-21 16:18:20][353568697294162][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 16:18:20][353568697294162][298 ms][DEBUG] START check_internet
[2025-08-21 16:18:20][353568697294162][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:18:20][353568697294162][579 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.419/175.419/175.419/0.000 ms\n
[2025-08-21 16:18:20][353568697294162][579 ms][DEBUG] check_internet: online
[2025-08-21 16:18:20][353568697294162][579 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 16:18:20][353568697294162][579 ms][DEBUG] START check_scloud
[2025-08-21 16:18:20][353568697294162][579 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:18:21][353568697294162][814 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23806080 89716 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:18:21][353568697294162][814 ms][DEBUG] targetPkg: running
[2025-08-21 16:18:21][353568697294162][814 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 16:18:21][353568697294162][814 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:18:21][353568697294162][814 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTY4Njk3Mjk0MTYyIiwibW9kZWwiOiJTTS1BMjM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQzMDlXWDZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzAzIn0='" -e "main()" -q"
[2025-08-21 16:18:21][353568697294162][814 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:18:21][353568697294162][814 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTY4Njk3Mjk0MTYyIiwibW9kZWwiOiJTTS1BMjM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQzMDlXWDZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzAzIn0='" -e "main()" -q"
[2025-08-21 16:18:23][353568697294162][3438 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNTY4Njk3Mjk0MTYyIiwibW9kZWwiOiJTTS1BMjM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQzMDlXWDZNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzAzIn0="\r\n
[2025-08-21 16:18:26][353568697294162][6406 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c341488-0777-4bb4-819e-372d73150d83","id":"QR_8c341488-0777-4bb4-819e-372d73150d83","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:18:26][353568697294162][6406 ms][DEBUG] proc_open done in 5592 ms; code=0; res.len=3152
[2025-08-21 16:18:26][353568697294162][6406 ms][DEBUG] END   runCmdUntilRes#1 in 5592 ms
[2025-08-21 16:18:26][353568697294162][6406 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:18:34][352945211745922][0 ms][INFO] === Request start ===
[2025-08-21 16:18:34][352945211745922][1 ms][DEBUG] START check_frida
[2025-08-21 16:18:34][352945211745922][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:18:34][352945211745922][298 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136   4288 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:18:34][352945211745922][298 ms][DEBUG] check_frida: running
[2025-08-21 16:18:34][352945211745922][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 16:18:34][352945211745922][298 ms][DEBUG] START check_internet
[2025-08-21 16:18:34][352945211745922][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:18:35][352945211745922][594 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=183 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 183.263/183.263/183.263/0.000 ms\n
[2025-08-21 16:18:35][352945211745922][594 ms][DEBUG] check_internet: online
[2025-08-21 16:18:35][352945211745922][594 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 16:18:35][352945211745922][595 ms][DEBUG] START check_scloud
[2025-08-21 16:18:35][352945211745922][595 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:18:35][352945211745922][876 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23806112 89432 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:18:35][352945211745922][876 ms][DEBUG] targetPkg: running
[2025-08-21 16:18:35][352945211745922][876 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:18:35][352945211745922][876 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:18:35][352945211745922][876 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTQ1MjExNzQ1OTIyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MTBYV0RYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg0MSJ9'" -e "main()" -q"
[2025-08-21 16:18:35][352945211745922][876 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:18:35][352945211745922][876 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTQ1MjExNzQ1OTIyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MTBYV0RYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg0MSJ9'" -e "main()" -q"
[2025-08-21 16:18:38][352945211745922][3515 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTQ1MjExNzQ1OTIyIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MTBYV0RYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjg0MSJ9"\r\n
[2025-08-21 16:18:40][352945211745922][5593 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c41f3b9b-ec05-425e-93f9-e07f12200508","id":"QR_c41f3b9b-ec05-425e-93f9-e07f12200508","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:18:40][352945211745922][5593 ms][DEBUG] proc_open done in 4717 ms; code=0; res.len=3152
[2025-08-21 16:18:40][352945211745922][5593 ms][DEBUG] END   runCmdUntilRes#1 in 4717 ms
[2025-08-21 16:18:40][352945211745922][5593 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:19:08][353204339825771][1 ms][INFO] === Request start ===
[2025-08-21 16:19:08][353204339825771][1 ms][DEBUG] START check_frida
[2025-08-21 16:19:08][353204339825771][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:19:09][353204339825771][304 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2332716   4312 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:19:09][353204339825771][304 ms][DEBUG] check_frida: running
[2025-08-21 16:19:09][353204339825771][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 16:19:09][353204339825771][304 ms][DEBUG] START check_scloud
[2025-08-21 16:19:09][353204339825771][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:19:09][353204339825771][601 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23806144 90024 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:19:09][353204339825771][601 ms][DEBUG] targetPkg: running
[2025-08-21 16:19:09][353204339825771][601 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:19:09][353204339825771][601 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:19:09][353204339825771][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjA0MzM5ODI1NzcxIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MThFWENGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM2MiJ9'" -e "main()" -q"
[2025-08-21 16:19:09][353204339825771][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:19:09][353204339825771][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjA0MzM5ODI1NzcxIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MThFWENGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM2MiJ9'" -e "main()" -q"
[2025-08-21 16:19:11][353204339825771][3209 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjA0MzM5ODI1NzcxIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MThFWENGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM2MiJ9"\r\n
[2025-08-21 16:19:13][353204339825771][5240 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_295a1513-eb07-405b-90d6-13cf5e02be56","id":"QR_295a1513-eb07-405b-90d6-13cf5e02be56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:19:13][353204339825771][5240 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 16:19:13][353204339825771][5240 ms][DEBUG] END   runCmdUntilRes#1 in 4639 ms
[2025-08-21 16:19:13][353204339825771][5240 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:19:19][353684143388894][0 ms][INFO] === Request start ===
[2025-08-21 16:19:19][353684143388894][1 ms][DEBUG] START check_frida
[2025-08-21 16:19:19][353684143388894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:19:19][353684143388894][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136   4296 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:19:19][353684143388894][297 ms][DEBUG] check_frida: running
[2025-08-21 16:19:19][353684143388894][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 16:19:19][353684143388894][297 ms][DEBUG] START check_scloud
[2025-08-21 16:19:19][353684143388894][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:19:20][353684143388894][530 ms][DEBUG] SU: done in 233 ms; outu0_a118       7086 20714 23806176 89392 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:19:20][353684143388894][530 ms][DEBUG] targetPkg: running
[2025-08-21 16:19:20][353684143388894][530 ms][DEBUG] END   check_scloud in 233 ms
[2025-08-21 16:19:20][353684143388894][530 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:19:20][353684143388894][530 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQzMzg4ODk0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFBRWVpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIwNyJ9'" -e "main()" -q"
[2025-08-21 16:19:20][353684143388894][530 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:19:20][353684143388894][530 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQzMzg4ODk0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFBRWVpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIwNyJ9'" -e "main()" -q"
[2025-08-21 16:19:22][353684143388894][3155 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjg0MTQzMzg4ODk0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MFBRWVpaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIwNyJ9"\r\n
[2025-08-21 16:19:24][353684143388894][4998 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb67b28f-b57b-44f9-b0dc-ae501f19c573","id":"QR_cb67b28f-b57b-44f9-b0dc-ae501f19c573","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:19:24][353684143388894][4998 ms][DEBUG] proc_open done in 4468 ms; code=0; res.len=3152
[2025-08-21 16:19:24][353684143388894][4998 ms][DEBUG] END   runCmdUntilRes#1 in 4468 ms
[2025-08-21 16:19:24][353684143388894][4998 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:20:09][350287317347804][0 ms][INFO] === Request start ===
[2025-08-21 16:20:09][350287317347804][1 ms][DEBUG] START check_frida
[2025-08-21 16:20:09][350287317347804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:20:09][350287317347804][262 ms][DEBUG] SU: done in 261 ms; outroot          4632     1 2332716   4272 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:20:09][350287317347804][262 ms][DEBUG] check_frida: running
[2025-08-21 16:20:09][350287317347804][262 ms][DEBUG] END   check_frida in 261 ms
[2025-08-21 16:20:09][350287317347804][262 ms][DEBUG] START check_internet
[2025-08-21 16:20:09][350287317347804][262 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:20:09][350287317347804][590 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.640/218.640/218.640/0.000 ms\n
[2025-08-21 16:20:09][350287317347804][590 ms][DEBUG] check_internet: online
[2025-08-21 16:20:09][350287317347804][590 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 16:20:09][350287317347804][590 ms][DEBUG] START check_scloud
[2025-08-21 16:20:09][350287317347804][590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:20:10][350287317347804][855 ms][DEBUG] SU: done in 265 ms; outu0_a118       7086 20714 23806208 89976 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:20:10][350287317347804][855 ms][DEBUG] targetPkg: running
[2025-08-21 16:20:10][350287317347804][855 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 16:20:10][350287317347804][855 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:20:10][350287317347804][855 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE3MzQ3ODA0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMDJMRlZBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY4NCJ9'" -e "main()" -q"
[2025-08-21 16:20:10][350287317347804][855 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:20:10][350287317347804][855 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE3MzQ3ODA0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMDJMRlZBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY4NCJ9'" -e "main()" -q"
[2025-08-21 16:20:12][350287317347804][3479 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjg3MzE3MzQ3ODA0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMDJMRlZBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDY4NCJ9"\r\n
[2025-08-21 16:20:14][350287317347804][5807 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3a230dc-e5bd-42ea-9763-e33eab85b7f2","id":"QR_d3a230dc-e5bd-42ea-9763-e33eab85b7f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:20:14][350287317347804][5807 ms][DEBUG] proc_open done in 4952 ms; code=0; res.len=3152
[2025-08-21 16:20:14][350287317347804][5807 ms][DEBUG] END   runCmdUntilRes#1 in 4952 ms
[2025-08-21 16:20:14][350287317347804][5807 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:21:07][354354550929288][1 ms][INFO] === Request start ===
[2025-08-21 16:21:07][354354550929288][1 ms][DEBUG] START check_frida
[2025-08-21 16:21:07][354354550929288][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:21:07][354354550929288][301 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716   4312 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:21:07][354354550929288][301 ms][DEBUG] check_frida: running
[2025-08-21 16:21:07][354354550929288][301 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 16:21:07][354354550929288][301 ms][DEBUG] START check_scloud
[2025-08-21 16:21:07][354354550929288][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:21:07][354354550929288][597 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23806240 90564 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:21:07][354354550929288][597 ms][DEBUG] targetPkg: running
[2025-08-21 16:21:07][354354550929288][598 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:21:07][354354550929288][598 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:21:07][354354550929288][598 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzU0NTUwOTI5Mjg4IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFI4MDM1TlFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzAxNSJ9'" -e "main()" -q"
[2025-08-21 16:21:07][354354550929288][598 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:21:07][354354550929288][598 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzU0NTUwOTI5Mjg4IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFI4MDM1TlFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzAxNSJ9'" -e "main()" -q"
[2025-08-21 16:21:10][354354550929288][3206 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MzU0NTUwOTI5Mjg4IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFI4MDM1TlFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzAxNSJ9"\r\n
[2025-08-21 16:21:12][354354550929288][4955 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21aa844d-e5b6-4aff-8fda-02d98aa3a7f8","id":"QR_21aa844d-e5b6-4aff-8fda-02d98aa3a7f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:21:12][354354550929288][4956 ms][DEBUG] proc_open done in 4358 ms; code=0; res.len=3152
[2025-08-21 16:21:12][354354550929288][4956 ms][DEBUG] END   runCmdUntilRes#1 in 4358 ms
[2025-08-21 16:21:12][354354550929288][4956 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:22:18][357799150707921][1 ms][INFO] === Request start ===
[2025-08-21 16:22:18][357799150707921][1 ms][DEBUG] START check_frida
[2025-08-21 16:22:18][357799150707921][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:22:19][357799150707921][309 ms][DEBUG] SU: done in 307 ms; outroot          4632     1 2332716   4296 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:22:19][357799150707921][309 ms][DEBUG] check_frida: running
[2025-08-21 16:22:19][357799150707921][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 16:22:19][357799150707921][309 ms][DEBUG] START check_internet
[2025-08-21 16:22:19][357799150707921][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:22:19][357799150707921][762 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.334/201.334/201.334/0.000 ms\n
[2025-08-21 16:22:19][357799150707921][762 ms][DEBUG] check_internet: online
[2025-08-21 16:22:19][357799150707921][762 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 16:22:19][357799150707921][762 ms][DEBUG] START check_scloud
[2025-08-21 16:22:19][357799150707921][762 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:22:19][357799150707921][1043 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23806272 90136 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:22:19][357799150707921][1043 ms][DEBUG] targetPkg: running
[2025-08-21 16:22:19][357799150707921][1043 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:22:19][357799150707921][1043 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:22:19][357799150707921][1043 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzk5MTUwNzA3OTIxIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c0MDJSWkFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzUxIn0='" -e "main()" -q"
[2025-08-21 16:22:19][357799150707921][1043 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:22:19][357799150707921][1043 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzk5MTUwNzA3OTIxIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c0MDJSWkFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzUxIn0='" -e "main()" -q"
[2025-08-21 16:22:22][357799150707921][3698 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Nzk5MTUwNzA3OTIxIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c0MDJSWkFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzUxIn0="\r\n
[2025-08-21 16:22:25][357799150707921][6776 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3a5ca25-6f09-4ea4-93df-1aea4e1a6e35","id":"QR_a3a5ca25-6f09-4ea4-93df-1aea4e1a6e35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:22:25][357799150707921][6776 ms][DEBUG] proc_open done in 5732 ms; code=0; res.len=3152
[2025-08-21 16:22:25][357799150707921][6776 ms][DEBUG] END   runCmdUntilRes#1 in 5733 ms
[2025-08-21 16:22:25][357799150707921][6776 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:22:32][352288965012177][0 ms][INFO] === Request start ===
[2025-08-21 16:22:32][352288965012177][1 ms][DEBUG] START check_frida
[2025-08-21 16:22:32][352288965012177][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:22:33][352288965012177][255 ms][DEBUG] SU: done in 254 ms; outroot          4632     1 2349136   4304 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:22:33][352288965012177][255 ms][DEBUG] check_frida: running
[2025-08-21 16:22:33][352288965012177][255 ms][DEBUG] END   check_frida in 254 ms
[2025-08-21 16:22:33][352288965012177][255 ms][DEBUG] START check_internet
[2025-08-21 16:22:33][352288965012177][255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:22:33][352288965012177][536 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.295/175.295/175.295/0.000 ms\n
[2025-08-21 16:22:33][352288965012177][536 ms][DEBUG] check_internet: online
[2025-08-21 16:22:33][352288965012177][536 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 16:22:33][352288965012177][536 ms][DEBUG] START check_scloud
[2025-08-21 16:22:33][352288965012177][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:22:33][352288965012177][833 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23806304 89484 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:22:33][352288965012177][833 ms][DEBUG] targetPkg: running
[2025-08-21 16:22:33][352288965012177][833 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:22:33][352288965012177][833 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:22:33][352288965012177][833 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTY1MDEyMTc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MTFCNUFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNWU0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDM5OCJ9'" -e "main()" -q"
[2025-08-21 16:22:33][352288965012177][833 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:22:33][352288965012177][833 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTY1MDEyMTc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MTFCNUFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNWU0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDM5OCJ9'" -e "main()" -q"
[2025-08-21 16:22:36][352288965012177][3473 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjg4OTY1MDEyMTc3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ2MTFCNUFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNWU0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDM5OCJ9"\r\n
[2025-08-21 16:22:38][352288965012177][5738 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0583485-2f3d-4339-b087-5bdc7cbe3fc3","id":"QR_b0583485-2f3d-4339-b087-5bdc7cbe3fc3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:22:38][352288965012177][5738 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 16:22:38][352288965012177][5738 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 16:22:38][352288965012177][5738 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:23:34][352397453069407][1 ms][INFO] === Request start ===
[2025-08-21 16:23:34][352397453069407][2 ms][DEBUG] START check_frida
[2025-08-21 16:23:34][352397453069407][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:23:35][352397453069407][304 ms][DEBUG] SU: done in 302 ms; outroot          4632     1 2332716   4312 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:23:35][352397453069407][304 ms][DEBUG] check_frida: running
[2025-08-21 16:23:35][352397453069407][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 16:23:35][352397453069407][304 ms][DEBUG] START check_scloud
[2025-08-21 16:23:35][352397453069407][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:23:35][352397453069407][554 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23806336 90092 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:23:35][352397453069407][555 ms][DEBUG] targetPkg: running
[2025-08-21 16:23:35][352397453069407][555 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 16:23:35][352397453069407][555 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:23:35][352397453069407][555 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUzMDY5NDA3IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDRDUzJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM0NyJ9'" -e "main()" -q"
[2025-08-21 16:23:35][352397453069407][555 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:23:35][352397453069407][555 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUzMDY5NDA3IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDRDUzJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM0NyJ9'" -e "main()" -q"
[2025-08-21 16:23:38][352397453069407][3194 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzk3NDUzMDY5NDA3IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFcxMDRDUzJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM0NyJ9"\r\n
[2025-08-21 16:23:40][352397453069407][5521 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc0b3df7-0882-4604-a961-7a53b60ca3bd","id":"QR_bc0b3df7-0882-4604-a961-7a53b60ca3bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:23:40][352397453069407][5522 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 16:23:40][352397453069407][5522 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-21 16:23:40][352397453069407][5522 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:24:07][350026550930409][0 ms][INFO] === Request start ===
[2025-08-21 16:24:07][350026550930409][1 ms][DEBUG] START check_frida
[2025-08-21 16:24:07][350026550930409][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:24:07][350026550930409][293 ms][DEBUG] SU: done in 292 ms; outroot          4632     1 2332716   4272 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:24:07][350026550930409][293 ms][DEBUG] check_frida: running
[2025-08-21 16:24:07][350026550930409][293 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 16:24:07][350026550930409][293 ms][DEBUG] START check_internet
[2025-08-21 16:24:07][350026550930409][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:24:08][350026550930409][637 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.690/241.690/241.690/0.000 ms\n
[2025-08-21 16:24:08][350026550930409][637 ms][DEBUG] check_internet: online
[2025-08-21 16:24:08][350026550930409][637 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 16:24:08][350026550930409][637 ms][DEBUG] START check_scloud
[2025-08-21 16:24:08][350026550930409][637 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:24:08][350026550930409][933 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23806368 90648 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:24:08][350026550930409][933 ms][DEBUG] targetPkg: running
[2025-08-21 16:24:08][350026550930409][933 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:24:08][350026550930409][934 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:24:08][350026550930409][934 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI2NTUwOTMwNDA5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MUM2VEVKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQxNyJ9'" -e "main()" -q"
[2025-08-21 16:24:08][350026550930409][934 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:24:08][350026550930409][934 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI2NTUwOTMwNDA5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MUM2VEVKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQxNyJ9'" -e "main()" -q"
[2025-08-21 16:24:09][356356732736513][1 ms][INFO] === Request start ===
[2025-08-21 16:24:11][350026550930409][3573 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDI2NTUwOTMwNDA5IiwibW9kZWwiOiJTTS1BMDQ3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ5MUM2VEVKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQxNyJ9"\r\n
[2025-08-21 16:24:13][350026550930409][5541 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_750e3e8a-13ed-44ea-9dc6-c351782f3b84","id":"QR_750e3e8a-13ed-44ea-9dc6-c351782f3b84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:24:13][350026550930409][5542 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 16:24:13][350026550930409][5542 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-21 16:24:13][350026550930409][5542 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:24:14][356356732736513][4058 ms][DEBUG] START check_frida
[2025-08-21 16:24:14][356356732736513][4058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:24:14][356356732736513][4339 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136   4308 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:24:14][356356732736513][4339 ms][DEBUG] check_frida: running
[2025-08-21 16:24:14][356356732736513][4339 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 16:24:14][356356732736513][4339 ms][DEBUG] START check_internet
[2025-08-21 16:24:14][356356732736513][4339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:24:14][356356732736513][4573 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.054/136.054/136.054/0.000 ms\n
[2025-08-21 16:24:14][356356732736513][4573 ms][DEBUG] check_internet: online
[2025-08-21 16:24:14][356356732736513][4573 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 16:24:14][356356732736513][4573 ms][DEBUG] START check_scloud
[2025-08-21 16:24:14][356356732736513][4573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:24:14][356356732736513][4807 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23806400 90200 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:24:14][356356732736513][4808 ms][DEBUG] targetPkg: running
[2025-08-21 16:24:14][356356732736513][4808 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 16:24:14][356356732736513][4808 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:24:14][356356732736513][4808 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzU2NzMyNzM2NTEzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q2MDNLUVFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY4OSJ9'" -e "main()" -q"
[2025-08-21 16:24:14][356356732736513][4808 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:24:14][356356732736513][4808 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzU2NzMyNzM2NTEzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q2MDNLUVFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY4OSJ9'" -e "main()" -q"
[2025-08-21 16:24:17][356356732736513][7432 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MzU2NzMyNzM2NTEzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q2MDNLUVFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY4OSJ9"\r\n
[2025-08-21 16:24:19][356356732736513][9103 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1b1571f-5a77-4dad-979e-106db447cb9f","id":"QR_d1b1571f-5a77-4dad-979e-106db447cb9f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:24:19][356356732736513][9104 ms][DEBUG] proc_open done in 4296 ms; code=0; res.len=3152
[2025-08-21 16:24:19][356356732736513][9104 ms][DEBUG] END   runCmdUntilRes#1 in 4296 ms
[2025-08-21 16:24:19][356356732736513][9104 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:24:19][351199550859339][0 ms][INFO] === Request start ===
[2025-08-21 16:24:19][351199550859339][1 ms][DEBUG] START check_frida
[2025-08-21 16:24:19][351199550859339][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:24:19][351199550859339][305 ms][DEBUG] SU: done in 304 ms; outroot          4632     1 2349136   4316 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:24:19][351199550859339][305 ms][DEBUG] check_frida: running
[2025-08-21 16:24:19][351199550859339][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 16:24:19][351199550859339][305 ms][DEBUG] START check_internet
[2025-08-21 16:24:19][351199550859339][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:24:19][351199550859339][555 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.822/137.822/137.822/0.000 ms\n
[2025-08-21 16:24:19][351199550859339][555 ms][DEBUG] check_internet: online
[2025-08-21 16:24:19][351199550859339][555 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 16:24:19][351199550859339][555 ms][DEBUG] START check_scloud
[2025-08-21 16:24:19][351199550859339][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:24:20][351199550859339][852 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23806432 90752 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:24:20][351199550859339][852 ms][DEBUG] targetPkg: running
[2025-08-21 16:24:20][351199550859339][852 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:24:20][351199550859339][852 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:24:20][351199550859339][852 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTk5NTUwODU5MzM5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MDhHSDdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY0MCJ9'" -e "main()" -q"
[2025-08-21 16:24:20][351199550859339][852 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:24:20][351199550859339][852 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTk5NTUwODU5MzM5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MDhHSDdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY0MCJ9'" -e "main()" -q"
[2025-08-21 16:24:22][351199550859339][3460 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTk5NTUwODU5MzM5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MDhHSDdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY0MCJ9"\r\n
[2025-08-21 16:24:24][351199550859339][5163 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad9105f7-74af-4948-9833-9c79c8b8c54c","id":"QR_ad9105f7-74af-4948-9833-9c79c8b8c54c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:24:24][351199550859339][5163 ms][DEBUG] proc_open done in 4311 ms; code=0; res.len=3152
[2025-08-21 16:24:24][351199550859339][5163 ms][DEBUG] END   runCmdUntilRes#1 in 4311 ms
[2025-08-21 16:24:24][351199550859339][5164 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:25:07][352674520641362][0 ms][INFO] === Request start ===
[2025-08-21 16:25:07][352674520641362][1 ms][DEBUG] START check_frida
[2025-08-21 16:25:07][352674520641362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:25:07][352674520641362][304 ms][DEBUG] SU: done in 303 ms; outroot          4632     1 2332716   4296 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:25:07][352674520641362][304 ms][DEBUG] check_frida: running
[2025-08-21 16:25:07][352674520641362][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 16:25:07][352674520641362][304 ms][DEBUG] START check_scloud
[2025-08-21 16:25:07][352674520641362][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:25:08][352674520641362][601 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23806464 90008 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:25:08][352674520641362][601 ms][DEBUG] targetPkg: running
[2025-08-21 16:25:08][352674520641362][601 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:25:08][352674520641362][601 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:25:08][352674520641362][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc0NTIwNjQxMzYyIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDNTQTJGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUzOSJ9'" -e "main()" -q"
[2025-08-21 16:25:08][352674520641362][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:25:08][352674520641362][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc0NTIwNjQxMzYyIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDNTQTJGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUzOSJ9'" -e "main()" -q"
[2025-08-21 16:25:10][352674520641362][3241 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjc0NTIwNjQxMzYyIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5MDNTQTJGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUzOSJ9"\r\n
[2025-08-21 16:25:12][352674520641362][5365 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86c0d2e6-d0a0-4820-be96-d47a63606b90","id":"QR_86c0d2e6-d0a0-4820-be96-d47a63606b90","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:25:12][352674520641362][5365 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 16:25:12][352674520641362][5365 ms][DEBUG] END   runCmdUntilRes#1 in 4764 ms
[2025-08-21 16:25:12][352674520641362][5365 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:25:16][350020273315352][0 ms][INFO] === Request start ===
[2025-08-21 16:25:16][350020273315352][1 ms][DEBUG] START check_frida
[2025-08-21 16:25:16][350020273315352][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:25:17][350020273315352][289 ms][DEBUG] SU: done in 288 ms; outroot          4632     1 2349136   4272 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:25:17][350020273315352][289 ms][DEBUG] check_frida: running
[2025-08-21 16:25:17][350020273315352][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 16:25:17][350020273315352][290 ms][DEBUG] START check_scloud
[2025-08-21 16:25:17][350020273315352][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:25:17][350020273315352][586 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23806496 90572 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:25:17][350020273315352][586 ms][DEBUG] targetPkg: running
[2025-08-21 16:25:17][350020273315352][586 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 16:25:17][350020273315352][586 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:25:17][350020273315352][586 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDIwMjczMzE1MzUyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMkpNOFZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc4MSJ9'" -e "main()" -q"
[2025-08-21 16:25:17][350020273315352][586 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:25:17][350020273315352][586 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDIwMjczMzE1MzUyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMkpNOFZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc4MSJ9'" -e "main()" -q"
[2025-08-21 16:25:20][350020273315352][3210 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDIwMjczMzE1MzUyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMkpNOFZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc4MSJ9"\r\n
[2025-08-21 16:25:21][350020273315352][5054 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_152a1379-2caf-4d33-aebc-abd155b3752f","id":"QR_152a1379-2caf-4d33-aebc-abd155b3752f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:25:21][350020273315352][5054 ms][DEBUG] proc_open done in 4468 ms; code=0; res.len=3152
[2025-08-21 16:25:21][350020273315352][5054 ms][DEBUG] END   runCmdUntilRes#1 in 4468 ms
[2025-08-21 16:25:21][350020273315352][5054 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:26:09][353182209953917][1 ms][INFO] === Request start ===
[2025-08-21 16:26:09][353182209953917][1 ms][DEBUG] START check_frida
[2025-08-21 16:26:09][353182209953917][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:26:09][353182209953917][306 ms][DEBUG] SU: done in 304 ms; outroot          4632     1 2332716   4280 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:26:09][353182209953917][306 ms][DEBUG] check_frida: running
[2025-08-21 16:26:09][353182209953917][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 16:26:09][353182209953917][306 ms][DEBUG] START check_internet
[2025-08-21 16:26:09][353182209953917][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:26:09][353182209953917][728 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.923/200.923/200.923/0.000 ms\n
[2025-08-21 16:26:09][353182209953917][728 ms][DEBUG] check_internet: online
[2025-08-21 16:26:09][353182209953917][728 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 16:26:09][353182209953917][728 ms][DEBUG] START check_scloud
[2025-08-21 16:26:09][353182209953917][728 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:26:10][353182209953917][978 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23806528 90096 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:26:10][353182209953917][978 ms][DEBUG] targetPkg: running
[2025-08-21 16:26:10][353182209953917][978 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 16:26:10][353182209953917][978 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:26:10][353182209953917][978 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTgyMjA5OTUzOTE3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MTFKWDdYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc0MCJ9'" -e "main()" -q"
[2025-08-21 16:26:10][353182209953917][978 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:26:10][353182209953917][978 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTgyMjA5OTUzOTE3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MTFKWDdYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc0MCJ9'" -e "main()" -q"
[2025-08-21 16:26:12][353182209953917][3586 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTgyMjA5OTUzOTE3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MTFKWDdYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTc0MCJ9"\r\n
[2025-08-21 16:26:15][353182209953917][6023 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f7d81ff-7ced-489b-b929-df0d6fb83eae","id":"QR_8f7d81ff-7ced-489b-b929-df0d6fb83eae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:26:15][353182209953917][6023 ms][DEBUG] proc_open done in 5046 ms; code=0; res.len=3152
[2025-08-21 16:26:15][353182209953917][6023 ms][DEBUG] END   runCmdUntilRes#1 in 5046 ms
[2025-08-21 16:26:15][353182209953917][6023 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:26:35][351681590185510][0 ms][INFO] === Request start ===
[2025-08-21 16:26:35][351681590185510][0 ms][DEBUG] START check_frida
[2025-08-21 16:26:35][351681590185510][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:26:35][351681590185510][306 ms][DEBUG] SU: done in 306 ms; outroot          4632     1 2332716   4264 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:26:35][351681590185510][306 ms][DEBUG] check_frida: running
[2025-08-21 16:26:35][351681590185510][306 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 16:26:35][351681590185510][306 ms][DEBUG] START check_internet
[2025-08-21 16:26:35][351681590185510][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:26:35][351681590185510][603 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.714/194.714/194.714/0.000 ms\n
[2025-08-21 16:26:35][351681590185510][603 ms][DEBUG] check_internet: online
[2025-08-21 16:26:35][351681590185510][603 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 16:26:35][351681590185510][603 ms][DEBUG] START check_scloud
[2025-08-21 16:26:35][351681590185510][603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:26:36][351681590185510][900 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23806560 90680 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:26:36][351681590185510][900 ms][DEBUG] targetPkg: running
[2025-08-21 16:26:36][351681590185510][900 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 16:26:36][351681590185510][900 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:26:36][351681590185510][900 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjgxNTkwMTg1NTEwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMFkwR0NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkxNCJ9'" -e "main()" -q"
[2025-08-21 16:26:36][351681590185510][900 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:26:36][351681590185510][900 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjgxNTkwMTg1NTEwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMFkwR0NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkxNCJ9'" -e "main()" -q"
[2025-08-21 16:26:38][351681590185510][3540 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjgxNTkwMTg1NTEwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMFkwR0NMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkxNCJ9"\r\n
[2025-08-21 16:26:40][351681590185510][5414 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_746933cf-de72-4c86-9e84-f6517b7345c2","id":"QR_746933cf-de72-4c86-9e84-f6517b7345c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:26:40][351681590185510][5414 ms][DEBUG] proc_open done in 4514 ms; code=0; res.len=3152
[2025-08-21 16:26:40][351681590185510][5414 ms][DEBUG] END   runCmdUntilRes#1 in 4514 ms
[2025-08-21 16:26:40][351681590185510][5414 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:26:43][353192340615622][1 ms][INFO] === Request start ===
[2025-08-21 16:26:43][353192340615622][1 ms][DEBUG] START check_frida
[2025-08-21 16:26:43][353192340615622][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:26:43][353192340615622][291 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2349136   4304 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:26:43][353192340615622][291 ms][DEBUG] check_frida: running
[2025-08-21 16:26:43][353192340615622][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 16:26:43][353192340615622][292 ms][DEBUG] START check_internet
[2025-08-21 16:26:43][353192340615622][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:26:44][353192340615622][650 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.336/256.336/256.336/0.000 ms\n
[2025-08-21 16:26:44][353192340615622][650 ms][DEBUG] check_internet: online
[2025-08-21 16:26:44][353192340615622][650 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 16:26:44][353192340615622][650 ms][DEBUG] START check_scloud
[2025-08-21 16:26:44][353192340615622][650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:26:44][353192340615622][947 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23806592 89816 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:26:44][353192340615622][947 ms][DEBUG] targetPkg: running
[2025-08-21 16:26:44][353192340615622][947 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 16:26:44][353192340615622][947 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:26:44][353192340615622][947 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTkyMzQwNjE1NjIyIiwibW9kZWwiOiJTTS1YOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlkyMDQzUUhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjgzNyJ9'" -e "main()" -q"
[2025-08-21 16:26:44][353192340615622][947 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:26:44][353192340615622][947 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTkyMzQwNjE1NjIyIiwibW9kZWwiOiJTTS1YOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlkyMDQzUUhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjgzNyJ9'" -e "main()" -q"
[2025-08-21 16:26:47][353192340615622][3587 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTkyMzQwNjE1NjIyIiwibW9kZWwiOiJTTS1YOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlkyMDQzUUhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjgzNyJ9"\r\n
[2025-08-21 16:26:49][353192340615622][5399 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e093a664-1707-4b91-94c6-26b8dc9173c4","id":"QR_e093a664-1707-4b91-94c6-26b8dc9173c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:26:49][353192340615622][5399 ms][DEBUG] proc_open done in 4452 ms; code=0; res.len=3152
[2025-08-21 16:26:49][353192340615622][5399 ms][DEBUG] END   runCmdUntilRes#1 in 4452 ms
[2025-08-21 16:26:49][353192340615622][5399 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:27:08][353911530383414][0 ms][INFO] === Request start ===
[2025-08-21 16:27:08][353911530383414][1 ms][DEBUG] START check_frida
[2025-08-21 16:27:08][353911530383414][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:27:08][353911530383414][316 ms][DEBUG] SU: done in 315 ms; outroot          4632     1 2332716   4268 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:27:08][353911530383414][316 ms][DEBUG] check_frida: running
[2025-08-21 16:27:08][353911530383414][316 ms][DEBUG] END   check_frida in 315 ms
[2025-08-21 16:27:08][353911530383414][316 ms][DEBUG] START check_scloud
[2025-08-21 16:27:08][353911530383414][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:27:09][353911530383414][643 ms][DEBUG] SU: done in 328 ms; outu0_a118       7086 20714 23806624 86596 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:27:09][353911530383414][644 ms][DEBUG] targetPkg: running
[2025-08-21 16:27:09][353911530383414][644 ms][DEBUG] END   check_scloud in 328 ms
[2025-08-21 16:27:09][353911530383414][644 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:27:09][353911530383414][644 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTExNTMwMzgzNDE0IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMkpEWlpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjczMiJ9'" -e "main()" -q"
[2025-08-21 16:27:09][353911530383414][644 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:27:09][353911530383414][644 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTExNTMwMzgzNDE0IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMkpEWlpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjczMiJ9'" -e "main()" -q"
[2025-08-21 16:27:11][353911530383414][3252 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTExNTMwMzgzNDE0IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMkpEWlpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjczMiJ9"\r\n
[2025-08-21 16:27:13][353911530383414][4955 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d68a77e-db7c-47cd-8aa3-e51d801ff94d","id":"QR_4d68a77e-db7c-47cd-8aa3-e51d801ff94d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:27:13][353911530383414][4955 ms][DEBUG] proc_open done in 4311 ms; code=0; res.len=3152
[2025-08-21 16:27:13][353911530383414][4955 ms][DEBUG] END   runCmdUntilRes#1 in 4311 ms
[2025-08-21 16:27:13][353911530383414][4955 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:27:21][352485227329320][0 ms][INFO] === Request start ===
[2025-08-21 16:27:21][352485227329320][0 ms][DEBUG] START check_frida
[2025-08-21 16:27:21][352485227329320][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:27:22][352485227329320][257 ms][DEBUG] SU: done in 257 ms; outroot          4632     1 2349136   4228 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:27:22][352485227329320][257 ms][DEBUG] check_frida: running
[2025-08-21 16:27:22][352485227329320][257 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 16:27:22][352485227329320][257 ms][DEBUG] START check_scloud
[2025-08-21 16:27:22][352485227329320][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:27:22][352485227329320][569 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23806656 83156 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:27:22][352485227329320][569 ms][DEBUG] targetPkg: running
[2025-08-21 16:27:22][352485227329320][569 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:27:22][352485227329320][570 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:27:22][352485227329320][570 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDg1MjI3MzI5MzIwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMFNaSFRGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjU5In0='" -e "main()" -q"
[2025-08-21 16:27:22][352485227329320][570 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:27:22][352485227329320][570 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDg1MjI3MzI5MzIwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMFNaSFRGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjU5In0='" -e "main()" -q"
[2025-08-21 16:27:24][352485227329320][3178 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDg1MjI3MzI5MzIwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMFNaSFRGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjU5In0="\r\n
[2025-08-21 16:27:28][352485227329320][6318 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60ca42b4-b107-4a20-ada4-3b63cc5000d8","id":"QR_60ca42b4-b107-4a20-ada4-3b63cc5000d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:27:28][352485227329320][6318 ms][DEBUG] proc_open done in 5748 ms; code=0; res.len=3152
[2025-08-21 16:27:28][352485227329320][6318 ms][DEBUG] END   runCmdUntilRes#1 in 5749 ms
[2025-08-21 16:27:28][352485227329320][6318 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:27:34][357518813774205][0 ms][INFO] === Request start ===
[2025-08-21 16:27:34][357518813774205][1 ms][DEBUG] START check_frida
[2025-08-21 16:27:34][357518813774205][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:27:34][357518813774205][305 ms][DEBUG] SU: done in 304 ms; outroot          4632     1 2349136   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:27:34][357518813774205][305 ms][DEBUG] check_frida: running
[2025-08-21 16:27:34][357518813774205][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 16:27:34][357518813774205][305 ms][DEBUG] START check_scloud
[2025-08-21 16:27:34][357518813774205][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:27:35][357518813774205][633 ms][DEBUG] SU: done in 328 ms; outu0_a118       7086 20714 23806688 83280 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:27:35][357518813774205][633 ms][DEBUG] targetPkg: running
[2025-08-21 16:27:35][357518813774205][633 ms][DEBUG] END   check_scloud in 328 ms
[2025-08-21 16:27:35][357518813774205][633 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:27:35][357518813774205][633 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTE4ODEzNzc0MjA1IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q0MDNWTEhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc5MCJ9'" -e "main()" -q"
[2025-08-21 16:27:35][357518813774205][633 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:27:35][357518813774205][633 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTE4ODEzNzc0MjA1IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q0MDNWTEhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc5MCJ9'" -e "main()" -q"
[2025-08-21 16:27:37][357518813774205][3194 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTE4ODEzNzc0MjA1IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q0MDNWTEhYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODc5MCJ9"\r\n
[2025-08-21 16:27:40][357518813774205][5584 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9897a2a3-b32b-4134-8e53-1cf5b402eef7","id":"QR_9897a2a3-b32b-4134-8e53-1cf5b402eef7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:27:40][357518813774205][5585 ms][DEBUG] proc_open done in 4952 ms; code=0; res.len=3152
[2025-08-21 16:27:40][357518813774205][5585 ms][DEBUG] END   runCmdUntilRes#1 in 4952 ms
[2025-08-21 16:27:40][357518813774205][5585 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:28:50][355195303595226][1 ms][INFO] === Request start ===
[2025-08-21 16:28:50][355195303595226][1 ms][DEBUG] START check_frida
[2025-08-21 16:28:50][355195303595226][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:28:50][355195303595226][301 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2332716   4228 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:28:50][355195303595226][302 ms][DEBUG] check_frida: running
[2025-08-21 16:28:50][355195303595226][302 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 16:28:50][355195303595226][302 ms][DEBUG] START check_internet
[2025-08-21 16:28:50][355195303595226][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:28:51][355195303595226][645 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.461/238.461/238.461/0.000 ms\n
[2025-08-21 16:28:51][355195303595226][645 ms][DEBUG] check_internet: online
[2025-08-21 16:28:51][355195303595226][645 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 16:28:51][355195303595226][645 ms][DEBUG] START check_scloud
[2025-08-21 16:28:51][355195303595226][645 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:28:51][355195303595226][911 ms][DEBUG] SU: done in 265 ms; outu0_a118       7086 20714 23806720 82484 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:28:51][355195303595226][911 ms][DEBUG] targetPkg: running
[2025-08-21 16:28:51][355195303595226][911 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 16:28:51][355195303595226][911 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:28:51][355195303595226][911 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTk1MzAzNTk1MjI2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlZRU0dWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjkyNiJ9'" -e "main()" -q"
[2025-08-21 16:28:51][355195303595226][911 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:28:51][355195303595226][911 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTk1MzAzNTk1MjI2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlZRU0dWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjkyNiJ9'" -e "main()" -q"
[2025-08-21 16:28:53][355195303595226][3551 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MTk1MzAzNTk1MjI2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlZRU0dWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjkyNiJ9"\r\n
[2025-08-21 16:28:56][355195303595226][5613 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7fdf0e93-b6e1-490d-b57a-55165a335889","id":"QR_7fdf0e93-b6e1-490d-b57a-55165a335889","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:28:56][355195303595226][5613 ms][DEBUG] proc_open done in 4702 ms; code=0; res.len=3152
[2025-08-21 16:28:56][355195303595226][5613 ms][DEBUG] END   runCmdUntilRes#1 in 4702 ms
[2025-08-21 16:28:56][355195303595226][5613 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:29:02][355418871217381][0 ms][INFO] === Request start ===
[2025-08-21 16:29:02][355418871217381][1 ms][DEBUG] START check_frida
[2025-08-21 16:29:02][355418871217381][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:29:03][355418871217381][324 ms][DEBUG] SU: done in 323 ms; outroot          4632     1 2349136   4240 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:29:03][355418871217381][324 ms][DEBUG] check_frida: running
[2025-08-21 16:29:03][355418871217381][324 ms][DEBUG] END   check_frida in 323 ms
[2025-08-21 16:29:03][355418871217381][324 ms][DEBUG] START check_scloud
[2025-08-21 16:29:03][355418871217381][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:29:03][355418871217381][637 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23806752 83064 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:29:03][355418871217381][637 ms][DEBUG] targetPkg: running
[2025-08-21 16:29:03][355418871217381][637 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:29:03][355418871217381][637 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:29:03][355418871217381][637 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDE4ODcxMjE3MzgxIiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MDI3SDdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY1OSJ9'" -e "main()" -q"
[2025-08-21 16:29:03][355418871217381][637 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:29:03][355418871217381][637 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NDE4ODcxMjE3MzgxIiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MDI3SDdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY1OSJ9'" -e "main()" -q"
[2025-08-21 16:29:03][352058608715134][0 ms][INFO] === Request start ===
[2025-08-21 16:29:05][352648380345983][1 ms][INFO] === Request start ===
[2025-08-21 16:29:06][355418871217381][3261 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NDE4ODcxMjE3MzgxIiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MDI3SDdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY1OSJ9"\r\n
[2025-08-21 16:29:07][355418871217381][5104 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b97e529-0b4e-4bf3-8b45-2f681cc17bac","id":"QR_1b97e529-0b4e-4bf3-8b45-2f681cc17bac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:29:07][355418871217381][5104 ms][DEBUG] proc_open done in 4467 ms; code=0; res.len=3152
[2025-08-21 16:29:07][355418871217381][5104 ms][DEBUG] END   runCmdUntilRes#1 in 4467 ms
[2025-08-21 16:29:07][355418871217381][5104 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:29:08][352648380345983][3045 ms][DEBUG] START check_frida
[2025-08-21 16:29:08][352648380345983][3046 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:29:08][352648380345983][3358 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2349136   4248 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:29:08][352648380345983][3358 ms][DEBUG] check_frida: running
[2025-08-21 16:29:08][352648380345983][3358 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 16:29:08][352648380345983][3358 ms][DEBUG] START check_scloud
[2025-08-21 16:29:08][352648380345983][3358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:29:08][352648380345983][3670 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23806784 82576 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:29:08][352648380345983][3671 ms][DEBUG] targetPkg: running
[2025-08-21 16:29:08][352648380345983][3671 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:29:08][352648380345983][3671 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:29:08][352648380345983][3671 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjQ4MzgwMzQ1OTgzIiwibW9kZWwiOiJTTS1GNzY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k3MEc3VFFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzUxNyJ9'" -e "main()" -q"
[2025-08-21 16:29:08][352648380345983][3671 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:29:08][352648380345983][3671 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjQ4MzgwMzQ1OTgzIiwibW9kZWwiOiJTTS1GNzY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k3MEc3VFFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzUxNyJ9'" -e "main()" -q"
[2025-08-21 16:29:10][350146812425954][1 ms][INFO] === Request start ===
[2025-08-21 16:29:11][352648380345983][6295 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjQ4MzgwMzQ1OTgzIiwibW9kZWwiOiJTTS1GNzY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k3MEc3VFFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzUxNyJ9"\r\n
[2025-08-21 16:29:13][352648380345983][8185 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8acc191-7150-47c8-aebf-fbb14e3ef343","id":"QR_f8acc191-7150-47c8-aebf-fbb14e3ef343","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:29:13][352648380345983][8185 ms][DEBUG] proc_open done in 4514 ms; code=0; res.len=3152
[2025-08-21 16:29:13][352648380345983][8185 ms][DEBUG] END   runCmdUntilRes#1 in 4514 ms
[2025-08-21 16:29:13][352648380345983][8185 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:29:13][352058608715134][10150 ms][DEBUG] START check_frida
[2025-08-21 16:29:13][352058608715134][10150 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:29:13][352058608715134][10462 ms][DEBUG] SU: done in 313 ms; outroot          4632     1 2349136   4256 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:29:13][352058608715134][10463 ms][DEBUG] check_frida: running
[2025-08-21 16:29:13][352058608715134][10463 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 16:29:13][352058608715134][10463 ms][DEBUG] START check_scloud
[2025-08-21 16:29:13][352058608715134][10463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:29:14][352058608715134][10759 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23806816 83256 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:29:14][352058608715134][10759 ms][DEBUG] targetPkg: running
[2025-08-21 16:29:14][352058608715134][10759 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 16:29:14][352058608715134][10759 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:29:14][352058608715134][10759 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDU4NjA4NzE1MTM0IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5UVkxMDNaMURUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MTY0In0='" -e "main()" -q"
[2025-08-21 16:29:14][352058608715134][10759 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:29:14][352058608715134][10759 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDU4NjA4NzE1MTM0IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5UVkxMDNaMURUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MTY0In0='" -e "main()" -q"
[2025-08-21 16:29:16][352058608715134][13368 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDU4NjA4NzE1MTM0IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5UVkxMDNaMURUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MTY0In0="\r\n
[2025-08-21 16:29:17][350784349153390][1 ms][INFO] === Request start ===
[2025-08-21 16:29:19][352058608715134][16351 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2608a41c-2683-4b04-a036-e0b842d889e2","id":"QR_2608a41c-2683-4b04-a036-e0b842d889e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:29:19][352058608715134][16352 ms][DEBUG] proc_open done in 5593 ms; code=0; res.len=3152
[2025-08-21 16:29:19][352058608715134][16352 ms][DEBUG] END   runCmdUntilRes#1 in 5593 ms
[2025-08-21 16:29:19][352058608715134][16352 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:29:20][350146812425954][9125 ms][DEBUG] START check_frida
[2025-08-21 16:29:20][350146812425954][9125 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:29:20][350146812425954][9438 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2349136   4244 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:29:20][350146812425954][9438 ms][DEBUG] check_frida: running
[2025-08-21 16:29:20][350146812425954][9438 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 16:29:20][350146812425954][9438 ms][DEBUG] START check_scloud
[2025-08-21 16:29:20][350146812425954][9438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:29:20][350146812425954][9736 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23806848 82484 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:29:20][350146812425954][9736 ms][DEBUG] targetPkg: running
[2025-08-21 16:29:20][350146812425954][9736 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-21 16:29:20][350146812425954][9736 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:29:20][350146812425954][9736 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTQ2ODEyNDI1OTU0IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMEhNRlNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk3MCJ9'" -e "main()" -q"
[2025-08-21 16:29:20][350146812425954][9736 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:29:20][350146812425954][9736 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTQ2ODEyNDI1OTU0IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMEhNRlNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk3MCJ9'" -e "main()" -q"
[2025-08-21 16:29:23][350146812425954][12359 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTQ2ODEyNDI1OTU0IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMEhNRlNQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk3MCJ9"\r\n
[2025-08-21 16:29:24][355978844291946][0 ms][INFO] === Request start ===
[2025-08-21 16:29:25][350146812425954][14296 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b4c8adb-bdb2-4768-8d31-b653208f44cc","id":"QR_3b4c8adb-bdb2-4768-8d31-b653208f44cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:29:25][350146812425954][14296 ms][DEBUG] proc_open done in 4560 ms; code=0; res.len=3152
[2025-08-21 16:29:25][350146812425954][14296 ms][DEBUG] END   runCmdUntilRes#1 in 4560 ms
[2025-08-21 16:29:25][350146812425954][14296 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:29:25][350784349153390][8124 ms][DEBUG] START check_frida
[2025-08-21 16:29:25][350784349153390][8124 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:29:26][350784349153390][8422 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:29:26][350784349153390][8422 ms][DEBUG] check_frida: running
[2025-08-21 16:29:26][350784349153390][8422 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 16:29:26][350784349153390][8422 ms][DEBUG] START check_scloud
[2025-08-21 16:29:26][350784349153390][8422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:29:26][350784349153390][8718 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23806880 83080 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:29:26][350784349153390][8718 ms][DEBUG] targetPkg: running
[2025-08-21 16:29:26][350784349153390][8718 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:29:26][350784349153390][8718 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:29:26][350784349153390][8718 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzg0MzQ5MTUzMzkwIiwibW9kZWwiOiJTTS1BMzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ0MDNZRExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Njk1In0='" -e "main()" -q"
[2025-08-21 16:29:26][350784349153390][8719 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:29:26][350784349153390][8719 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzg0MzQ5MTUzMzkwIiwibW9kZWwiOiJTTS1BMzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ0MDNZRExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Njk1In0='" -e "main()" -q"
[2025-08-21 16:29:28][350784349153390][11358 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzg0MzQ5MTUzMzkwIiwibW9kZWwiOiJTTS1BMzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ0MDNZRExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Njk1In0="\r\n
[2025-08-21 16:29:31][350784349153390][13842 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31466cf0-e7d6-43e9-b420-488219568876","id":"QR_31466cf0-e7d6-43e9-b420-488219568876","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:29:31][350784349153390][13842 ms][DEBUG] proc_open done in 5123 ms; code=0; res.len=3152
[2025-08-21 16:29:31][350784349153390][13842 ms][DEBUG] END   runCmdUntilRes#1 in 5123 ms
[2025-08-21 16:29:31][350784349153390][13842 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:29:32][355978844291946][8121 ms][DEBUG] START check_frida
[2025-08-21 16:29:32][355978844291946][8121 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:29:32][355978844291946][8434 ms][DEBUG] SU: done in 313 ms; outroot          4632     1 2349136   4256 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:29:32][355978844291946][8434 ms][DEBUG] check_frida: running
[2025-08-21 16:29:32][355978844291946][8434 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 16:29:32][355978844291946][8434 ms][DEBUG] START check_scloud
[2025-08-21 16:29:32][355978844291946][8434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:29:32][355978844291946][8730 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23806912 82692 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:29:32][355978844291946][8731 ms][DEBUG] targetPkg: running
[2025-08-21 16:29:32][355978844291946][8731 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:29:32][355978844291946][8731 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:29:32][355978844291946][8731 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1OTc4ODQ0MjkxOTQ2IiwibW9kZWwiOiJTTS1BMjM2ViIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNDhOWDBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDQ5In0='" -e "main()" -q"
[2025-08-21 16:29:32][355978844291946][8731 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:29:32][355978844291946][8731 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1OTc4ODQ0MjkxOTQ2IiwibW9kZWwiOiJTTS1BMjM2ViIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNDhOWDBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDQ5In0='" -e "main()" -q"
[2025-08-21 16:29:35][355978844291946][11370 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1OTc4ODQ0MjkxOTQ2IiwibW9kZWwiOiJTTS1BMjM2ViIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyNDhOWDBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDQ5In0="\r\n
[2025-08-21 16:29:39][355978844291946][14854 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48750840-cd1e-4744-abbf-cd81cda5de18","id":"QR_48750840-cd1e-4744-abbf-cd81cda5de18","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:29:39][355978844291946][14855 ms][DEBUG] proc_open done in 6123 ms; code=0; res.len=3152
[2025-08-21 16:29:39][355978844291946][14855 ms][DEBUG] END   runCmdUntilRes#1 in 6123 ms
[2025-08-21 16:29:39][355978844291946][14855 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:29:41][354529385425392][0 ms][INFO] === Request start ===
[2025-08-21 16:29:41][354529385425392][1 ms][DEBUG] START check_frida
[2025-08-21 16:29:41][354529385425392][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:29:41][354529385425392][316 ms][DEBUG] SU: done in 315 ms; outroot          4632     1 2349136   4244 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:29:41][354529385425392][316 ms][DEBUG] check_frida: running
[2025-08-21 16:29:41][354529385425392][317 ms][DEBUG] END   check_frida in 316 ms
[2025-08-21 16:29:41][354529385425392][317 ms][DEBUG] START check_scloud
[2025-08-21 16:29:41][354529385425392][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:29:41][354529385425392][613 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23806944 83276 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:29:41][354529385425392][613 ms][DEBUG] targetPkg: running
[2025-08-21 16:29:41][354529385425392][614 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:29:41][354529385425392][614 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:29:41][354529385425392][614 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTI5Mzg1NDI1MzkyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcxMDE4QURSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM5NCJ9'" -e "main()" -q"
[2025-08-21 16:29:41][354529385425392][614 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:29:41][354529385425392][614 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTI5Mzg1NDI1MzkyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcxMDE4QURSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM5NCJ9'" -e "main()" -q"
[2025-08-21 16:29:44][354529385425392][3253 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTI5Mzg1NDI1MzkyIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFcxMDE4QURSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM5NCJ9"\r\n
[2025-08-21 16:29:46][354529385425392][5174 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30bba45e-675d-4ecd-81d3-6ef4940b5537","id":"QR_30bba45e-675d-4ecd-81d3-6ef4940b5537","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:29:46][354529385425392][5174 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-21 16:29:46][354529385425392][5174 ms][DEBUG] END   runCmdUntilRes#1 in 4561 ms
[2025-08-21 16:29:46][354529385425392][5174 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:30:01][350823460203087][0 ms][INFO] === Request start ===
[2025-08-21 16:30:01][350823460203087][1 ms][DEBUG] START check_frida
[2025-08-21 16:30:01][350823460203087][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:30:01][350823460203087][318 ms][DEBUG] SU: done in 317 ms; outroot          4632     1 2332716   4256 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:30:01][350823460203087][318 ms][DEBUG] check_frida: running
[2025-08-21 16:30:01][350823460203087][318 ms][DEBUG] END   check_frida in 317 ms
[2025-08-21 16:30:01][350823460203087][318 ms][DEBUG] START check_internet
[2025-08-21 16:30:01][350823460203087][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:30:01][350823460203087][646 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.412/226.412/226.412/0.000 ms\n
[2025-08-21 16:30:01][350823460203087][646 ms][DEBUG] check_internet: online
[2025-08-21 16:30:01][350823460203087][646 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 16:30:01][350823460203087][646 ms][DEBUG] START check_scloud
[2025-08-21 16:30:01][350823460203087][646 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:30:02][350823460203087][927 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23806976 82716 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:30:02][350823460203087][927 ms][DEBUG] targetPkg: running
[2025-08-21 16:30:02][350823460203087][927 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:30:02][350823460203087][927 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:30:02][350823460203087][927 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODIzNDYwMjAzMDg3IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c1MDBaSjVIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTI4In0='" -e "main()" -q"
[2025-08-21 16:30:02][350823460203087][927 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:30:02][350823460203087][927 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODIzNDYwMjAzMDg3IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c1MDBaSjVIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTI4In0='" -e "main()" -q"
[2025-08-21 16:30:04][350823460203087][3551 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODIzNDYwMjAzMDg3IiwibW9kZWwiOiJTTS1TOTExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c1MDBaSjVIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTI4In0="\r\n
[2025-08-21 16:30:09][350823460203087][7988 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8348dd7-6664-4a60-9ebd-dbbf1a180ed8","id":"QR_a8348dd7-6664-4a60-9ebd-dbbf1a180ed8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:30:09][350823460203087][7988 ms][DEBUG] proc_open done in 7061 ms; code=0; res.len=3152
[2025-08-21 16:30:09][350823460203087][7988 ms][DEBUG] END   runCmdUntilRes#1 in 7061 ms
[2025-08-21 16:30:09][350823460203087][7988 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:30:32][355346632425664][0 ms][INFO] === Request start ===
[2025-08-21 16:30:32][355346632425664][1 ms][DEBUG] START check_frida
[2025-08-21 16:30:32][355346632425664][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:30:33][355346632425664][300 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716   4276 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:30:33][355346632425664][300 ms][DEBUG] check_frida: running
[2025-08-21 16:30:33][355346632425664][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 16:30:33][355346632425664][300 ms][DEBUG] START check_internet
[2025-08-21 16:30:33][355346632425664][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:30:33][355346632425664][548 ms][DEBUG] SU: done in 248 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.083/147.083/147.083/0.000 ms\n
[2025-08-21 16:30:33][355346632425664][549 ms][DEBUG] check_internet: online
[2025-08-21 16:30:33][355346632425664][549 ms][DEBUG] END   check_internet in 249 ms
[2025-08-21 16:30:33][355346632425664][549 ms][DEBUG] START check_scloud
[2025-08-21 16:30:33][355346632425664][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:30:33][355346632425664][798 ms][DEBUG] SU: done in 249 ms; outu0_a118       7086 20714 23807008 83280 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:30:33][355346632425664][798 ms][DEBUG] targetPkg: running
[2025-08-21 16:30:33][355346632425664][798 ms][DEBUG] END   check_scloud in 249 ms
[2025-08-21 16:30:33][355346632425664][798 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:30:33][355346632425664][798 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQ2NjMyNDI1NjY0IiwibW9kZWwiOiJTTS1YNTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlgzMEpEUE1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODE4In0='" -e "main()" -q"
[2025-08-21 16:30:33][355346632425664][798 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:30:33][355346632425664][798 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQ2NjMyNDI1NjY0IiwibW9kZWwiOiJTTS1YNTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlgzMEpEUE1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODE4In0='" -e "main()" -q"
[2025-08-21 16:30:35][358587105934628][0 ms][INFO] === Request start ===
[2025-08-21 16:30:35][356416117723104][0 ms][INFO] === Request start ===
[2025-08-21 16:30:36][355346632425664][3407 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MzQ2NjMyNDI1NjY0IiwibW9kZWwiOiJTTS1YNTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlgzMEpEUE1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODE4In0="\r\n
[2025-08-21 16:30:40][355346632425664][7609 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a949b88f-b34f-4f59-b120-509da9c57420","id":"QR_a949b88f-b34f-4f59-b120-509da9c57420","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:30:40][355346632425664][7609 ms][DEBUG] proc_open done in 6811 ms; code=0; res.len=3152
[2025-08-21 16:30:40][355346632425664][7609 ms][DEBUG] END   runCmdUntilRes#1 in 6811 ms
[2025-08-21 16:30:40][355346632425664][7609 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:30:41][358587105934628][6088 ms][DEBUG] START check_frida
[2025-08-21 16:30:41][358587105934628][6088 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:30:41][358587105934628][6385 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4272 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:30:41][358587105934628][6386 ms][DEBUG] check_frida: running
[2025-08-21 16:30:41][358587105934628][6386 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 16:30:41][358587105934628][6386 ms][DEBUG] START check_internet
[2025-08-21 16:30:41][358587105934628][6386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:30:41][358587105934628][6838 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.840/200.840/200.840/0.000 ms\n
[2025-08-21 16:30:41][358587105934628][6839 ms][DEBUG] check_internet: online
[2025-08-21 16:30:41][358587105934628][6839 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 16:30:41][358587105934628][6839 ms][DEBUG] START check_scloud
[2025-08-21 16:30:41][358587105934628][6839 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:30:42][358587105934628][7119 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23807040 82620 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:30:42][358587105934628][7120 ms][DEBUG] targetPkg: running
[2025-08-21 16:30:42][358587105934628][7120 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:30:42][358587105934628][7120 ms][DEBUG] rawBody.length=1159
[2025-08-21 16:30:42][358587105934628][7120 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTg3MTA1OTM0NjI4IiwibW9kZWwiOiJTTS1UNzMzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyUjgwQzBFWVoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzEzNTkifQ=='" -e "main()" -q"
[2025-08-21 16:30:42][358587105934628][7120 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:30:42][358587105934628][7120 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTg3MTA1OTM0NjI4IiwibW9kZWwiOiJTTS1UNzMzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyUjgwQzBFWVoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzEzNTkifQ=='" -e "main()" -q"
[2025-08-21 16:30:44][358587105934628][9759 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NTg3MTA1OTM0NjI4IiwibW9kZWwiOiJTTS1UNzMzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyUjgwQzBFWVoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzEzNTkifQ=="\r\n
[2025-08-21 16:30:48][358587105934628][13368 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb9426e1-df5e-4948-826e-527f9c60edc5","id":"QR_fb9426e1-df5e-4948-826e-527f9c60edc5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:30:48][358587105934628][13368 ms][DEBUG] proc_open done in 6249 ms; code=0; res.len=3152
[2025-08-21 16:30:48][358587105934628][13368 ms][DEBUG] END   runCmdUntilRes#1 in 6249 ms
[2025-08-21 16:30:48][358587105934628][13368 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:30:49][356416117723104][14211 ms][DEBUG] START check_frida
[2025-08-21 16:30:49][356416117723104][14211 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:30:49][356416117723104][14508 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4284 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:30:49][356416117723104][14509 ms][DEBUG] check_frida: running
[2025-08-21 16:30:49][356416117723104][14509 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 16:30:49][356416117723104][14509 ms][DEBUG] START check_internet
[2025-08-21 16:30:49][356416117723104][14509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:30:50][356416117723104][14836 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.642/224.642/224.642/0.000 ms\n
[2025-08-21 16:30:50][356416117723104][14836 ms][DEBUG] check_internet: online
[2025-08-21 16:30:50][356416117723104][14836 ms][DEBUG] END   check_internet in 327 ms
[2025-08-21 16:30:50][356416117723104][14836 ms][DEBUG] START check_scloud
[2025-08-21 16:30:50][356416117723104][14836 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:30:50][356416117723104][15086 ms][DEBUG] SU: done in 249 ms; outu0_a118       7086 20714 23807072 83216 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:30:50][356416117723104][15086 ms][DEBUG] targetPkg: running
[2025-08-21 16:30:50][356416117723104][15086 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 16:30:50][356416117723104][15086 ms][DEBUG] rawBody.length=1159
[2025-08-21 16:30:50][356416117723104][15086 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE2MTE3NzIzMTA0IiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDQwOTVUNUwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzQ3OTYifQ=='" -e "main()" -q"
[2025-08-21 16:30:50][356416117723104][15086 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:30:50][356416117723104][15086 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDE2MTE3NzIzMTA0IiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDQwOTVUNUwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzQ3OTYifQ=='" -e "main()" -q"
[2025-08-21 16:30:52][356416117723104][17710 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDE2MTE3NzIzMTA0IiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDQwOTVUNUwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzQ3OTYifQ=="\r\n
[2025-08-21 16:30:56][356416117723104][20850 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd7fba4e-48cf-439f-998f-a00e841ae6bf","id":"QR_bd7fba4e-48cf-439f-998f-a00e841ae6bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:30:56][356416117723104][20850 ms][DEBUG] proc_open done in 5764 ms; code=0; res.len=3152
[2025-08-21 16:30:56][356416117723104][20850 ms][DEBUG] END   runCmdUntilRes#1 in 5764 ms
[2025-08-21 16:30:56][356416117723104][20850 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:30:57][351347130765902][0 ms][INFO] === Request start ===
[2025-08-21 16:30:57][351347130765902][1 ms][DEBUG] START check_frida
[2025-08-21 16:30:57][351347130765902][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:30:57][351347130765902][270 ms][DEBUG] SU: done in 269 ms; outroot          4632     1 2349136   4260 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:30:57][351347130765902][270 ms][DEBUG] check_frida: running
[2025-08-21 16:30:57][351347130765902][270 ms][DEBUG] END   check_frida in 269 ms
[2025-08-21 16:30:57][351347130765902][270 ms][DEBUG] START check_internet
[2025-08-21 16:30:57][351347130765902][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:30:58][351347130765902][629 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.112/261.112/261.112/0.000 ms\n
[2025-08-21 16:30:58][351347130765902][629 ms][DEBUG] check_internet: online
[2025-08-21 16:30:58][351347130765902][629 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 16:30:58][351347130765902][629 ms][DEBUG] START check_scloud
[2025-08-21 16:30:58][351347130765902][629 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:30:58][351347130765902][941 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23807104 82484 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:30:58][351347130765902][941 ms][DEBUG] targetPkg: running
[2025-08-21 16:30:58][351347130765902][941 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:30:58][351347130765902][941 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:30:58][351347130765902][942 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzQ3MTMwNzY1OTAyIiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlJBMDRaMTFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzEyIn0='" -e "main()" -q"
[2025-08-21 16:30:58][351347130765902][942 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:30:58][351347130765902][942 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzQ3MTMwNzY1OTAyIiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlJBMDRaMTFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzEyIn0='" -e "main()" -q"
[2025-08-21 16:30:58][351347131236846][0 ms][INFO] === Request start ===
[2025-08-21 16:31:00][353346115057804][0 ms][INFO] === Request start ===
[2025-08-21 16:31:00][351347130765902][3581 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzQ3MTMwNzY1OTAyIiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlJBMDRaMTFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzEyIn0="\r\n
[2025-08-21 16:31:02][353029493347548][0 ms][INFO] === Request start ===
[2025-08-21 16:31:03][351347130765902][6346 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a938ed3d-6505-4daf-8a21-c9c78c1d5295","id":"QR_a938ed3d-6505-4daf-8a21-c9c78c1d5295","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:31:03][351347130765902][6346 ms][DEBUG] proc_open done in 5404 ms; code=0; res.len=3152
[2025-08-21 16:31:03][351347130765902][6346 ms][DEBUG] END   runCmdUntilRes#1 in 5405 ms
[2025-08-21 16:31:03][351347130765902][6346 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:31:03][351347131236846][5073 ms][DEBUG] START check_frida
[2025-08-21 16:31:03][351347131236846][5073 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:31:04][351347131236846][5323 ms][DEBUG] SU: done in 250 ms; outroot          4632     1 2349136   4248 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:31:04][351347131236846][5323 ms][DEBUG] check_frida: running
[2025-08-21 16:31:04][351347131236846][5323 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 16:31:04][351347131236846][5323 ms][DEBUG] START check_scloud
[2025-08-21 16:31:04][351347131236846][5323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:31:04][351347131236846][5558 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23807136 83044 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:31:04][351347131236846][5558 ms][DEBUG] targetPkg: running
[2025-08-21 16:31:04][351347131236846][5558 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 16:31:04][351347131236846][5558 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:31:04][351347131236846][5558 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzQ3MTMxMjM2ODQ2IiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlQ0MEMyVE5XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNjQwIn0='" -e "main()" -q"
[2025-08-21 16:31:04][351347131236846][5558 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:31:04][351347131236846][5558 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzQ3MTMxMjM2ODQ2IiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlQ0MEMyVE5XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNjQwIn0='" -e "main()" -q"
[2025-08-21 16:31:07][351347131236846][8229 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzQ3MTMxMjM2ODQ2IiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlQ0MEMyVE5XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNjQwIn0="\r\n
[2025-08-21 16:31:12][351347131236846][13274 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e59f4db-2e8d-4362-a1d1-608a46bbb46b","id":"QR_5e59f4db-2e8d-4362-a1d1-608a46bbb46b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:31:12][351347131236846][13275 ms][DEBUG] proc_open done in 7717 ms; code=0; res.len=3152
[2025-08-21 16:31:12][351347131236846][13275 ms][DEBUG] END   runCmdUntilRes#1 in 7717 ms
[2025-08-21 16:31:12][351347131236846][13275 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:31:12][353346115057804][12184 ms][DEBUG] START check_frida
[2025-08-21 16:31:12][353346115057804][12184 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:31:12][353346115057804][12481 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:31:12][353346115057804][12481 ms][DEBUG] check_frida: running
[2025-08-21 16:31:12][353346115057804][12481 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 16:31:12][353346115057804][12482 ms][DEBUG] START check_scloud
[2025-08-21 16:31:12][353346115057804][12482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:31:12][353346115057804][12794 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23807168 82660 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:31:12][353346115057804][12794 ms][DEBUG] targetPkg: running
[2025-08-21 16:31:12][353346115057804][12794 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 16:31:12][353346115057804][12794 ms][DEBUG] rawBody.length=1159
[2025-08-21 16:31:12][353346115057804][12794 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzQ2MTE1MDU3ODA0IiwibW9kZWwiOiJTTS1UNTAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUUkIwMExETlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzIyMTQifQ=='" -e "main()" -q"
[2025-08-21 16:31:12][353346115057804][12794 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:31:12][353346115057804][12795 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzQ2MTE1MDU3ODA0IiwibW9kZWwiOiJTTS1UNTAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUUkIwMExETlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzIyMTQifQ=='" -e "main()" -q"
[2025-08-21 16:31:15][353346115057804][15418 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzQ2MTE1MDU3ODA0IiwibW9kZWwiOiJTTS1UNTAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlUUkIwMExETlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzIyMTQifQ=="\r\n
[2025-08-21 16:31:18][353346115057804][18292 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d86da1a-d14c-4634-9346-f81646416d70","id":"QR_2d86da1a-d14c-4634-9346-f81646416d70","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:31:18][353346115057804][18293 ms][DEBUG] proc_open done in 5498 ms; code=0; res.len=3152
[2025-08-21 16:31:18][353346115057804][18293 ms][DEBUG] END   runCmdUntilRes#1 in 5499 ms
[2025-08-21 16:31:18][353346115057804][18293 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:31:19][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 16:31:19][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 16:31:19][][43 ms][DEBUG] ADB: done in 42 ms; out
[2025-08-21 16:31:19][][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 16:31:19][][105 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 16:31:19][][105 ms][DEBUG] END   check_boot_completed in 105 ms
[2025-08-21 16:31:19][353029493347548][105 ms][INFO] === Request start ===
[2025-08-21 16:31:19][353029493347548][105 ms][DEBUG] START check_frida
[2025-08-21 16:31:19][353029493347548][105 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:31:19][353029493347548][386 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136   4264 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:31:19][353029493347548][386 ms][DEBUG] check_frida: running
[2025-08-21 16:31:19][353029493347548][386 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 16:31:19][353029493347548][387 ms][DEBUG] START check_scloud
[2025-08-21 16:31:19][353029493347548][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:31:20][353029493347548][683 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23807200 83228 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:31:20][353029493347548][683 ms][DEBUG] targetPkg: running
[2025-08-21 16:31:20][353029493347548][683 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:31:20][353029493347548][683 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:31:20][353029493347548][684 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI5NDkzMzQ3NTQ4IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMkNOMlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODMyMCJ9'" -e "main()" -q"
[2025-08-21 16:31:20][353029493347548][684 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:31:20][353029493347548][684 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI5NDkzMzQ3NTQ4IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMkNOMlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODMyMCJ9'" -e "main()" -q"
[2025-08-21 16:31:22][353029493347548][3292 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDI5NDkzMzQ3NTQ4IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMkNOMlJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODMyMCJ9"\r\n
[2025-08-21 16:31:24][353029493347548][5526 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af59a8c2-8903-4dca-abb5-f4450e354ffe","id":"QR_af59a8c2-8903-4dca-abb5-f4450e354ffe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:31:24][353029493347548][5526 ms][DEBUG] proc_open done in 4842 ms; code=0; res.len=3152
[2025-08-21 16:31:24][353029493347548][5526 ms][DEBUG] END   runCmdUntilRes#1 in 4842 ms
[2025-08-21 16:31:24][353029493347548][5526 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:31:36][353341128289023][1 ms][INFO] === Request start ===
[2025-08-21 16:31:36][353341128289023][1 ms][DEBUG] START check_frida
[2025-08-21 16:31:36][353341128289023][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:31:36][353341128289023][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136   4248 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:31:36][353341128289023][298 ms][DEBUG] check_frida: running
[2025-08-21 16:31:36][353341128289023][298 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 16:31:36][353341128289023][298 ms][DEBUG] START check_scloud
[2025-08-21 16:31:36][353341128289023][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:31:37][353341128289023][594 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23807232 82580 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:31:37][353341128289023][594 ms][DEBUG] targetPkg: running
[2025-08-21 16:31:37][353341128289023][594 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 16:31:37][353341128289023][594 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:31:37][353341128289023][594 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzQxMTI4Mjg5MDIzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRCMTRCMFFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM1NSJ9'" -e "main()" -q"
[2025-08-21 16:31:37][353341128289023][594 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:31:37][353341128289023][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzQxMTI4Mjg5MDIzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRCMTRCMFFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM1NSJ9'" -e "main()" -q"
[2025-08-21 16:31:39][353341128289023][3234 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzQxMTI4Mjg5MDIzIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRCMTRCMFFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTS1oiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM1NSJ9"\r\n
[2025-08-21 16:31:41][353341128289023][5280 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c036987-05bd-48ee-b240-23ee45028f5d","id":"QR_3c036987-05bd-48ee-b240-23ee45028f5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:31:41][353341128289023][5281 ms][DEBUG] proc_open done in 4686 ms; code=0; res.len=3152
[2025-08-21 16:31:41][353341128289023][5281 ms][DEBUG] END   runCmdUntilRes#1 in 4686 ms
[2025-08-21 16:31:41][353341128289023][5281 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:31:51][350824194463575][0 ms][INFO] === Request start ===
[2025-08-21 16:31:51][350824194463575][1 ms][DEBUG] START check_frida
[2025-08-21 16:31:51][350824194463575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:31:51][350824194463575][307 ms][DEBUG] SU: done in 307 ms; outroot          4632     1 2349136   4256 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:31:51][350824194463575][308 ms][DEBUG] check_frida: running
[2025-08-21 16:31:51][350824194463575][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 16:31:51][350824194463575][308 ms][DEBUG] START check_scloud
[2025-08-21 16:31:51][350824194463575][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:31:51][350824194463575][604 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23807264 83384 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:31:51][350824194463575][604 ms][DEBUG] targetPkg: running
[2025-08-21 16:31:51][350824194463575][605 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:31:51][350824194463575][605 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:31:51][350824194463575][605 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTk0NDYzNTc1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMDFFOTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDI1In0='" -e "main()" -q"
[2025-08-21 16:31:51][350824194463575][605 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:31:51][350824194463575][605 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTk0NDYzNTc1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMDFFOTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDI1In0='" -e "main()" -q"
[2025-08-21 16:31:54][350824194463575][3229 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODI0MTk0NDYzNTc1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMDFFOTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDI1In0="\r\n
[2025-08-21 16:31:57][350824194463575][6618 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55320d3a-0f16-4e61-83c7-018d6e238e6e","id":"QR_55320d3a-0f16-4e61-83c7-018d6e238e6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:31:57][350824194463575][6619 ms][DEBUG] proc_open done in 6014 ms; code=0; res.len=3152
[2025-08-21 16:31:57][350824194463575][6619 ms][DEBUG] END   runCmdUntilRes#1 in 6014 ms
[2025-08-21 16:31:57][350824194463575][6619 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:33:14][352967410062040][0 ms][INFO] === Request start ===
[2025-08-21 16:33:14][352967410062040][1 ms][DEBUG] START check_frida
[2025-08-21 16:33:14][352967410062040][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:33:15][352967410062040][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2332716   4268 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:33:15][352967410062040][291 ms][DEBUG] check_frida: running
[2025-08-21 16:33:15][352967410062040][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 16:33:15][352967410062040][291 ms][DEBUG] START check_scloud
[2025-08-21 16:33:15][352967410062040][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:33:15][352967410062040][603 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23807296 82904 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:33:15][352967410062040][603 ms][DEBUG] targetPkg: running
[2025-08-21 16:33:15][352967410062040][603 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:33:15][352967410062040][603 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:33:15][352967410062040][603 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3NDEwMDYyMDQwIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI2OFgzMDNLNzlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQwNyJ9'" -e "main()" -q"
[2025-08-21 16:33:15][352967410062040][603 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:33:15][352967410062040][603 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3NDEwMDYyMDQwIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI2OFgzMDNLNzlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQwNyJ9'" -e "main()" -q"
[2025-08-21 16:33:17][352967410062040][3227 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTY3NDEwMDYyMDQwIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI2OFgzMDNLNzlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQwNyJ9"\r\n
[2025-08-21 16:33:20][352967410062040][5367 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ce49e5e-fa43-4483-9f80-7a016017955c","id":"QR_6ce49e5e-fa43-4483-9f80-7a016017955c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:33:20][352967410062040][5367 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 16:33:20][352967410062040][5367 ms][DEBUG] END   runCmdUntilRes#1 in 4764 ms
[2025-08-21 16:33:20][352967410062040][5367 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:34:08][350226695972098][1 ms][INFO] === Request start ===
[2025-08-21 16:34:08][350226695972098][1 ms][DEBUG] START check_frida
[2025-08-21 16:34:08][350226695972098][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:34:08][350226695972098][301 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:34:08][350226695972098][301 ms][DEBUG] check_frida: running
[2025-08-21 16:34:08][350226695972098][301 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 16:34:08][350226695972098][301 ms][DEBUG] START check_internet
[2025-08-21 16:34:08][350226695972098][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:34:09][350226695972098][660 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=262 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 262.820/262.820/262.820/0.000 ms\n
[2025-08-21 16:34:09][350226695972098][660 ms][DEBUG] check_internet: online
[2025-08-21 16:34:09][350226695972098][660 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 16:34:09][350226695972098][660 ms][DEBUG] START check_scloud
[2025-08-21 16:34:09][350226695972098][660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:34:09][350226695972098][894 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23807328 83496 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:34:09][350226695972098][894 ms][DEBUG] targetPkg: running
[2025-08-21 16:34:09][350226695972098][894 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 16:34:09][350226695972098][894 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:34:09][350226695972098][895 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjI2Njk1OTcyMDk4IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdCMDBIRzVUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwOCJ9'" -e "main()" -q"
[2025-08-21 16:34:09][350226695972098][895 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:34:09][350226695972098][895 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjI2Njk1OTcyMDk4IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdCMDBIRzVUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwOCJ9'" -e "main()" -q"
[2025-08-21 16:34:12][350226695972098][3534 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjI2Njk1OTcyMDk4IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdCMDBIRzVUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwOCJ9"\r\n
[2025-08-21 16:34:14][350226695972098][5502 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72a78e76-22d7-4b5a-8cbc-268bc9094bc8","id":"QR_72a78e76-22d7-4b5a-8cbc-268bc9094bc8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:34:14][350226695972098][5502 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 16:34:14][350226695972098][5502 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-21 16:34:14][350226695972098][5503 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:34:55][350025490776716][1 ms][INFO] === Request start ===
[2025-08-21 16:34:55][350025490776716][1 ms][DEBUG] START check_frida
[2025-08-21 16:34:55][350025490776716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:34:56][350025490776716][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2332716   4268 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:34:56][350025490776716][293 ms][DEBUG] check_frida: running
[2025-08-21 16:34:56][350025490776716][293 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 16:34:56][350025490776716][293 ms][DEBUG] START check_internet
[2025-08-21 16:34:56][350025490776716][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:34:56][350025490776716][605 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.908/206.908/206.908/0.000 ms\n
[2025-08-21 16:34:56][350025490776716][605 ms][DEBUG] check_internet: online
[2025-08-21 16:34:56][350025490776716][605 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 16:34:56][350025490776716][605 ms][DEBUG] START check_scloud
[2025-08-21 16:34:56][350025490776716][605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:34:56][350025490776716][856 ms][DEBUG] SU: done in 251 ms; outu0_a118       7086 20714 23807360 82996 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:34:56][350025490776716][857 ms][DEBUG] targetPkg: running
[2025-08-21 16:34:56][350025490776716][857 ms][DEBUG] END   check_scloud in 252 ms
[2025-08-21 16:34:56][350025490776716][857 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:34:56][350025490776716][857 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI1NDkwNzc2NzE2IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMDFLTFdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk5OSJ9'" -e "main()" -q"
[2025-08-21 16:34:56][350025490776716][857 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:34:56][350025490776716][857 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI1NDkwNzc2NzE2IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMDFLTFdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk5OSJ9'" -e "main()" -q"
[2025-08-21 16:34:59][350025490776716][3495 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDI1NDkwNzc2NzE2IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMDFLTFdGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk5OSJ9"\r\n
[2025-08-21 16:35:01][350025490776716][5619 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2dc08d5f-216c-4825-b640-a1312c37ab7a","id":"QR_2dc08d5f-216c-4825-b640-a1312c37ab7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:35:01][350025490776716][5619 ms][DEBUG] proc_open done in 4762 ms; code=0; res.len=3152
[2025-08-21 16:35:01][350025490776716][5619 ms][DEBUG] END   runCmdUntilRes#1 in 4762 ms
[2025-08-21 16:35:01][350025490776716][5619 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:35:03][357967970119870][1 ms][INFO] === Request start ===
[2025-08-21 16:35:03][357967970119870][1 ms][DEBUG] START check_frida
[2025-08-21 16:35:03][357967970119870][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:35:03][357967970119870][292 ms][DEBUG] SU: done in 291 ms; outroot          4632     1 2349136   4276 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:35:03][357967970119870][292 ms][DEBUG] check_frida: running
[2025-08-21 16:35:03][357967970119870][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 16:35:03][357967970119870][292 ms][DEBUG] START check_scloud
[2025-08-21 16:35:03][357967970119870][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:35:04][357967970119870][542 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23807392 83620 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:35:04][357967970119870][542 ms][DEBUG] targetPkg: running
[2025-08-21 16:35:04][357967970119870][542 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 16:35:04][357967970119870][542 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:35:04][357967970119870][543 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTcwMTE5ODcwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMEg2SjVaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzYyNiJ9'" -e "main()" -q"
[2025-08-21 16:35:04][357967970119870][543 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:35:04][357967970119870][543 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTcwMTE5ODcwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMEg2SjVaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzYyNiJ9'" -e "main()" -q"
[2025-08-21 16:35:06][357967970119870][3182 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTY3OTcwMTE5ODcwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMEg2SjVaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzYyNiJ9"\r\n
[2025-08-21 16:35:08][357967970119870][4994 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27367b96-82b4-4c26-9194-7901964573d2","id":"QR_27367b96-82b4-4c26-9194-7901964573d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:35:08][357967970119870][4994 ms][DEBUG] proc_open done in 4452 ms; code=0; res.len=3152
[2025-08-21 16:35:08][357967970119870][4994 ms][DEBUG] END   runCmdUntilRes#1 in 4452 ms
[2025-08-21 16:35:08][357967970119870][4994 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:35:09][357962509697116][0 ms][INFO] === Request start ===
[2025-08-21 16:35:09][357962509697116][1 ms][DEBUG] START check_frida
[2025-08-21 16:35:09][357962509697116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:35:09][357962509697116][302 ms][DEBUG] SU: done in 301 ms; outroot          4632     1 2349136   4260 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:35:09][357962509697116][302 ms][DEBUG] check_frida: running
[2025-08-21 16:35:09][357962509697116][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 16:35:09][357962509697116][302 ms][DEBUG] START check_scloud
[2025-08-21 16:35:09][357962509697116][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:35:09][357962509697116][599 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23807424 83056 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:35:09][357962509697116][599 ms][DEBUG] targetPkg: running
[2025-08-21 16:35:09][357962509697116][599 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:35:09][357962509697116][599 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:35:09][357962509697116][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA5Njk3MTE2IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDBMMVJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE1MCJ9'" -e "main()" -q"
[2025-08-21 16:35:09][357962509697116][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:35:09][357962509697116][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA5Njk3MTE2IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDBMMVJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE1MCJ9'" -e "main()" -q"
[2025-08-21 16:35:12][357962509697116][3208 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTYyNTA5Njk3MTE2IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFdBMDBMMVJYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE1MCJ9"\r\n
[2025-08-21 16:35:14][357962509697116][5051 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9fa50273-bf5a-4fec-bacf-61bb73857d6a","id":"QR_9fa50273-bf5a-4fec-bacf-61bb73857d6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:35:14][357962509697116][5051 ms][DEBUG] proc_open done in 4452 ms; code=0; res.len=3152
[2025-08-21 16:35:14][357962509697116][5051 ms][DEBUG] END   runCmdUntilRes#1 in 4452 ms
[2025-08-21 16:35:14][357962509697116][5052 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:35:21][354106244243090][0 ms][INFO] === Request start ===
[2025-08-21 16:35:21][354106244243090][1 ms][DEBUG] START check_frida
[2025-08-21 16:35:21][354106244243090][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:35:21][354106244243090][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2349136   4268 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:35:21][354106244243090][295 ms][DEBUG] check_frida: running
[2025-08-21 16:35:21][354106244243090][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 16:35:21][354106244243090][295 ms][DEBUG] START check_scloud
[2025-08-21 16:35:21][354106244243090][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:35:21][354106244243090][591 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23807456 83652 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:35:21][354106244243090][591 ms][DEBUG] targetPkg: running
[2025-08-21 16:35:21][354106244243090][591 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:35:21][354106244243090][591 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:35:21][354106244243090][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2MjQ0MjQzMDkwIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MFpLOFNBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY0MSJ9'" -e "main()" -q"
[2025-08-21 16:35:21][354106244243090][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:35:21][354106244243090][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2MjQ0MjQzMDkwIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MFpLOFNBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY0MSJ9'" -e "main()" -q"
[2025-08-21 16:35:24][354106244243090][3231 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTA2MjQ0MjQzMDkwIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MFpLOFNBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY0MSJ9"\r\n
[2025-08-21 16:35:26][354106244243090][5121 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f54038b8-c4a3-4d6e-a465-8a7db80d8e15","id":"QR_f54038b8-c4a3-4d6e-a465-8a7db80d8e15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:35:26][354106244243090][5121 ms][DEBUG] proc_open done in 4530 ms; code=0; res.len=3152
[2025-08-21 16:35:26][354106244243090][5121 ms][DEBUG] END   runCmdUntilRes#1 in 4530 ms
[2025-08-21 16:35:26][354106244243090][5121 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:36:01][350832414770935][0 ms][INFO] === Request start ===
[2025-08-21 16:36:01][350832414770935][1 ms][DEBUG] START check_frida
[2025-08-21 16:36:01][350832414770935][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:36:01][350832414770935][313 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2332716   4272 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:36:01][350832414770935][313 ms][DEBUG] check_frida: running
[2025-08-21 16:36:01][350832414770935][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 16:36:01][350832414770935][313 ms][DEBUG] START check_internet
[2025-08-21 16:36:01][350832414770935][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:36:01][350832414770935][750 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.093/202.093/202.093/0.000 ms\n
[2025-08-21 16:36:01][350832414770935][750 ms][DEBUG] check_internet: online
[2025-08-21 16:36:01][350832414770935][751 ms][DEBUG] END   check_internet in 437 ms
[2025-08-21 16:36:01][350832414770935][751 ms][DEBUG] START check_scloud
[2025-08-21 16:36:01][350832414770935][751 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:36:02][350832414770935][1031 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23807488 82920 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:36:02][350832414770935][1031 ms][DEBUG] targetPkg: running
[2025-08-21 16:36:02][350832414770935][1031 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:36:02][350832414770935][1031 ms][DEBUG] rawBody.length=1159
[2025-08-21 16:36:02][350832414770935][1032 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODMyNDE0NzcwOTM1IiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDcwMkpaR0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY1MTkifQ=='" -e "main()" -q"
[2025-08-21 16:36:02][350832414770935][1032 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:36:02][350832414770935][1032 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODMyNDE0NzcwOTM1IiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDcwMkpaR0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY1MTkifQ=='" -e "main()" -q"
[2025-08-21 16:36:04][350832414770935][3656 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODMyNDE0NzcwOTM1IiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDcwMkpaR0EiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY1MTkifQ=="\r\n
[2025-08-21 16:36:09][359044475850587][0 ms][INFO] === Request start ===
[2025-08-21 16:36:10][350832414770935][9014 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6162558e-ec77-4a49-9c49-2f81e6eaec91","id":"QR_6162558e-ec77-4a49-9c49-2f81e6eaec91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:36:10][350832414770935][9014 ms][DEBUG] proc_open done in 7982 ms; code=0; res.len=3152
[2025-08-21 16:36:10][350832414770935][9014 ms][DEBUG] END   runCmdUntilRes#1 in 7982 ms
[2025-08-21 16:36:10][350832414770935][9014 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:36:10][359044475850587][1007 ms][DEBUG] START check_frida
[2025-08-21 16:36:10][359044475850587][1007 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:36:11][359044475850587][1273 ms][DEBUG] SU: done in 266 ms; outroot          4632     1 2349136   4260 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:36:11][359044475850587][1273 ms][DEBUG] check_frida: running
[2025-08-21 16:36:11][359044475850587][1273 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 16:36:11][359044475850587][1273 ms][DEBUG] START check_internet
[2025-08-21 16:36:11][359044475850587][1273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:36:11][359044475850587][1632 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.279/252.279/252.279/0.000 ms\n
[2025-08-21 16:36:11][359044475850587][1632 ms][DEBUG] check_internet: online
[2025-08-21 16:36:11][359044475850587][1632 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 16:36:11][359044475850587][1632 ms][DEBUG] START check_scloud
[2025-08-21 16:36:11][359044475850587][1633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:36:11][359044475850587][1913 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23807520 83504 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:36:11][359044475850587][1913 ms][DEBUG] targetPkg: running
[2025-08-21 16:36:11][359044475850587][1913 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:36:11][359044475850587][1913 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:36:11][359044475850587][1913 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MDQ0NDc1ODUwNTg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMEtHWFRFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA1MSJ9'" -e "main()" -q"
[2025-08-21 16:36:11][359044475850587][1913 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:36:11][359044475850587][1913 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MDQ0NDc1ODUwNTg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMEtHWFRFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA1MSJ9'" -e "main()" -q"
[2025-08-21 16:36:14][359044475850587][4538 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MDQ0NDc1ODUwNTg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMEtHWFRFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA1MSJ9"\r\n
[2025-08-21 16:36:17][359044475850587][7396 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9666507f-e1ad-4129-9c62-fd246ee0c920","id":"QR_9666507f-e1ad-4129-9c62-fd246ee0c920","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:36:17][359044475850587][7396 ms][DEBUG] proc_open done in 5483 ms; code=0; res.len=3152
[2025-08-21 16:36:17][359044475850587][7396 ms][DEBUG] END   runCmdUntilRes#1 in 5483 ms
[2025-08-21 16:36:17][359044475850587][7396 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:39:09][351165702766995][1 ms][INFO] === Request start ===
[2025-08-21 16:39:09][351165702766995][1 ms][DEBUG] START check_frida
[2025-08-21 16:39:09][351165702766995][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:39:10][351165702766995][294 ms][DEBUG] SU: done in 293 ms; outroot          4632     1 2332716   4272 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:39:10][351165702766995][294 ms][DEBUG] check_frida: running
[2025-08-21 16:39:10][351165702766995][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 16:39:10][351165702766995][294 ms][DEBUG] START check_scloud
[2025-08-21 16:39:10][351165702766995][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:39:10][351165702766995][529 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23807552 83176 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:39:10][351165702766995][529 ms][DEBUG] targetPkg: running
[2025-08-21 16:39:10][351165702766995][529 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 16:39:10][351165702766995][529 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:39:10][351165702766995][529 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTY1NzAyNzY2OTk1IiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MTAxU1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA2MiJ9'" -e "main()" -q"
[2025-08-21 16:39:10][351165702766995][529 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:39:10][351165702766995][529 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTY1NzAyNzY2OTk1IiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MTAxU1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA2MiJ9'" -e "main()" -q"
[2025-08-21 16:39:12][351165702766995][3168 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTY1NzAyNzY2OTk1IiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g4MTAxU1BZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA2MiJ9"\r\n
[2025-08-21 16:39:15][351165702766995][5231 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd7efb12-8f32-424d-8539-2aad156e62a8","id":"QR_fd7efb12-8f32-424d-8539-2aad156e62a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:39:15][351165702766995][5231 ms][DEBUG] proc_open done in 4702 ms; code=0; res.len=3152
[2025-08-21 16:39:15][351165702766995][5231 ms][DEBUG] END   runCmdUntilRes#1 in 4702 ms
[2025-08-21 16:39:15][351165702766995][5231 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:39:36][357778514405687][0 ms][INFO] === Request start ===
[2025-08-21 16:39:36][357778514405687][1 ms][DEBUG] START check_frida
[2025-08-21 16:39:36][357778514405687][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:39:36][357778514405687][301 ms][DEBUG] SU: done in 301 ms; outroot          4632     1 2332716   4280 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:39:36][357778514405687][302 ms][DEBUG] check_frida: running
[2025-08-21 16:39:36][357778514405687][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 16:39:36][357778514405687][302 ms][DEBUG] START check_scloud
[2025-08-21 16:39:36][357778514405687][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:39:36][357778514405687][598 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23807584 82584 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:39:36][357778514405687][598 ms][DEBUG] targetPkg: running
[2025-08-21 16:39:36][357778514405687][598 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:39:36][357778514405687][598 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:39:36][357778514405687][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzc4NTE0NDA1Njg3IiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc4MTNMUllBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzk2In0='" -e "main()" -q"
[2025-08-21 16:39:36][357778514405687][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:39:36][357778514405687][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzc4NTE0NDA1Njg3IiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc4MTNMUllBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzk2In0='" -e "main()" -q"
[2025-08-21 16:39:39][357778514405687][3222 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Nzc4NTE0NDA1Njg3IiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc4MTNMUllBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzk2In0="\r\n
[2025-08-21 16:39:42][357778514405687][6175 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb1226f2-811b-4e60-82db-dbfd12ddc413","id":"QR_fb1226f2-811b-4e60-82db-dbfd12ddc413","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:39:42][357778514405687][6176 ms][DEBUG] proc_open done in 5577 ms; code=0; res.len=3152
[2025-08-21 16:39:42][357778514405687][6176 ms][DEBUG] END   runCmdUntilRes#1 in 5577 ms
[2025-08-21 16:39:42][357778514405687][6176 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:42:07][352795332784346][1 ms][INFO] === Request start ===
[2025-08-21 16:42:07][352795332784346][1 ms][DEBUG] START check_frida
[2025-08-21 16:42:07][352795332784346][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:42:07][352795332784346][283 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2332716   4260 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:42:07][352795332784346][283 ms][DEBUG] check_frida: running
[2025-08-21 16:42:07][352795332784346][283 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 16:42:07][352795332784346][283 ms][DEBUG] START check_internet
[2025-08-21 16:42:07][352795332784346][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:42:08][352795332784346][783 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.610/202.610/202.610/0.000 ms\n
[2025-08-21 16:42:08][352795332784346][783 ms][DEBUG] check_internet: online
[2025-08-21 16:42:08][352795332784346][783 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 16:42:08][352795332784346][783 ms][DEBUG] START check_scloud
[2025-08-21 16:42:08][352795332784346][783 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:42:08][352795332784346][1048 ms][DEBUG] SU: done in 265 ms; outu0_a118       7086 20714 23807616 83172 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:42:08][352795332784346][1048 ms][DEBUG] targetPkg: running
[2025-08-21 16:42:08][352795332784346][1048 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 16:42:08][352795332784346][1048 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:42:08][352795332784346][1048 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzk1MzMyNzg0MzQ2IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJBMVg1NDhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNV0QiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA1OCJ9'" -e "main()" -q"
[2025-08-21 16:42:08][352795332784346][1048 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:42:08][352795332784346][1048 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzk1MzMyNzg0MzQ2IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJBMVg1NDhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNV0QiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA1OCJ9'" -e "main()" -q"
[2025-08-21 16:42:11][352795332784346][3673 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzk1MzMyNzg0MzQ2IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJBMVg1NDhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNV0QiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA1OCJ9"\r\n
[2025-08-21 16:42:13][352795332784346][5782 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee1b09d7-8e62-4ef1-b317-41f07d4f71ff","id":"QR_ee1b09d7-8e62-4ef1-b317-41f07d4f71ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:42:13][352795332784346][5782 ms][DEBUG] proc_open done in 4734 ms; code=0; res.len=3152
[2025-08-21 16:42:13][352795332784346][5782 ms][DEBUG] END   runCmdUntilRes#1 in 4734 ms
[2025-08-21 16:42:13][352795332784346][5782 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:43:08][351317841166591][0 ms][INFO] === Request start ===
[2025-08-21 16:43:08][351317841166591][1 ms][DEBUG] START check_frida
[2025-08-21 16:43:08][351317841166591][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:43:08][351317841166591][302 ms][DEBUG] SU: done in 301 ms; outroot          4632     1 2332716   4244 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:43:08][351317841166591][302 ms][DEBUG] check_frida: running
[2025-08-21 16:43:08][351317841166591][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 16:43:08][351317841166591][303 ms][DEBUG] START check_scloud
[2025-08-21 16:43:08][351317841166591][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:43:08][351317841166591][615 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23807648 77120 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:43:08][351317841166591][615 ms][DEBUG] targetPkg: running
[2025-08-21 16:43:08][351317841166591][615 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:43:08][351317841166591][615 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:43:08][351317841166591][615 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzE3ODQxMTY2NTkxIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMFpER1hNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMxMCJ9'" -e "main()" -q"
[2025-08-21 16:43:08][351317841166591][615 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:43:08][351317841166591][615 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzE3ODQxMTY2NTkxIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMFpER1hNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMxMCJ9'" -e "main()" -q"
[2025-08-21 16:43:11][351317841166591][3239 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzE3ODQxMTY2NTkxIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMFpER1hNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMxMCJ9"\r\n
[2025-08-21 16:43:13][351317841166591][5379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f4d1c29-ec4e-4a62-99a9-a75a8fe4395d","id":"QR_4f4d1c29-ec4e-4a62-99a9-a75a8fe4395d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:43:13][351317841166591][5380 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 16:43:13][351317841166591][5380 ms][DEBUG] END   runCmdUntilRes#1 in 4765 ms
[2025-08-21 16:43:13][351317841166591][5380 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:43:15][351494692347396][0 ms][INFO] === Request start ===
[2025-08-21 16:43:15][351494692347396][1 ms][DEBUG] START check_frida
[2025-08-21 16:43:15][351494692347396][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:43:16][351494692347396][295 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2349136   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:43:16][351494692347396][296 ms][DEBUG] check_frida: running
[2025-08-21 16:43:16][351494692347396][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 16:43:16][351494692347396][296 ms][DEBUG] START check_scloud
[2025-08-21 16:43:16][351494692347396][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:43:16][351494692347396][608 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23807680 77680 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:43:16][351494692347396][608 ms][DEBUG] targetPkg: running
[2025-08-21 16:43:16][351494692347396][608 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:43:16][351494692347396][608 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:43:16][351494692347396][608 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDk0NjkyMzQ3Mzk2IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMDJNRFRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjM2MSJ9'" -e "main()" -q"
[2025-08-21 16:43:16][351494692347396][608 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:43:16][351494692347396][608 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDk0NjkyMzQ3Mzk2IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMDJNRFRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjM2MSJ9'" -e "main()" -q"
[2025-08-21 16:43:19][351494692347396][3279 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDk0NjkyMzQ3Mzk2IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMDJNRFRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjM2MSJ9"\r\n
[2025-08-21 16:43:21][351494692347396][5294 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9293542e-b906-48c9-8a09-ccb074d439e0","id":"QR_9293542e-b906-48c9-8a09-ccb074d439e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:43:21][351494692347396][5294 ms][DEBUG] proc_open done in 4686 ms; code=0; res.len=3152
[2025-08-21 16:43:21][351494692347396][5294 ms][DEBUG] END   runCmdUntilRes#1 in 4686 ms
[2025-08-21 16:43:21][351494692347396][5294 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:44:09][351283762174750][0 ms][INFO] === Request start ===
[2025-08-21 16:44:09][351283762174750][0 ms][DEBUG] START check_frida
[2025-08-21 16:44:09][351283762174750][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:44:09][351283762174750][306 ms][DEBUG] SU: done in 306 ms; outroot          4632     1 2332716   4248 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:44:09][351283762174750][306 ms][DEBUG] check_frida: running
[2025-08-21 16:44:09][351283762174750][306 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 16:44:09][351283762174750][306 ms][DEBUG] START check_internet
[2025-08-21 16:44:09][351283762174750][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:44:09][351283762174750][603 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.691/186.691/186.691/0.000 ms\n
[2025-08-21 16:44:09][351283762174750][603 ms][DEBUG] check_internet: online
[2025-08-21 16:44:09][351283762174750][603 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 16:44:09][351283762174750][604 ms][DEBUG] START check_scloud
[2025-08-21 16:44:09][351283762174750][604 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:44:10][351283762174750][853 ms][DEBUG] SU: done in 249 ms; outu0_a118       7086 20714 23807712 77136 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:44:10][351283762174750][853 ms][DEBUG] targetPkg: running
[2025-08-21 16:44:10][351283762174750][853 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 16:44:10][351283762174750][853 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:44:10][351283762174750][853 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjgzNzYyMTc0NzUwIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0MEwySE5KIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NTk0In0='" -e "main()" -q"
[2025-08-21 16:44:10][351283762174750][853 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:44:10][351283762174750][853 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjgzNzYyMTc0NzUwIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0MEwySE5KIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NTk0In0='" -e "main()" -q"
[2025-08-21 16:44:12][351283762174750][3508 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjgzNzYyMTc0NzUwIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0MEwySE5KIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NTk0In0="\r\n
[2025-08-21 16:44:17][351283762174750][8351 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e6babd8-8710-42f3-a31f-385fdcc7e216","id":"QR_7e6babd8-8710-42f3-a31f-385fdcc7e216","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:44:17][351283762174750][8351 ms][DEBUG] proc_open done in 7498 ms; code=0; res.len=3152
[2025-08-21 16:44:17][351283762174750][8351 ms][DEBUG] END   runCmdUntilRes#1 in 7498 ms
[2025-08-21 16:44:17][351283762174750][8351 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:45:09][354030116319384][1 ms][INFO] === Request start ===
[2025-08-21 16:45:09][354030116319384][1 ms][DEBUG] START check_frida
[2025-08-21 16:45:09][354030116319384][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:45:10][354030116319384][282 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2332716   4244 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:45:10][354030116319384][282 ms][DEBUG] check_frida: running
[2025-08-21 16:45:10][354030116319384][282 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 16:45:10][354030116319384][282 ms][DEBUG] START check_scloud
[2025-08-21 16:45:10][354030116319384][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:45:10][354030116319384][563 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23807744 77928 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:45:10][354030116319384][563 ms][DEBUG] targetPkg: running
[2025-08-21 16:45:10][354030116319384][563 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:45:10][354030116319384][563 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:45:10][354030116319384][563 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDMwMTE2MzE5Mzg0IiwibW9kZWwiOiJTTS1BNTE1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE40MjJZSE1GIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTgwIn0='" -e "main()" -q"
[2025-08-21 16:45:10][354030116319384][563 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:45:10][354030116319384][563 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDMwMTE2MzE5Mzg0IiwibW9kZWwiOiJTTS1BNTE1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE40MjJZSE1GIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTgwIn0='" -e "main()" -q"
[2025-08-21 16:45:13][354030116319384][3203 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDMwMTE2MzE5Mzg0IiwibW9kZWwiOiJTTS1BNTE1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE40MjJZSE1GIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTgwIn0="\r\n
[2025-08-21 16:45:15][354030116319384][5843 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5eec5905-0f4e-4986-8f46-01dd1c938ba8","id":"QR_5eec5905-0f4e-4986-8f46-01dd1c938ba8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:45:15][354030116319384][5843 ms][DEBUG] proc_open done in 5280 ms; code=0; res.len=3152
[2025-08-21 16:45:15][354030116319384][5843 ms][DEBUG] END   runCmdUntilRes#1 in 5280 ms
[2025-08-21 16:45:15][354030116319384][5843 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:45:33][350079260553243][0 ms][INFO] === Request start ===
[2025-08-21 16:45:33][350079260553243][0 ms][DEBUG] START check_frida
[2025-08-21 16:45:33][350079260553243][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:45:34][350079260553243][286 ms][DEBUG] SU: done in 286 ms; outroot          4632     1 2332716   4248 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:45:34][350079260553243][286 ms][DEBUG] check_frida: running
[2025-08-21 16:45:34][350079260553243][286 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 16:45:34][350079260553243][286 ms][DEBUG] START check_scloud
[2025-08-21 16:45:34][350079260553243][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:45:34][350079260553243][568 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23807776 78716 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:45:34][350079260553243][568 ms][DEBUG] targetPkg: running
[2025-08-21 16:45:34][350079260553243][568 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:45:34][350079260553243][568 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:45:34][350079260553243][568 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDc5MjYwNTUzMjQzIiwibW9kZWwiOiJTTS1BMTY2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMkY0NlFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTA5MCJ9'" -e "main()" -q"
[2025-08-21 16:45:34][350079260553243][568 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:45:34][350079260553243][568 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDc5MjYwNTUzMjQzIiwibW9kZWwiOiJTTS1BMTY2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMkY0NlFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTA5MCJ9'" -e "main()" -q"
[2025-08-21 16:45:37][350079260553243][3176 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDc5MjYwNTUzMjQzIiwibW9kZWwiOiJTTS1BMTY2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMkY0NlFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTA5MCJ9"\r\n
[2025-08-21 16:45:39][350079260553243][5363 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e966c31-a894-4c49-9b44-c143250f3775","id":"QR_5e966c31-a894-4c49-9b44-c143250f3775","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:45:39][350079260553243][5363 ms][DEBUG] proc_open done in 4795 ms; code=0; res.len=3152
[2025-08-21 16:45:39][350079260553243][5363 ms][DEBUG] END   runCmdUntilRes#1 in 4795 ms
[2025-08-21 16:45:39][350079260553243][5363 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:45:49][353055521214475][0 ms][INFO] === Request start ===
[2025-08-21 16:45:49][353055521214475][0 ms][DEBUG] START check_frida
[2025-08-21 16:45:49][353055521214475][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:45:54][353055521214475][5043 ms][DEBUG] SU: done in 5043 ms; out
[2025-08-21 16:45:54][353055521214475][5043 ms][WARN] check_frida: not running, restarting
[2025-08-21 16:45:54][353055521214475][5043 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 16:45:54][353055521214475][5074 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:45:54][353055521214475][5074 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 16:45:55][353055521214475][5105 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:45:57][353055521214475][7121 ms][DEBUG] END   check_frida in 7120 ms
[2025-08-21 16:45:57][353055521214475][7121 ms][DEBUG] START check_scloud
[2025-08-21 16:45:57][353055521214475][7121 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:45:57][353055521214475][7152 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:45:57][353055521214475][7152 ms][WARN] targetPkg: not running, restarting
[2025-08-21 16:45:57][353055521214475][7152 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 16:45:57][353055521214475][7183 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:45:57][353055521214475][7183 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 16:45:57][353055521214475][7214 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:45:59][353055521214475][9229 ms][DEBUG] END   check_scloud in 2109 ms
[2025-08-21 16:45:59][353055521214475][9230 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:45:59][353055521214475][9230 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDU1NTIxMjE0NDc1IiwibW9kZWwiOiJTTS1TOTA2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q1MDBES0ZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU0NCJ9'" -e "main()" -q"
[2025-08-21 16:45:59][353055521214475][9230 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:45:59][353055521214475][9230 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDU1NTIxMjE0NDc1IiwibW9kZWwiOiJTTS1TOTA2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q1MDBES0ZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU0NCJ9'" -e "main()" -q"
[2025-08-21 16:46:00][353055521214475][10995 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 16:46:01][353055521214475][11151 ms][DEBUG] proc_open done in 1921 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 16:46:01][353055521214475][11151 ms][DEBUG] END   runCmdUntilRes#1 in 1921 ms
[2025-08-21 16:46:01][353055521214475][11151 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 16:46:02][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 16:46:02][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 16:46:57][353055521214475][1 ms][INFO] === Request start ===
[2025-08-21 16:46:57][353055521214475][1 ms][DEBUG] START check_frida
[2025-08-21 16:46:57][353055521214475][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:46:57][353055521214475][28 ms][DEBUG] SU: done in 26 ms; out
[2025-08-21 16:46:57][353055521214475][28 ms][WARN] check_frida: not running, restarting
[2025-08-21 16:46:57][353055521214475][28 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 16:46:57][353055521214475][59 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:46:57][353055521214475][59 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 16:46:57][353055521214475][90 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:46:59][353055521214475][2105 ms][DEBUG] END   check_frida in 2104 ms
[2025-08-21 16:46:59][353055521214475][2106 ms][DEBUG] START check_internet
[2025-08-21 16:46:59][353055521214475][2106 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:46:59][353055521214475][2152 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 16:46:59][353055521214475][2153 ms][WARN] check_internet: offline
[2025-08-21 16:46:59][353055521214475][2153 ms][DEBUG] END   check_internet in 47 ms
[2025-08-21 16:47:00][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 16:47:00][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 16:47:08][354956900062428][1 ms][INFO] === Request start ===
[2025-08-21 16:47:08][354956900062428][1 ms][DEBUG] START check_frida
[2025-08-21 16:47:08][354956900062428][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:47:08][354956900062428][37 ms][DEBUG] SU: done in 36 ms; out
[2025-08-21 16:47:08][354956900062428][37 ms][WARN] check_frida: not running, restarting
[2025-08-21 16:47:08][354956900062428][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 16:47:08][354956900062428][68 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:47:08][354956900062428][68 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 16:47:08][354956900062428][100 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:47:10][354956900062428][2115 ms][DEBUG] END   check_frida in 2113 ms
[2025-08-21 16:47:10][354956900062428][2115 ms][DEBUG] START check_scloud
[2025-08-21 16:47:10][354956900062428][2115 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:47:10][354956900062428][2162 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 16:47:10][354956900062428][2162 ms][WARN] targetPkg: not running, restarting
[2025-08-21 16:47:10][354956900062428][2162 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 16:47:10][354956900062428][2193 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:47:10][354956900062428][2193 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 16:47:10][354956900062428][2224 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:47:13][354956900062428][4239 ms][DEBUG] END   check_scloud in 2124 ms
[2025-08-21 16:47:13][354956900062428][4239 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:47:13][354956900062428][4240 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTU2OTAwMDYyNDI4IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE5BMEYwWjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklDRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNjE3In0='" -e "main()" -q"
[2025-08-21 16:47:13][354956900062428][4240 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:47:13][354956900062428][4240 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTU2OTAwMDYyNDI4IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE5BMEYwWjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklDRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNjE3In0='" -e "main()" -q"
[2025-08-21 16:47:14][354956900062428][6020 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 16:47:14][354956900062428][6176 ms][DEBUG] proc_open done in 1937 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 16:47:14][354956900062428][6176 ms][DEBUG] END   runCmdUntilRes#1 in 1937 ms
[2025-08-21 16:47:14][354956900062428][6177 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 16:47:16][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 16:47:16][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 16:48:10][354956900062428][1 ms][INFO] === Request start ===
[2025-08-21 16:48:10][354956900062428][1 ms][DEBUG] START check_frida
[2025-08-21 16:48:10][354956900062428][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:48:10][354956900062428][31 ms][DEBUG] SU: done in 29 ms; out
[2025-08-21 16:48:10][354956900062428][31 ms][WARN] check_frida: not running, restarting
[2025-08-21 16:48:10][354956900062428][31 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 16:48:10][354956900062428][62 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:48:10][354956900062428][62 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 16:48:10][354956900062428][93 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:48:12][354956900062428][2108 ms][DEBUG] END   check_frida in 2107 ms
[2025-08-21 16:48:12][354956900062428][2108 ms][DEBUG] START check_internet
[2025-08-21 16:48:12][354956900062428][2108 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:48:12][354956900062428][2155 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 16:48:12][354956900062428][2155 ms][WARN] check_internet: offline
[2025-08-21 16:48:12][354956900062428][2155 ms][DEBUG] END   check_internet in 47 ms
[2025-08-21 16:48:13][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 16:48:13][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 16:48:27][356769545294159][1 ms][INFO] === Request start ===
[2025-08-21 16:48:27][356769545294159][1 ms][DEBUG] START check_frida
[2025-08-21 16:48:27][356769545294159][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:48:27][356769545294159][35 ms][DEBUG] SU: done in 33 ms; out
[2025-08-21 16:48:27][356769545294159][35 ms][WARN] check_frida: not running, restarting
[2025-08-21 16:48:27][356769545294159][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 16:48:27][356769545294159][66 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:48:27][356769545294159][66 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 16:48:27][356769545294159][97 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 16:48:29][356769545294159][2112 ms][DEBUG] END   check_frida in 2111 ms
[2025-08-21 16:48:29][356769545294159][2113 ms][DEBUG] START check_internet
[2025-08-21 16:48:29][356769545294159][2113 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:48:29][356769545294159][2159 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 16:48:29][356769545294159][2160 ms][WARN] check_internet: offline
[2025-08-21 16:48:29][356769545294159][2160 ms][DEBUG] END   check_internet in 47 ms
[2025-08-21 16:48:31][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 16:48:31][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 16:54:20][353122991347183][1 ms][INFO] === Request start ===
[2025-08-21 16:54:20][353122991347183][2 ms][DEBUG] START check_frida
[2025-08-21 16:54:20][353122991347183][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:54:20][353122991347183][309 ms][DEBUG] SU: done in 307 ms; outroot          4632     1 2332716   4232 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:54:20][353122991347183][309 ms][DEBUG] check_frida: running
[2025-08-21 16:54:20][353122991347183][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 16:54:20][353122991347183][309 ms][DEBUG] START check_internet
[2025-08-21 16:54:20][353122991347183][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:54:21][353122991347183][637 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.454/231.454/231.454/0.000 ms\n
[2025-08-21 16:54:21][353122991347183][637 ms][DEBUG] check_internet: online
[2025-08-21 16:54:21][353122991347183][637 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 16:54:21][353122991347183][637 ms][DEBUG] START check_scloud
[2025-08-21 16:54:21][353122991347183][637 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:54:21][353122991347183][949 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23790324 77840 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:54:21][353122991347183][949 ms][DEBUG] targetPkg: running
[2025-08-21 16:54:21][353122991347183][949 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:54:21][353122991347183][949 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:54:21][353122991347183][949 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTIyOTkxMzQ3MTgzIiwibW9kZWwiOiJTTS1BNTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c5MUtCTUVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzQ3In0='" -e "main()" -q"
[2025-08-21 16:54:21][353122991347183][949 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:54:21][353122991347183][949 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTIyOTkxMzQ3MTgzIiwibW9kZWwiOiJTTS1BNTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c5MUtCTUVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzQ3In0='" -e "main()" -q"
[2025-08-21 16:54:24][353122991347183][3589 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTIyOTkxMzQ3MTgzIiwibW9kZWwiOiJTTS1BNTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c5MUtCTUVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzQ3In0="\r\n
[2025-08-21 16:54:29][353122991347183][8918 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e20b700-6371-46fd-b966-21e293e8d9ef","id":"QR_6e20b700-6371-46fd-b966-21e293e8d9ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:54:29][353122991347183][8918 ms][DEBUG] proc_open done in 7968 ms; code=0; res.len=3152
[2025-08-21 16:54:29][353122991347183][8918 ms][DEBUG] END   runCmdUntilRes#1 in 7969 ms
[2025-08-21 16:54:29][353122991347183][8918 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:54:38][350287313000324][0 ms][INFO] === Request start ===
[2025-08-21 16:54:38][350287313000324][0 ms][DEBUG] START check_frida
[2025-08-21 16:54:38][350287313000324][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:54:38][350287313000324][305 ms][DEBUG] SU: done in 305 ms; outroot          4632     1 2349136   4240 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:54:38][350287313000324][306 ms][DEBUG] check_frida: running
[2025-08-21 16:54:38][350287313000324][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 16:54:38][350287313000324][306 ms][DEBUG] START check_internet
[2025-08-21 16:54:38][350287313000324][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:54:39][350287313000324][680 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.048/265.048/265.048/0.000 ms\n
[2025-08-21 16:54:39][350287313000324][680 ms][DEBUG] check_internet: online
[2025-08-21 16:54:39][350287313000324][681 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 16:54:39][350287313000324][681 ms][DEBUG] START check_scloud
[2025-08-21 16:54:39][350287313000324][681 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:54:39][350287313000324][915 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23807840 76676 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:54:39][350287313000324][915 ms][DEBUG] targetPkg: running
[2025-08-21 16:54:39][350287313000324][915 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 16:54:39][350287313000324][915 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:54:39][350287313000324][915 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzEzMDAwMzI0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMEMyTUFNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc2NCJ9'" -e "main()" -q"
[2025-08-21 16:54:39][350287313000324][915 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:54:39][350287313000324][915 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzEzMDAwMzI0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMEMyTUFNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc2NCJ9'" -e "main()" -q"
[2025-08-21 16:54:41][350287313000324][3555 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjg3MzEzMDAwMzI0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMEMyTUFNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc2NCJ9"\r\n
[2025-08-21 16:54:44][350287313000324][5915 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7fc929e2-2294-499c-a70c-a29d7cba551d","id":"QR_7fc929e2-2294-499c-a70c-a29d7cba551d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:54:44][350287313000324][5915 ms][DEBUG] proc_open done in 5000 ms; code=0; res.len=3152
[2025-08-21 16:54:44][350287313000324][5915 ms][DEBUG] END   runCmdUntilRes#1 in 5000 ms
[2025-08-21 16:54:44][350287313000324][5915 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:54:52][350091126314215][1 ms][INFO] === Request start ===
[2025-08-21 16:54:52][350091126314215][1 ms][DEBUG] START check_frida
[2025-08-21 16:54:52][350091126314215][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:54:52][350091126314215][273 ms][DEBUG] SU: done in 271 ms; outroot          4632     1 2349136   4232 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:54:52][350091126314215][273 ms][DEBUG] check_frida: running
[2025-08-21 16:54:52][350091126314215][273 ms][DEBUG] END   check_frida in 272 ms
[2025-08-21 16:54:52][350091126314215][273 ms][DEBUG] START check_internet
[2025-08-21 16:54:52][350091126314215][273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:54:52][350091126314215][633 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.338/227.338/227.338/0.000 ms\n
[2025-08-21 16:54:52][350091126314215][633 ms][DEBUG] check_internet: online
[2025-08-21 16:54:52][350091126314215][633 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 16:54:52][350091126314215][633 ms][DEBUG] START check_scloud
[2025-08-21 16:54:52][350091126314215][633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:54:53][350091126314215][945 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23807872 77228 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:54:53][350091126314215][945 ms][DEBUG] targetPkg: running
[2025-08-21 16:54:53][350091126314215][945 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 16:54:53][350091126314215][945 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:54:53][350091126314215][945 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDkxMTI2MzE0MjE1IiwibW9kZWwiOiJTTS1UNTEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTUExOVFWTk0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkRCVCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODIyIn0='" -e "main()" -q"
[2025-08-21 16:54:53][350091126314215][945 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:54:53][350091126314215][945 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDkxMTI2MzE0MjE1IiwibW9kZWwiOiJTTS1UNTEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTUExOVFWTk0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkRCVCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODIyIn0='" -e "main()" -q"
[2025-08-21 16:54:55][350091126314215][3586 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDkxMTI2MzE0MjE1IiwibW9kZWwiOiJTTS1UNTEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTUExOVFWTk0iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkRCVCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODIyIn0="\r\n
[2025-08-21 16:54:58][350091126314215][5726 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1200801b-ccc1-46f8-b488-ef5434095b3f","id":"QR_1200801b-ccc1-46f8-b488-ef5434095b3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:54:58][350091126314215][5726 ms][DEBUG] proc_open done in 4781 ms; code=0; res.len=3152
[2025-08-21 16:54:58][350091126314215][5726 ms][DEBUG] END   runCmdUntilRes#1 in 4781 ms
[2025-08-21 16:54:58][350091126314215][5726 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:56:08][353302721758897][0 ms][INFO] === Request start ===
[2025-08-21 16:56:08][353302721758897][0 ms][DEBUG] START check_frida
[2025-08-21 16:56:08][353302721758897][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:56:08][353302721758897][292 ms][DEBUG] SU: done in 292 ms; outroot          4632     1 2332716   4240 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:56:08][353302721758897][292 ms][DEBUG] check_frida: running
[2025-08-21 16:56:08][353302721758897][292 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 16:56:08][353302721758897][292 ms][DEBUG] START check_internet
[2025-08-21 16:56:08][353302721758897][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:56:09][353302721758897][777 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.750/201.750/201.750/0.000 ms\n
[2025-08-21 16:56:09][353302721758897][777 ms][DEBUG] check_internet: online
[2025-08-21 16:56:09][353302721758897][777 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 16:56:09][353302721758897][777 ms][DEBUG] START check_scloud
[2025-08-21 16:56:09][353302721758897][777 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:56:09][353302721758897][1089 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23807904 76828 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:56:09][353302721758897][1089 ms][DEBUG] targetPkg: running
[2025-08-21 16:56:09][353302721758897][1089 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 16:56:09][353302721758897][1090 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:56:09][353302721758897][1090 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzAyNzIxNzU4ODk3IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5M04wS1RFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkyMCJ9'" -e "main()" -q"
[2025-08-21 16:56:09][353302721758897][1090 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:56:09][353302721758897][1090 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzAyNzIxNzU4ODk3IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5M04wS1RFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkyMCJ9'" -e "main()" -q"
[2025-08-21 16:56:12][353302721758897][3683 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzAyNzIxNzU4ODk3IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5M04wS1RFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzkyMCJ9"\r\n
[2025-08-21 16:56:14][353302721758897][5886 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44dab4e1-7a8d-4d99-8e3c-049b460e4b07","id":"QR_44dab4e1-7a8d-4d99-8e3c-049b460e4b07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:56:14][353302721758897][5886 ms][DEBUG] proc_open done in 4796 ms; code=0; res.len=3152
[2025-08-21 16:56:14][353302721758897][5886 ms][DEBUG] END   runCmdUntilRes#1 in 4796 ms
[2025-08-21 16:56:14][353302721758897][5886 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:56:45][350299941481230][0 ms][INFO] === Request start ===
[2025-08-21 16:56:45][350299941481230][0 ms][DEBUG] START check_frida
[2025-08-21 16:56:45][350299941481230][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:56:46][350299941481230][270 ms][DEBUG] SU: done in 270 ms; outroot          4632     1 2332716   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:56:46][350299941481230][270 ms][DEBUG] check_frida: running
[2025-08-21 16:56:46][350299941481230][270 ms][DEBUG] END   check_frida in 270 ms
[2025-08-21 16:56:46][350299941481230][270 ms][DEBUG] START check_internet
[2025-08-21 16:56:46][350299941481230][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:56:46][350299941481230][551 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.632/163.632/163.632/0.000 ms\n
[2025-08-21 16:56:46][350299941481230][551 ms][DEBUG] check_internet: online
[2025-08-21 16:56:46][350299941481230][551 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 16:56:46][350299941481230][551 ms][DEBUG] START check_scloud
[2025-08-21 16:56:46][350299941481230][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:56:46][350299941481230][848 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23807936 77388 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:56:46][350299941481230][849 ms][DEBUG] targetPkg: running
[2025-08-21 16:56:46][350299941481230][849 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 16:56:46][350299941481230][849 ms][DEBUG] rawBody.length=1161
[2025-08-21 16:56:46][350299941481230][849 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjk5OTQxNDgxMjMwIiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q05DMTZGNDNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE0NyJ9'" -e "main()" -q"
[2025-08-21 16:56:46][350299941481230][849 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:56:46][350299941481230][849 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjk5OTQxNDgxMjMwIiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q05DMTZGNDNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE0NyJ9'" -e "main()" -q"
[2025-08-21 16:56:49][350299941481230][3489 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjk5OTQxNDgxMjMwIiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q05DMTZGNDNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE0NyJ9"\r\n
[2025-08-21 16:56:51][350299941481230][5317 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88dfd00f-71b3-423b-9930-dac2f6a44774","id":"QR_88dfd00f-71b3-423b-9930-dac2f6a44774","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:56:51][350299941481230][5317 ms][DEBUG] proc_open done in 4468 ms; code=0; res.len=3152
[2025-08-21 16:56:51][350299941481230][5317 ms][DEBUG] END   runCmdUntilRes#1 in 4468 ms
[2025-08-21 16:56:51][350299941481230][5317 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:57:05][359097844367816][0 ms][INFO] === Request start ===
[2025-08-21 16:57:05][359097844367816][1 ms][DEBUG] START check_frida
[2025-08-21 16:57:05][359097844367816][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:57:05][359097844367816][290 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2332716   4240 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:57:05][359097844367816][290 ms][DEBUG] check_frida: running
[2025-08-21 16:57:05][359097844367816][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 16:57:05][359097844367816][290 ms][DEBUG] START check_scloud
[2025-08-21 16:57:05][359097844367816][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:57:06][359097844367816][571 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23807968 76652 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:57:06][359097844367816][571 ms][DEBUG] targetPkg: running
[2025-08-21 16:57:06][359097844367816][571 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 16:57:06][359097844367816][571 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:57:06][359097844367816][572 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MDk3ODQ0MzY3ODE2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMkFXWFZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODczIn0='" -e "main()" -q"
[2025-08-21 16:57:06][359097844367816][572 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:57:06][359097844367816][572 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MDk3ODQ0MzY3ODE2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMkFXWFZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODczIn0='" -e "main()" -q"
[2025-08-21 16:57:08][359097844367816][3227 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MDk3ODQ0MzY3ODE2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMkFXWFZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5ODczIn0="\r\n
[2025-08-21 16:57:11][359097844367816][6071 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1bbc82d-c3bb-47cd-96ad-6545fa9cc0e9","id":"QR_d1bbc82d-c3bb-47cd-96ad-6545fa9cc0e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:57:11][359097844367816][6071 ms][DEBUG] proc_open done in 5500 ms; code=0; res.len=3152
[2025-08-21 16:57:11][359097844367816][6071 ms][DEBUG] END   runCmdUntilRes#1 in 5500 ms
[2025-08-21 16:57:11][359097844367816][6072 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 16:58:08][351331721735029][0 ms][INFO] === Request start ===
[2025-08-21 16:58:08][351331721735029][1 ms][DEBUG] START check_frida
[2025-08-21 16:58:08][351331721735029][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 16:58:08][351331721735029][307 ms][DEBUG] SU: done in 306 ms; outroot          4632     1 2332716   4244 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 16:58:08][351331721735029][307 ms][DEBUG] check_frida: running
[2025-08-21 16:58:08][351331721735029][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 16:58:08][351331721735029][308 ms][DEBUG] START check_internet
[2025-08-21 16:58:08][351331721735029][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 16:58:08][351331721735029][589 ms][DEBUG] SU: done in 282 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.956/182.956/182.956/0.000 ms\n
[2025-08-21 16:58:08][351331721735029][590 ms][DEBUG] check_internet: online
[2025-08-21 16:58:08][351331721735029][590 ms][DEBUG] END   check_internet in 282 ms
[2025-08-21 16:58:08][351331721735029][590 ms][DEBUG] START check_scloud
[2025-08-21 16:58:08][351331721735029][590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 16:58:09][351331721735029][886 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23808000 77220 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 16:58:09][351331721735029][886 ms][DEBUG] targetPkg: running
[2025-08-21 16:58:09][351331721735029][886 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 16:58:09][351331721735029][886 ms][DEBUG] rawBody.length=1160
[2025-08-21 16:58:09][351331721735029][886 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzMxNzIxNzM1MDI5IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1RBMDdKUjBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjY1In0='" -e "main()" -q"
[2025-08-21 16:58:09][351331721735029][886 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 16:58:09][351331721735029][886 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzMxNzIxNzM1MDI5IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1RBMDdKUjBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjY1In0='" -e "main()" -q"
[2025-08-21 16:58:11][351331721735029][3541 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzMxNzIxNzM1MDI5IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1RBMDdKUjBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjY1In0="\r\n
[2025-08-21 16:58:16][351331721735029][8042 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_594c6426-2c8d-4545-8014-63c27bbf4251","id":"QR_594c6426-2c8d-4545-8014-63c27bbf4251","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 16:58:16][351331721735029][8042 ms][DEBUG] proc_open done in 7156 ms; code=0; res.len=3152
[2025-08-21 16:58:16][351331721735029][8042 ms][DEBUG] END   runCmdUntilRes#1 in 7156 ms
[2025-08-21 16:58:16][351331721735029][8042 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:00:46][350090710139657][1 ms][INFO] === Request start ===
[2025-08-21 17:00:46][350090710139657][1 ms][DEBUG] START check_frida
[2025-08-21 17:00:46][350090710139657][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:00:46][350090710139657][301 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:00:46][350090710139657][301 ms][DEBUG] check_frida: running
[2025-08-21 17:00:46][350090710139657][301 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 17:00:46][350090710139657][301 ms][DEBUG] START check_internet
[2025-08-21 17:00:46][350090710139657][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:00:47][350090710139657][878 ms][DEBUG] SU: done in 577 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.693/202.693/202.693/0.000 ms\n
[2025-08-21 17:00:47][350090710139657][878 ms][DEBUG] check_internet: online
[2025-08-21 17:00:47][350090710139657][878 ms][DEBUG] END   check_internet in 577 ms
[2025-08-21 17:00:47][350090710139657][878 ms][DEBUG] START check_scloud
[2025-08-21 17:00:47][350090710139657][878 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:00:47][350090710139657][1159 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23808032 76852 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:00:47][350090710139657][1159 ms][DEBUG] targetPkg: running
[2025-08-21 17:00:47][350090710139657][1159 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 17:00:47][350090710139657][1159 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:00:47][350090710139657][1159 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDkwNzEwMTM5NjU3IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MEdNVjJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk5MiJ9'" -e "main()" -q"
[2025-08-21 17:00:47][350090710139657][1159 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:00:47][350090710139657][1159 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDkwNzEwMTM5NjU3IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MEdNVjJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk5MiJ9'" -e "main()" -q"
[2025-08-21 17:00:50][350090710139657][3800 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDkwNzEwMTM5NjU3IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c0MEdNVjJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk5MiJ9"\r\n
[2025-08-21 17:00:52][350090710139657][6003 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f51dcfb9-9fdb-486b-8c99-b2b918c8aacc","id":"QR_f51dcfb9-9fdb-486b-8c99-b2b918c8aacc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:00:52][350090710139657][6003 ms][DEBUG] proc_open done in 4844 ms; code=0; res.len=3152
[2025-08-21 17:00:52][350090710139657][6003 ms][DEBUG] END   runCmdUntilRes#1 in 4844 ms
[2025-08-21 17:00:52][350090710139657][6003 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:06:08][351393986480253][1 ms][INFO] === Request start ===
[2025-08-21 17:06:08][351393986480253][2 ms][DEBUG] START check_frida
[2025-08-21 17:06:08][351393986480253][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:06:08][351393986480253][258 ms][DEBUG] SU: done in 257 ms; outroot          4632     1 2332716   4228 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:06:08][351393986480253][258 ms][DEBUG] check_frida: running
[2025-08-21 17:06:08][351393986480253][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 17:06:08][351393986480253][258 ms][DEBUG] START check_internet
[2025-08-21 17:06:08][351393986480253][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:06:09][351393986480253][680 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.680/201.680/201.680/0.000 ms\n
[2025-08-21 17:06:09][351393986480253][680 ms][DEBUG] check_internet: online
[2025-08-21 17:06:09][351393986480253][680 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 17:06:09][351393986480253][680 ms][DEBUG] START check_scloud
[2025-08-21 17:06:09][351393986480253][680 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:06:09][351393986480253][930 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23808064 76384 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:06:09][351393986480253][930 ms][DEBUG] targetPkg: running
[2025-08-21 17:06:09][351393986480253][930 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 17:06:09][351393986480253][930 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:06:09][351393986480253][931 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzkzOTg2NDgwMjUzIiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMDM5TlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYzMSJ9'" -e "main()" -q"
[2025-08-21 17:06:09][351393986480253][931 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:06:09][351393986480253][931 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzkzOTg2NDgwMjUzIiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMDM5TlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYzMSJ9'" -e "main()" -q"
[2025-08-21 17:06:12][351393986480253][3601 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzkzOTg2NDgwMjUzIiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1RBMDM5TlROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTYzMSJ9"\r\n
[2025-08-21 17:06:14][351393986480253][5695 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5766c59d-899f-483f-ad9b-12e9255124c6","id":"QR_5766c59d-899f-483f-ad9b-12e9255124c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:06:14][351393986480253][5695 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 17:06:14][351393986480253][5695 ms][DEBUG] END   runCmdUntilRes#1 in 4764 ms
[2025-08-21 17:06:14][351393986480253][5695 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:06:21][357435847155352][1 ms][INFO] === Request start ===
[2025-08-21 17:06:21][357435847155352][1 ms][DEBUG] START check_frida
[2025-08-21 17:06:21][357435847155352][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:06:21][357435847155352][290 ms][DEBUG] SU: done in 288 ms; outroot          4632     1 2349136   4236 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:06:21][357435847155352][290 ms][DEBUG] check_frida: running
[2025-08-21 17:06:21][357435847155352][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 17:06:21][357435847155352][290 ms][DEBUG] START check_internet
[2025-08-21 17:06:21][357435847155352][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:06:21][357435847155352][712 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=329 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 329.523/329.523/329.523/0.000 ms\n
[2025-08-21 17:06:21][357435847155352][712 ms][DEBUG] check_internet: online
[2025-08-21 17:06:21][357435847155352][712 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 17:06:21][357435847155352][712 ms][DEBUG] START check_scloud
[2025-08-21 17:06:21][357435847155352][712 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:06:22][357435847155352][977 ms][DEBUG] SU: done in 265 ms; outu0_a118       7086 20714 23808096 76136 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:06:22][357435847155352][977 ms][DEBUG] targetPkg: running
[2025-08-21 17:06:22][357435847155352][977 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 17:06:22][357435847155352][977 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:06:22][357435847155352][977 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ3MTU1MzUyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMzlSSlhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYwMCJ9'" -e "main()" -q"
[2025-08-21 17:06:22][357435847155352][977 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:06:22][357435847155352][977 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ3MTU1MzUyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMzlSSlhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYwMCJ9'" -e "main()" -q"
[2025-08-21 17:06:24][357435847155352][3617 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDM1ODQ3MTU1MzUyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMzlSSlhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzYwMCJ9"\r\n
[2025-08-21 17:06:26][357435847155352][5695 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ae21abb-4028-4000-91ee-9c2061462708","id":"QR_9ae21abb-4028-4000-91ee-9c2061462708","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:06:26][357435847155352][5695 ms][DEBUG] proc_open done in 4718 ms; code=0; res.len=3152
[2025-08-21 17:06:26][357435847155352][5695 ms][DEBUG] END   runCmdUntilRes#1 in 4718 ms
[2025-08-21 17:06:26][357435847155352][5695 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:06:32][351240643144394][0 ms][INFO] === Request start ===
[2025-08-21 17:06:32][351240643144394][1 ms][DEBUG] START check_frida
[2025-08-21 17:06:32][351240643144394][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:06:32][351240643144394][299 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2349136   4244 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:06:32][351240643144394][299 ms][DEBUG] check_frida: running
[2025-08-21 17:06:32][351240643144394][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 17:06:32][351240643144394][299 ms][DEBUG] START check_internet
[2025-08-21 17:06:32][351240643144394][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:06:33][351240643144394][720 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.217/201.217/201.217/0.000 ms\n
[2025-08-21 17:06:33][351240643144394][721 ms][DEBUG] check_internet: online
[2025-08-21 17:06:33][351240643144394][721 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 17:06:33][351240643144394][721 ms][DEBUG] START check_scloud
[2025-08-21 17:06:33][351240643144394][721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:06:33][351240643144394][1017 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23808128 75812 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:06:33][351240643144394][1017 ms][DEBUG] targetPkg: running
[2025-08-21 17:06:33][351240643144394][1017 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:06:33][351240643144394][1017 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:06:33][351240643144394][1018 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQzMTQ0Mzk0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5ME01SDlEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA3NyJ9'" -e "main()" -q"
[2025-08-21 17:06:33][351240643144394][1018 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:06:33][351240643144394][1018 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjQwNjQzMTQ0Mzk0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5ME01SDlEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA3NyJ9'" -e "main()" -q"
[2025-08-21 17:06:36][351240643144394][3626 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjQwNjQzMTQ0Mzk0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc5ME01SDlEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTA3NyJ9"\r\n
[2025-08-21 17:06:38][351240643144394][5610 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a220530-de2e-4ca9-84c8-a9200a166b17","id":"QR_3a220530-de2e-4ca9-84c8-a9200a166b17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:06:38][351240643144394][5610 ms][DEBUG] proc_open done in 4592 ms; code=0; res.len=3152
[2025-08-21 17:06:38][351240643144394][5610 ms][DEBUG] END   runCmdUntilRes#1 in 4592 ms
[2025-08-21 17:06:38][351240643144394][5610 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:06:45][353357972442708][0 ms][INFO] === Request start ===
[2025-08-21 17:06:45][353357972442708][1 ms][DEBUG] START check_frida
[2025-08-21 17:06:45][353357972442708][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:06:46][353357972442708][310 ms][DEBUG] SU: done in 309 ms; outroot          4632     1 2349136   4228 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:06:46][353357972442708][310 ms][DEBUG] check_frida: running
[2025-08-21 17:06:46][353357972442708][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 17:06:46][353357972442708][310 ms][DEBUG] START check_internet
[2025-08-21 17:06:46][353357972442708][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:06:46][353357971068652][0 ms][INFO] === Request start ===
[2025-08-21 17:06:46][350455580111708][1 ms][INFO] === Request start ===
[2025-08-21 17:06:46][353357972442708][575 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=166 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 166.209/166.209/166.209/0.000 ms\n
[2025-08-21 17:06:46][353357972442708][575 ms][DEBUG] check_internet: online
[2025-08-21 17:06:46][353357972442708][575 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 17:06:46][353357972442708][575 ms][DEBUG] START check_scloud
[2025-08-21 17:06:46][353357972442708][575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:06:46][353357972442708][857 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23808160 76392 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:06:46][353357972442708][857 ms][DEBUG] targetPkg: running
[2025-08-21 17:06:46][353357972442708][857 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 17:06:46][353357972442708][857 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:06:46][353357972442708][857 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTcyNDQyNzA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MEcyVDNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTM5In0='" -e "main()" -q"
[2025-08-21 17:06:46][353357972442708][857 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:06:46][353357972442708][857 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTcyNDQyNzA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MEcyVDNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTM5In0='" -e "main()" -q"
[2025-08-21 17:06:49][353357972442708][3496 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzU3OTcyNDQyNzA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MEcyVDNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTM5In0="\r\n
[2025-08-21 17:06:52][353357972442708][6605 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58c6f161-d68d-4fd7-bb42-5a9179836c1b","id":"QR_58c6f161-d68d-4fd7-bb42-5a9179836c1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:06:52][353357972442708][6606 ms][DEBUG] proc_open done in 5748 ms; code=0; res.len=3152
[2025-08-21 17:06:52][353357972442708][6606 ms][DEBUG] END   runCmdUntilRes#1 in 5749 ms
[2025-08-21 17:06:52][353357972442708][6606 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:06:52][350455580111708][6085 ms][DEBUG] START check_frida
[2025-08-21 17:06:52][350455580111708][6085 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:06:52][350455580111708][6382 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2349136   4236 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:06:52][350455580111708][6382 ms][DEBUG] check_frida: running
[2025-08-21 17:06:52][350455580111708][6382 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 17:06:52][350455580111708][6382 ms][DEBUG] START check_internet
[2025-08-21 17:06:52][350455580111708][6382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:06:53][350455580111708][6616 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.414/139.414/139.414/0.000 ms\n
[2025-08-21 17:06:53][350455580111708][6616 ms][DEBUG] check_internet: online
[2025-08-21 17:06:53][350455580111708][6616 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 17:06:53][350455580111708][6616 ms][DEBUG] START check_scloud
[2025-08-21 17:06:53][350455580111708][6616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:06:53][350455580111708][6851 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23808192 75628 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:06:53][350455580111708][6851 ms][DEBUG] targetPkg: running
[2025-08-21 17:06:53][350455580111708][6851 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 17:06:53][350455580111708][6851 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:06:53][350455580111708][6851 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDU1NTgwMTExNzA4IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDc2QUpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3OTAxIn0='" -e "main()" -q"
[2025-08-21 17:06:53][350455580111708][6851 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:06:53][350455580111708][6851 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDU1NTgwMTExNzA4IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDc2QUpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3OTAxIn0='" -e "main()" -q"
[2025-08-21 17:06:55][350455580111708][9490 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDU1NTgwMTExNzA4IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDc2QUpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3OTAxIn0="\r\n
[2025-08-21 17:07:03][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 17:07:03][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 17:07:03][][36 ms][DEBUG] ADB: done in 35 ms; out
[2025-08-21 17:07:03][][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 17:07:03][][99 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 17:07:03][][99 ms][DEBUG] END   check_boot_completed in 99 ms
[2025-08-21 17:07:03][353357971068652][99 ms][INFO] === Request start ===
[2025-08-21 17:07:03][353357971068652][100 ms][DEBUG] START check_frida
[2025-08-21 17:07:03][353357971068652][100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:07:03][353357971068652][365 ms][DEBUG] SU: done in 265 ms; outroot          4632     1 2349136   4244 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:07:03][353357971068652][365 ms][DEBUG] check_frida: running
[2025-08-21 17:07:03][353357971068652][365 ms][DEBUG] END   check_frida in 265 ms
[2025-08-21 17:07:03][353357971068652][365 ms][DEBUG] START check_scloud
[2025-08-21 17:07:03][353357971068652][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:07:04][353357971068652][677 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23962412 86356 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:07:04][353357971068652][677 ms][DEBUG] targetPkg: running
[2025-08-21 17:07:04][353357971068652][677 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 17:07:04][353357971068652][677 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:07:04][353357971068652][677 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTcxMDY4NjUyIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEdIOEhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTY0In0='" -e "main()" -q"
[2025-08-21 17:07:04][353357971068652][677 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:07:04][353357971068652][677 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTcxMDY4NjUyIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEdIOEhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTY0In0='" -e "main()" -q"
[2025-08-21 17:07:05][350455580111708][18955 ms][DEBUG] proc_open done in 12104 ms (timeout); code=0; out.len=0 err.len=11
[2025-08-21 17:07:05][350455580111708][18956 ms][DEBUG] END   runCmdUntilRes#1 in 12105 ms
[2025-08-21 17:07:05][350455580111708][18956 ms][ERROR] NO RESULT; code=124 out.len=0 err.len=11
[2025-08-21 17:07:06][353357971068652][3301 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzU3OTcxMDY4NjUyIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEdIOEhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTY0In0="\r\n
[2025-08-21 17:07:07][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 17:07:07][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 17:07:07][][51 ms][DEBUG] ADB: done in 50 ms; out
[2025-08-21 17:07:07][][51 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 17:07:07][][114 ms][DEBUG] SU: done in 62 ms; out
[2025-08-21 17:07:07][][114 ms][DEBUG] END   check_boot_completed in 114 ms
[2025-08-21 17:07:07][350455580111708][114 ms][INFO] === Request start ===
[2025-08-21 17:07:13][353357971068652][9800 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c2c36f0-9274-4473-84c5-4fbbd892dae2","id":"QR_4c2c36f0-9274-4473-84c5-4fbbd892dae2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:07:13][353357971068652][9800 ms][DEBUG] proc_open done in 9123 ms; code=0; res.len=3152
[2025-08-21 17:07:13][353357971068652][9800 ms][DEBUG] END   runCmdUntilRes#1 in 9123 ms
[2025-08-21 17:07:13][353357971068652][9801 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:07:14][350455580111708][7221 ms][DEBUG] START check_frida
[2025-08-21 17:07:14][350455580111708][7221 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:07:14][350455580111708][7534 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2349136   4228 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:07:14][350455580111708][7534 ms][DEBUG] check_frida: running
[2025-08-21 17:07:14][350455580111708][7534 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 17:07:14][350455580111708][7534 ms][DEBUG] START check_scloud
[2025-08-21 17:07:14][350455580111708][7534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:07:14][350455580111708][7784 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23808256 76812 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:07:14][350455580111708][7784 ms][DEBUG] targetPkg: running
[2025-08-21 17:07:14][350455580111708][7784 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 17:07:14][350455580111708][7784 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:07:14][350455580111708][7784 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDU1NTgwMTExNzA4IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDc2QUpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3OTAxIn0='" -e "main()" -q"
[2025-08-21 17:07:14][350455580111708][7784 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:07:14][350455580111708][7784 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDU1NTgwMTExNzA4IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDc2QUpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3OTAxIn0='" -e "main()" -q"
[2025-08-21 17:07:17][350455580111708][10408 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDU1NTgwMTExNzA4IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDc2QUpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3OTAxIn0="\r\n
[2025-08-21 17:07:21][350455580111708][13970 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3734f75-c863-4d45-9d9b-994b1a4675f1","id":"QR_b3734f75-c863-4d45-9d9b-994b1a4675f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:07:21][350455580111708][13970 ms][DEBUG] proc_open done in 6185 ms; code=0; res.len=3152
[2025-08-21 17:07:21][350455580111708][13970 ms][DEBUG] END   runCmdUntilRes#1 in 6185 ms
[2025-08-21 17:07:21][350455580111708][13970 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:09:07][355864122206147][0 ms][INFO] === Request start ===
[2025-08-21 17:09:07][355864122206147][1 ms][DEBUG] START check_frida
[2025-08-21 17:09:07][355864122206147][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:09:08][355864122206147][282 ms][DEBUG] SU: done in 280 ms; outroot          4632     1 2332716   4240 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:09:08][355864122206147][282 ms][DEBUG] check_frida: running
[2025-08-21 17:09:08][355864122206147][282 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 17:09:08][355864122206147][282 ms][DEBUG] START check_scloud
[2025-08-21 17:09:08][355864122206147][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:09:08][355864122206147][579 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23808288 77564 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:09:08][355864122206147][579 ms][DEBUG] targetPkg: running
[2025-08-21 17:09:08][355864122206147][579 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:09:08][355864122206147][579 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:09:08][355864122206147][579 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODY0MTIyMjA2MTQ3IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QxMEhTWVlXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3NyJ9'" -e "main()" -q"
[2025-08-21 17:09:08][355864122206147][579 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:09:08][355864122206147][579 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODY0MTIyMjA2MTQ3IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QxMEhTWVlXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3NyJ9'" -e "main()" -q"
[2025-08-21 17:09:11][355864122206147][3221 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODY0MTIyMjA2MTQ3IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QxMEhTWVlXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg3NyJ9"\r\n
[2025-08-21 17:09:13][355864122206147][5470 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7bae2f3c-48e5-4254-b7ec-f3de3dc55e61","id":"QR_7bae2f3c-48e5-4254-b7ec-f3de3dc55e61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:09:13][355864122206147][5470 ms][DEBUG] proc_open done in 4891 ms; code=0; res.len=3152
[2025-08-21 17:09:13][355864122206147][5470 ms][DEBUG] END   runCmdUntilRes#1 in 4891 ms
[2025-08-21 17:09:13][355864122206147][5470 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:11:16][351537276055197][1 ms][INFO] === Request start ===
[2025-08-21 17:11:16][351537276055197][2 ms][DEBUG] START check_frida
[2025-08-21 17:11:16][351537276055197][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:11:16][351537276055197][281 ms][DEBUG] SU: done in 279 ms; outroot          4632     1 2332716   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:11:16][351537276055197][281 ms][DEBUG] check_frida: running
[2025-08-21 17:11:16][351537276055197][281 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 17:11:16][351537276055197][281 ms][DEBUG] START check_scloud
[2025-08-21 17:11:16][351537276055197][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:11:16][351537276055197][562 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23808320 77080 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:11:16][351537276055197][562 ms][DEBUG] targetPkg: running
[2025-08-21 17:11:16][351537276055197][562 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 17:11:16][351537276055197][562 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:11:16][351537276055197][562 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc2MDU1MTk3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1ODc3In0='" -e "main()" -q"
[2025-08-21 17:11:16][351537276055197][563 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:11:16][351537276055197][563 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc2MDU1MTk3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1ODc3In0='" -e "main()" -q"
[2025-08-21 17:11:19][351537276055197][3202 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTM3Mjc2MDU1MTk3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEIzWEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1ODc3In0="\r\n
[2025-08-21 17:11:22][351537276055197][5936 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f1f0e07-c431-4584-a466-fee0111216b7","id":"QR_6f1f0e07-c431-4584-a466-fee0111216b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:11:22][351537276055197][5936 ms][DEBUG] proc_open done in 5373 ms; code=0; res.len=3152
[2025-08-21 17:11:22][351537276055197][5936 ms][DEBUG] END   runCmdUntilRes#1 in 5373 ms
[2025-08-21 17:11:22][351537276055197][5936 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:11:38][351537271258010][1 ms][INFO] === Request start ===
[2025-08-21 17:11:38][351537271258010][1 ms][DEBUG] START check_frida
[2025-08-21 17:11:38][351537271258010][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:11:38][351537271258010][247 ms][DEBUG] SU: done in 246 ms; outroot          4632     1 2332716   4236 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:11:38][351537271258010][248 ms][DEBUG] check_frida: running
[2025-08-21 17:11:38][351537271258010][248 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 17:11:38][351537271258010][248 ms][DEBUG] START check_scloud
[2025-08-21 17:11:38][351537271258010][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:11:39][351537271258010][544 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23808352 77652 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:11:39][351537271258010][544 ms][DEBUG] targetPkg: running
[2025-08-21 17:11:39][351537271258010][545 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:11:39][351537271258010][545 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:11:39][351537271258010][545 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3MjcxMjU4MDEwIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1g5MDJOMFZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkxMyJ9'" -e "main()" -q"
[2025-08-21 17:11:39][351537271258010][545 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:11:39][351537271258010][545 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3MjcxMjU4MDEwIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1g5MDJOMFZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkxMyJ9'" -e "main()" -q"
[2025-08-21 17:11:41][351537271258010][3168 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTM3MjcxMjU4MDEwIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1g5MDJOMFZWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMRUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkxMyJ9"\r\n
[2025-08-21 17:11:44][351537271258010][5324 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ecc9484d-976c-4e46-b060-38c71465d591","id":"QR_ecc9484d-976c-4e46-b060-38c71465d591","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:11:44][351537271258010][5324 ms][DEBUG] proc_open done in 4779 ms; code=0; res.len=3152
[2025-08-21 17:11:44][351537271258010][5324 ms][DEBUG] END   runCmdUntilRes#1 in 4779 ms
[2025-08-21 17:11:44][351537271258010][5324 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:13:43][351782255223628][1 ms][INFO] === Request start ===
[2025-08-21 17:13:43][351782255223628][2 ms][DEBUG] START check_frida
[2025-08-21 17:13:43][351782255223628][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:13:43][351782255223628][295 ms][DEBUG] SU: done in 294 ms; outroot          4632     1 2332716   4248 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:13:43][351782255223628][295 ms][DEBUG] check_frida: running
[2025-08-21 17:13:43][351782255223628][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 17:13:43][351782255223628][295 ms][DEBUG] START check_scloud
[2025-08-21 17:13:43][351782255223628][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:13:43][351782255223628][577 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23808384 77268 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:13:43][351782255223628][577 ms][DEBUG] targetPkg: running
[2025-08-21 17:13:43][351782255223628][577 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 17:13:43][351782255223628][577 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:13:43][351782255223628][577 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzgyMjU1MjIzNjI4IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g2ME1SU0dWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzE2In0='" -e "main()" -q"
[2025-08-21 17:13:43][351782255223628][577 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:13:43][351782255223628][577 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzgyMjU1MjIzNjI4IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g2ME1SU0dWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzE2In0='" -e "main()" -q"
[2025-08-21 17:13:46][351782255223628][3185 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzgyMjU1MjIzNjI4IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g2ME1SU0dWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzE2In0="\r\n
[2025-08-21 17:13:49][351782255223628][6185 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf7ec779-1e0a-43c5-81c5-df51a47e52c0","id":"QR_cf7ec779-1e0a-43c5-81c5-df51a47e52c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:13:49][351782255223628][6185 ms][DEBUG] proc_open done in 5608 ms; code=0; res.len=3152
[2025-08-21 17:13:49][351782255223628][6185 ms][DEBUG] END   runCmdUntilRes#1 in 5608 ms
[2025-08-21 17:13:49][351782255223628][6185 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:15:10][351771925095342][0 ms][INFO] === Request start ===
[2025-08-21 17:15:10][351771925095342][1 ms][DEBUG] START check_frida
[2025-08-21 17:15:10][351771925095342][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:15:10][351771925095342][301 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2332716   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:15:10][351771925095342][301 ms][DEBUG] check_frida: running
[2025-08-21 17:15:10][351771925095342][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 17:15:10][351771925095342][301 ms][DEBUG] START check_scloud
[2025-08-21 17:15:10][351771925095342][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:15:10][351771925095342][597 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23808416 77812 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:15:10][351771925095342][597 ms][DEBUG] targetPkg: running
[2025-08-21 17:15:10][351771925095342][597 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:15:10][351771925095342][598 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:15:10][351771925095342][598 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTI1MDk1MzQyIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBNFE0RzJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQzMyJ9'" -e "main()" -q"
[2025-08-21 17:15:10][351771925095342][598 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:15:10][351771925095342][598 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTI1MDk1MzQyIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBNFE0RzJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQzMyJ9'" -e "main()" -q"
[2025-08-21 17:15:13][351771925095342][3222 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzcxOTI1MDk1MzQyIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBNFE0RzJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTQzMyJ9"\r\n
[2025-08-21 17:15:15][351771925095342][5502 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbae53a2-2fa0-4e5e-8cf4-efb04e9b5767","id":"QR_bbae53a2-2fa0-4e5e-8cf4-efb04e9b5767","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:15:15][351771925095342][5503 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 17:15:15][351771925095342][5503 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 17:15:15][351771925095342][5503 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:15:22][351235160638778][1 ms][INFO] === Request start ===
[2025-08-21 17:15:22][351235160638778][1 ms][DEBUG] START check_frida
[2025-08-21 17:15:22][351235160638778][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:15:22][351235160638778][308 ms][DEBUG] SU: done in 306 ms; outroot          4632     1 2349136   4232 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:15:22][351235160638778][308 ms][DEBUG] check_frida: running
[2025-08-21 17:15:22][351235160638778][308 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 17:15:22][351235160638778][308 ms][DEBUG] START check_scloud
[2025-08-21 17:15:22][351235160638778][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:15:22][351235160638778][590 ms][DEBUG] SU: done in 282 ms; outu0_a118       7086 20714 23808448 77056 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:15:22][351235160638778][590 ms][DEBUG] targetPkg: running
[2025-08-21 17:15:22][351235160638778][590 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 17:15:22][351235160638778][590 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:15:22][351235160638778][590 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjM1MTYwNjM4Nzc4IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMDVEU0JNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTM1In0='" -e "main()" -q"
[2025-08-21 17:15:22][351235160638778][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:15:22][351235160638778][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjM1MTYwNjM4Nzc4IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMDVEU0JNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTM1In0='" -e "main()" -q"
[2025-08-21 17:15:25][351235160638778][3213 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjM1MTYwNjM4Nzc4IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMDVEU0JNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTM1In0="\r\n
[2025-08-21 17:15:29][351235160638778][7587 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a722e2b-b0b2-4f8b-936a-f2ed76b0193a","id":"QR_2a722e2b-b0b2-4f8b-936a-f2ed76b0193a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:15:29][351235160638778][7587 ms][DEBUG] proc_open done in 6996 ms; code=0; res.len=3152
[2025-08-21 17:15:29][351235160638778][7587 ms][DEBUG] END   runCmdUntilRes#1 in 6997 ms
[2025-08-21 17:15:29][351235160638778][7587 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:16:09][357967978158524][1 ms][INFO] === Request start ===
[2025-08-21 17:16:09][357967978158524][1 ms][DEBUG] START check_frida
[2025-08-21 17:16:09][357967978158524][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:16:09][357967978158524][298 ms][DEBUG] SU: done in 297 ms; outroot          4632     1 2332716   4240 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:16:09][357967978158524][299 ms][DEBUG] check_frida: running
[2025-08-21 17:16:09][357967978158524][299 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 17:16:09][357967978158524][299 ms][DEBUG] START check_internet
[2025-08-21 17:16:09][357967978158524][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:16:10][357967978158524][783 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.590/202.590/202.590/0.000 ms\n
[2025-08-21 17:16:10][357967978158524][783 ms][DEBUG] check_internet: online
[2025-08-21 17:16:10][357967978158524][783 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 17:16:10][357967978158524][783 ms][DEBUG] START check_scloud
[2025-08-21 17:16:10][357967978158524][783 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:16:10][357967978158524][1048 ms][DEBUG] SU: done in 265 ms; outu0_a118       7086 20714 23808480 77620 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:16:10][357967978158524][1048 ms][DEBUG] targetPkg: running
[2025-08-21 17:16:10][357967978158524][1048 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 17:16:10][357967978158524][1048 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:16:10][357967978158524][1048 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc4MTU4NTI0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEZGTk5NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg3MCJ9'" -e "main()" -q"
[2025-08-21 17:16:10][357967978158524][1048 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:16:10][357967978158524][1048 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTc4MTU4NTI0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEZGTk5NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg3MCJ9'" -e "main()" -q"
[2025-08-21 17:16:13][357967978158524][3688 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTY3OTc4MTU4NTI0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEZGTk5NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTg3MCJ9"\r\n
[2025-08-21 17:16:15][357967978158524][5985 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9bea756c-c07c-4076-b587-d3d5e76056e7","id":"QR_9bea756c-c07c-4076-b587-d3d5e76056e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:16:15][357967978158524][5985 ms][DEBUG] proc_open done in 4937 ms; code=0; res.len=3152
[2025-08-21 17:16:15][357967978158524][5985 ms][DEBUG] END   runCmdUntilRes#1 in 4937 ms
[2025-08-21 17:16:15][357967978158524][5985 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:17:10][350013882828584][0 ms][INFO] === Request start ===
[2025-08-21 17:17:10][350013882828584][1 ms][DEBUG] START check_frida
[2025-08-21 17:17:10][350013882828584][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:17:11][350013882828584][305 ms][DEBUG] SU: done in 304 ms; outroot          4632     1 2332716   4248 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:17:11][350013882828584][305 ms][DEBUG] check_frida: running
[2025-08-21 17:17:11][350013882828584][305 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 17:17:11][350013882828584][305 ms][DEBUG] START check_scloud
[2025-08-21 17:17:11][350013882828584][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:17:11][350013882828584][602 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23808512 77244 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:17:11][350013882828584][602 ms][DEBUG] targetPkg: running
[2025-08-21 17:17:11][350013882828584][602 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:17:11][350013882828584][602 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:17:11][350013882828584][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgyODI4NTg0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMzA1N0ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI3NyJ9'" -e "main()" -q"
[2025-08-21 17:17:11][350013882828584][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:17:11][350013882828584][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzODgyODI4NTg0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMzA1N0ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI3NyJ9'" -e "main()" -q"
[2025-08-21 17:17:14][350013882828584][3211 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzODgyODI4NTg0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMzA1N0ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUSEwiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI3NyJ9"\r\n
[2025-08-21 17:17:16][350013882828584][5351 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97ae4115-054c-4f4e-bd09-02833865e4d8","id":"QR_97ae4115-054c-4f4e-bd09-02833865e4d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:17:16][350013882828584][5351 ms][DEBUG] proc_open done in 4748 ms; code=0; res.len=3152
[2025-08-21 17:17:16][350013882828584][5351 ms][DEBUG] END   runCmdUntilRes#1 in 4748 ms
[2025-08-21 17:17:16][350013882828584][5351 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:18:08][354715950025739][0 ms][INFO] === Request start ===
[2025-08-21 17:18:08][354715950025739][1 ms][DEBUG] START check_frida
[2025-08-21 17:18:08][354715950025739][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:18:09][354715950025739][283 ms][DEBUG] SU: done in 282 ms; outroot          4632     1 2332716   4216 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:18:09][354715950025739][283 ms][DEBUG] check_frida: running
[2025-08-21 17:18:09][354715950025739][283 ms][DEBUG] END   check_frida in 282 ms
[2025-08-21 17:18:09][354715950025739][283 ms][DEBUG] START check_internet
[2025-08-21 17:18:09][354715950025739][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:18:09][354715950025739][673 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.615/282.615/282.615/0.000 ms\n
[2025-08-21 17:18:09][354715950025739][674 ms][DEBUG] check_internet: online
[2025-08-21 17:18:09][354715950025739][674 ms][DEBUG] END   check_internet in 391 ms
[2025-08-21 17:18:09][354715950025739][674 ms][DEBUG] START check_scloud
[2025-08-21 17:18:09][354715950025739][674 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:18:09][354715950025739][970 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23808544 78012 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:18:09][354715950025739][970 ms][DEBUG] targetPkg: running
[2025-08-21 17:18:09][354715950025739][970 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:18:09][354715950025739][970 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:18:09][354715950025739][970 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzE1OTUwMDI1NzM5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MEI3UUZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzMyJ9'" -e "main()" -q"
[2025-08-21 17:18:09][354715950025739][971 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:18:09][354715950025739][971 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzE1OTUwMDI1NzM5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MEI3UUZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzMyJ9'" -e "main()" -q"
[2025-08-21 17:18:12][354715950025739][3579 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzE1OTUwMDI1NzM5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MEI3UUZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTAzMyJ9"\r\n
[2025-08-21 17:18:14][353096462564999][1 ms][INFO] === Request start ===
[2025-08-21 17:18:14][354715950025739][5516 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_794c0228-adbc-4b14-80a3-7c6fe043c820","id":"QR_794c0228-adbc-4b14-80a3-7c6fe043c820","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:18:14][354715950025739][5516 ms][DEBUG] proc_open done in 4545 ms; code=0; res.len=3152
[2025-08-21 17:18:14][354715950025739][5516 ms][DEBUG] END   runCmdUntilRes#1 in 4545 ms
[2025-08-21 17:18:14][354715950025739][5516 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:18:15][353096462564999][1008 ms][DEBUG] START check_frida
[2025-08-21 17:18:15][353096462564999][1008 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:18:15][353096462564999][1289 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136   4224 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:18:15][353096462564999][1289 ms][DEBUG] check_frida: running
[2025-08-21 17:18:15][353096462564999][1289 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 17:18:15][353096462564999][1289 ms][DEBUG] START check_internet
[2025-08-21 17:18:15][353096462564999][1289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:18:15][353096462564999][1554 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.148/138.148/138.148/0.000 ms\n
[2025-08-21 17:18:15][353096462564999][1555 ms][DEBUG] check_internet: online
[2025-08-21 17:18:15][353096462564999][1555 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 17:18:15][353096462564999][1555 ms][DEBUG] START check_scloud
[2025-08-21 17:18:15][353096462564999][1555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:18:15][353096462564999][1851 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23808576 77280 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:18:15][353096462564999][1851 ms][DEBUG] targetPkg: running
[2025-08-21 17:18:15][353096462564999][1851 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:18:15][353096462564999][1851 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:18:15][353096462564999][1852 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDk2NDYyNTY0OTk5IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5WFg5MDdOUkJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjE0In0='" -e "main()" -q"
[2025-08-21 17:18:15][353096462564999][1852 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:18:15][353096462564999][1852 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDk2NDYyNTY0OTk5IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5WFg5MDdOUkJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjE0In0='" -e "main()" -q"
[2025-08-21 17:18:18][353096462564999][4491 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDk2NDYyNTY0OTk5IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5WFg5MDdOUkJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjE0In0="\r\n
[2025-08-21 17:18:22][353096462564999][7990 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd7e5ce9-6b34-420a-87d6-cb1249eb2c17","id":"QR_dd7e5ce9-6b34-420a-87d6-cb1249eb2c17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:18:22][353096462564999][7990 ms][DEBUG] proc_open done in 6139 ms; code=0; res.len=3152
[2025-08-21 17:18:22][353096462564999][7990 ms][DEBUG] END   runCmdUntilRes#1 in 6139 ms
[2025-08-21 17:18:22][353096462564999][7990 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:21:37][355296342949208][1 ms][INFO] === Request start ===
[2025-08-21 17:21:37][355296342949208][1 ms][DEBUG] START check_frida
[2025-08-21 17:21:37][355296342949208][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:21:38][355296342949208][315 ms][DEBUG] SU: done in 313 ms; outroot          4632     1 2332716   4232 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:21:38][355296342949208][315 ms][DEBUG] check_frida: running
[2025-08-21 17:21:38][355296342949208][315 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 17:21:38][355296342949208][315 ms][DEBUG] START check_scloud
[2025-08-21 17:21:38][355296342949208][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:21:38][355296342949208][611 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23808608 77864 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:21:38][355296342949208][611 ms][DEBUG] targetPkg: running
[2025-08-21 17:21:38][355296342949208][611 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:21:38][355296342949208][612 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:21:38][355296342949208][612 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1Mjk2MzQyOTQ5MjA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFkzMDFQMkRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTY5In0='" -e "main()" -q"
[2025-08-21 17:21:38][355296342949208][612 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:21:38][355296342949208][612 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1Mjk2MzQyOTQ5MjA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFkzMDFQMkRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTY5In0='" -e "main()" -q"
[2025-08-21 17:21:40][355296342949208][3251 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1Mjk2MzQyOTQ5MjA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFkzMDFQMkRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTY5In0="\r\n
[2025-08-21 17:21:44][355296342949208][6625 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_593dc720-2fde-4c7d-b505-0f58f5ce8e4a","id":"QR_593dc720-2fde-4c7d-b505-0f58f5ce8e4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:21:44][355296342949208][6626 ms][DEBUG] proc_open done in 6014 ms; code=0; res.len=3152
[2025-08-21 17:21:44][355296342949208][6626 ms][DEBUG] END   runCmdUntilRes#1 in 6014 ms
[2025-08-21 17:21:44][355296342949208][6626 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:22:08][350915064060960][1 ms][INFO] === Request start ===
[2025-08-21 17:22:08][350915064060960][2 ms][DEBUG] START check_frida
[2025-08-21 17:22:08][350915064060960][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:22:09][350915064060960][294 ms][DEBUG] SU: done in 292 ms; outroot          4632     1 2332716   4212 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:22:09][350915064060960][294 ms][DEBUG] check_frida: running
[2025-08-21 17:22:09][350915064060960][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 17:22:09][350915064060960][294 ms][DEBUG] START check_internet
[2025-08-21 17:22:09][350915064060960][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:22:09][350915064060960][762 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.198/202.198/202.198/0.000 ms\n
[2025-08-21 17:22:09][350915064060960][762 ms][DEBUG] check_internet: online
[2025-08-21 17:22:09][350915064060960][762 ms][DEBUG] END   check_internet in 468 ms
[2025-08-21 17:22:09][350915064060960][762 ms][DEBUG] START check_scloud
[2025-08-21 17:22:09][350915064060960][762 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:22:09][350915064060960][1043 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23808640 77372 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:22:09][350915064060960][1043 ms][DEBUG] targetPkg: running
[2025-08-21 17:22:09][350915064060960][1043 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 17:22:09][350915064060960][1043 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:22:09][350915064060960][1043 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTE1MDY0MDYwOTYwIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFc3MDJENkxOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjM1In0='" -e "main()" -q"
[2025-08-21 17:22:09][350915064060960][1043 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:22:09][350915064060960][1043 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTE1MDY0MDYwOTYwIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFc3MDJENkxOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjM1In0='" -e "main()" -q"
[2025-08-21 17:22:12][350915064060960][3698 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTE1MDY0MDYwOTYwIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFc3MDJENkxOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjM1In0="\r\n
[2025-08-21 17:22:16][350915064060960][8010 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d62206b-1d60-4027-bbeb-0ed884fdd1d7","id":"QR_0d62206b-1d60-4027-bbeb-0ed884fdd1d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:22:16][350915064060960][8010 ms][DEBUG] proc_open done in 6967 ms; code=0; res.len=3152
[2025-08-21 17:22:16][350915064060960][8010 ms][DEBUG] END   runCmdUntilRes#1 in 6967 ms
[2025-08-21 17:22:16][350915064060960][8010 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:22:23][353773290224679][0 ms][INFO] === Request start ===
[2025-08-21 17:22:23][353773290224679][1 ms][DEBUG] START check_frida
[2025-08-21 17:22:23][353773290224679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:22:23][353773290224679][309 ms][DEBUG] SU: done in 308 ms; outroot          4632     1 2349136   4224 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:22:23][353773290224679][309 ms][DEBUG] check_frida: running
[2025-08-21 17:22:23][353773290224679][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 17:22:23][353773290224679][309 ms][DEBUG] START check_internet
[2025-08-21 17:22:23][353773290224679][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:22:23][353773290224679][654 ms][DEBUG] SU: done in 345 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.469/247.469/247.469/0.000 ms\n
[2025-08-21 17:22:23][353773290224679][654 ms][DEBUG] check_internet: online
[2025-08-21 17:22:23][353773290224679][654 ms][DEBUG] END   check_internet in 345 ms
[2025-08-21 17:22:23][353773290224679][654 ms][DEBUG] START check_scloud
[2025-08-21 17:22:23][353773290224679][654 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:22:24][353773290224679][949 ms][DEBUG] SU: done in 295 ms; outu0_a118       7086 20714 23808672 77924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:22:24][353773290224679][949 ms][DEBUG] targetPkg: running
[2025-08-21 17:22:24][353773290224679][949 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 17:22:24][353773290224679][949 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:22:24][353773290224679][949 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzczMjkwMjI0Njc5IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFIyMEdUV1ZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNIRSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzUyIn0='" -e "main()" -q"
[2025-08-21 17:22:24][353773290224679][949 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:22:24][353773290224679][950 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzczMjkwMjI0Njc5IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFIyMEdUV1ZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNIRSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzUyIn0='" -e "main()" -q"
[2025-08-21 17:22:26][353773290224679][3589 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNzczMjkwMjI0Njc5IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFIyMEdUV1ZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNIRSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzUyIn0="\r\n
[2025-08-21 17:22:30][353773290224679][7494 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61ed3bab-e7d3-4575-b5f8-193eaab1b61e","id":"QR_61ed3bab-e7d3-4575-b5f8-193eaab1b61e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:22:30][353773290224679][7494 ms][DEBUG] proc_open done in 6545 ms; code=0; res.len=3152
[2025-08-21 17:22:30][353773290224679][7494 ms][DEBUG] END   runCmdUntilRes#1 in 6545 ms
[2025-08-21 17:22:30][353773290224679][7494 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:23:10][352672511238511][0 ms][INFO] === Request start ===
[2025-08-21 17:23:10][352672511238511][1 ms][DEBUG] START check_frida
[2025-08-21 17:23:10][352672511238511][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:23:10][352672511238511][308 ms][DEBUG] SU: done in 307 ms; outroot          4632     1 2332716   4236 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:23:10][352672511238511][308 ms][DEBUG] check_frida: running
[2025-08-21 17:23:10][352672511238511][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 17:23:10][352672511238511][308 ms][DEBUG] START check_scloud
[2025-08-21 17:23:10][352672511238511][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:23:11][352672511238511][591 ms][DEBUG] SU: done in 282 ms; outu0_a118       7086 20714 23808704 77260 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:23:11][352672511238511][591 ms][DEBUG] targetPkg: running
[2025-08-21 17:23:11][352672511238511][591 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-21 17:23:11][352672511238511][591 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:23:11][352672511238511][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjcyNTExMjM4NTExIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0MlM2WFNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjAwIn0='" -e "main()" -q"
[2025-08-21 17:23:11][352672511238511][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:23:11][352672511238511][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjcyNTExMjM4NTExIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0MlM2WFNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjAwIn0='" -e "main()" -q"
[2025-08-21 17:23:13][352672511238511][3214 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjcyNTExMjM4NTExIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0MlM2WFNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjAwIn0="\r\n
[2025-08-21 17:23:17][352672511238511][6478 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9cdb68c1-c474-42e9-af80-2e5d59729d91","id":"QR_9cdb68c1-c474-42e9-af80-2e5d59729d91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:23:17][352672511238511][6479 ms][DEBUG] proc_open done in 5887 ms; code=0; res.len=3152
[2025-08-21 17:23:17][352672511238511][6479 ms][DEBUG] END   runCmdUntilRes#1 in 5887 ms
[2025-08-21 17:23:17][352672511238511][6479 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:23:23][352665181295415][0 ms][INFO] === Request start ===
[2025-08-21 17:23:23][352665181295415][1 ms][DEBUG] START check_frida
[2025-08-21 17:23:23][352665181295415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:23:24][352665181295415][299 ms][DEBUG] SU: done in 298 ms; outroot          4632     1 2349136   4212 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:23:24][352665181295415][299 ms][DEBUG] check_frida: running
[2025-08-21 17:23:24][352665181295415][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 17:23:24][352665181295415][299 ms][DEBUG] START check_scloud
[2025-08-21 17:23:24][352665181295415][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:23:24][352665181295415][596 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23808736 77808 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:23:24][352665181295415][596 ms][DEBUG] targetPkg: running
[2025-08-21 17:23:24][352665181295415][596 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:23:24][352665181295415][596 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:23:24][352665181295415][596 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjY1MTgxMjk1NDE1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MDFSV1BaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQzOSJ9'" -e "main()" -q"
[2025-08-21 17:23:24][352665181295415][596 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:23:24][352665181295415][596 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjY1MTgxMjk1NDE1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MDFSV1BaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQzOSJ9'" -e "main()" -q"
[2025-08-21 17:23:27][352665181295415][3204 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjY1MTgxMjk1NDE1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MDFSV1BaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQzOSJ9"\r\n
[2025-08-21 17:23:29][352665181295415][5376 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47a9e7b6-5927-40cc-9b3c-a7c94fd7b1c1","id":"QR_47a9e7b6-5927-40cc-9b3c-a7c94fd7b1c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:23:29][352665181295415][5376 ms][DEBUG] proc_open done in 4779 ms; code=0; res.len=3152
[2025-08-21 17:23:29][352665181295415][5376 ms][DEBUG] END   runCmdUntilRes#1 in 4779 ms
[2025-08-21 17:23:29][352665181295415][5376 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:23:35][357967972362171][0 ms][INFO] === Request start ===
[2025-08-21 17:23:35][357967972362171][1 ms][DEBUG] START check_frida
[2025-08-21 17:23:35][357967972362171][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:23:35][357967972362171][307 ms][DEBUG] SU: done in 306 ms; outroot          4632     1 2349136   4228 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:23:35][357967972362171][308 ms][DEBUG] check_frida: running
[2025-08-21 17:23:35][357967972362171][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 17:23:35][357967972362171][308 ms][DEBUG] START check_scloud
[2025-08-21 17:23:35][357967972362171][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:23:36][357967972362171][603 ms][DEBUG] SU: done in 295 ms; outu0_a118       7086 20714 23808768 78364 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:23:36][357967972362171][603 ms][DEBUG] targetPkg: running
[2025-08-21 17:23:36][357967972362171][603 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 17:23:36][357967972362171][603 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:23:36][357967972362171][603 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTcyMzYyMTcxIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMEVMTjRFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzMiJ9'" -e "main()" -q"
[2025-08-21 17:23:36][357967972362171][603 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:23:36][357967972362171][603 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTY3OTcyMzYyMTcxIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMEVMTjRFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzMiJ9'" -e "main()" -q"
[2025-08-21 17:23:38][357967972362171][3243 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTY3OTcyMzYyMTcxIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMEVMTjRFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzMiJ9"\r\n
[2025-08-21 17:23:40][357967972362171][4977 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf7eb389-e035-4012-bfbe-c1eae3cd1420","id":"QR_bf7eb389-e035-4012-bfbe-c1eae3cd1420","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:23:40][357967972362171][4977 ms][DEBUG] proc_open done in 4374 ms; code=0; res.len=3152
[2025-08-21 17:23:40][357967972362171][4977 ms][DEBUG] END   runCmdUntilRes#1 in 4374 ms
[2025-08-21 17:23:40][357967972362171][4977 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:23:49][354099889017400][1 ms][INFO] === Request start ===
[2025-08-21 17:23:49][354099889017400][2 ms][DEBUG] START check_frida
[2025-08-21 17:23:49][354099889017400][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:23:49][354099889017400][297 ms][DEBUG] SU: done in 296 ms; outroot          4632     1 2349136   4236 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:23:49][354099889017400][297 ms][DEBUG] check_frida: running
[2025-08-21 17:23:49][354099889017400][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 17:23:49][354099889017400][297 ms][DEBUG] START check_scloud
[2025-08-21 17:23:49][354099889017400][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:23:49][354099889017400][594 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23808800 77856 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:23:49][354099889017400][594 ms][DEBUG] targetPkg: running
[2025-08-21 17:23:49][354099889017400][594 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:23:49][354099889017400][594 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:23:49][354099889017400][594 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDk5ODg5MDE3NDAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3OTY3In0='" -e "main()" -q"
[2025-08-21 17:23:49][354099889017400][594 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:23:49][354099889017400][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDk5ODg5MDE3NDAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3OTY3In0='" -e "main()" -q"
[2025-08-21 17:23:52][354099889017400][3218 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDk5ODg5MDE3NDAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3OTY3In0="\r\n
[2025-08-21 17:23:54][354099889017400][5421 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 17:23:54][354099889017400][5421 ms][DEBUG] proc_open done in 4826 ms; code=0; res.len=107
[2025-08-21 17:23:54][354099889017400][5421 ms][DEBUG] END   runCmdUntilRes#1 in 4826 ms
[2025-08-21 17:23:54][354099889017400][5421 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 17:23:54][][0 ms][INFO] === Request start ===
[2025-08-21 17:23:54][][1 ms][DEBUG] START check_frida
[2025-08-21 17:23:54][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:23:55][][301 ms][DEBUG] SU: done in 300 ms; outroot          4632     1 2349136   4220 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:23:55][][301 ms][DEBUG] check_frida: running
[2025-08-21 17:23:55][][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 17:23:55][][301 ms][DEBUG] START check_scloud
[2025-08-21 17:23:55][][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:23:55][][613 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23808832 78404 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:23:55][][613 ms][DEBUG] targetPkg: running
[2025-08-21 17:23:55][][613 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 17:23:55][][613 ms][DEBUG] rawBody.length=1130
[2025-08-21 17:23:55][][613 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTY0In0='" -e "main()" -q"
[2025-08-21 17:23:55][][613 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:23:55][][613 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTY0In0='" -e "main()" -q"
[2025-08-21 17:23:58][][3284 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTY0In0="\r\n
[2025-08-21 17:24:02][][7548 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 17:24:02][][7549 ms][DEBUG] proc_open done in 6935 ms; code=0; res.len=107
[2025-08-21 17:24:02][][7549 ms][DEBUG] END   runCmdUntilRes#1 in 6935 ms
[2025-08-21 17:24:02][][7549 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 17:24:02][][0 ms][INFO] === Request start ===
[2025-08-21 17:24:02][][1 ms][DEBUG] START check_frida
[2025-08-21 17:24:02][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:24:03][][291 ms][DEBUG] SU: done in 290 ms; outroot          4632     1 2349136   4228 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:24:03][][291 ms][DEBUG] check_frida: running
[2025-08-21 17:24:03][][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 17:24:03][][291 ms][DEBUG] START check_internet
[2025-08-21 17:24:03][][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:24:03][][619 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.341/186.341/186.341/0.000 ms\n
[2025-08-21 17:24:03][][619 ms][DEBUG] check_internet: online
[2025-08-21 17:24:03][][619 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 17:24:03][][619 ms][DEBUG] START check_scloud
[2025-08-21 17:24:03][][619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:24:03][][868 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23808864 77332 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:24:03][][869 ms][DEBUG] targetPkg: running
[2025-08-21 17:24:03][][869 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 17:24:03][][869 ms][DEBUG] rawBody.length=1130
[2025-08-21 17:24:03][][869 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDk0In0='" -e "main()" -q"
[2025-08-21 17:24:03][][869 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:24:03][][869 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDk0In0='" -e "main()" -q"
[2025-08-21 17:24:06][][3493 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDk0In0="\r\n
[2025-08-21 17:24:08][][5305 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 17:24:08][][5305 ms][DEBUG] proc_open done in 4436 ms; code=0; res.len=107
[2025-08-21 17:24:08][][5305 ms][DEBUG] END   runCmdUntilRes#1 in 4436 ms
[2025-08-21 17:24:08][][5305 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 17:24:08][354099889017400][0 ms][INFO] === Request start ===
[2025-08-21 17:24:08][354099889017400][1 ms][DEBUG] START check_frida
[2025-08-21 17:24:08][354099889017400][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:24:09][354099889017400][275 ms][DEBUG] SU: done in 274 ms; outroot          4632     1 2349136   4236 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:24:09][354099889017400][275 ms][DEBUG] check_frida: running
[2025-08-21 17:24:09][354099889017400][275 ms][DEBUG] END   check_frida in 274 ms
[2025-08-21 17:24:09][354099889017400][275 ms][DEBUG] START check_internet
[2025-08-21 17:24:09][354099889017400][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:24:09][354099889017400][540 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.156/162.156/162.156/0.000 ms\n
[2025-08-21 17:24:09][354099889017400][540 ms][DEBUG] check_internet: online
[2025-08-21 17:24:09][354099889017400][540 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 17:24:09][354099889017400][540 ms][DEBUG] START check_scloud
[2025-08-21 17:24:09][354099889017400][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:24:09][354099889017400][821 ms][DEBUG] SU: done in 281 ms; outu0_a118       7086 20714 23808896 77920 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:24:09][354099889017400][822 ms][DEBUG] targetPkg: running
[2025-08-21 17:24:09][354099889017400][822 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 17:24:09][354099889017400][822 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:24:09][354099889017400][822 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDk5ODg5MDE3NDAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA0MiJ9'" -e "main()" -q"
[2025-08-21 17:24:09][354099889017400][822 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:24:09][354099889017400][822 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MDk5ODg5MDE3NDAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA0MiJ9'" -e "main()" -q"
[2025-08-21 17:24:12][354099889017400][3462 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MDk5ODg5MDE3NDAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cxMUdXVjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDA0MiJ9"\r\n
[2025-08-21 17:24:14][354099889017400][5383 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47c8228f-4e95-4cb4-b526-1adc3270d0ae","id":"QR_47c8228f-4e95-4cb4-b526-1adc3270d0ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:24:14][354099889017400][5383 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-21 17:24:14][354099889017400][5383 ms][DEBUG] END   runCmdUntilRes#1 in 4562 ms
[2025-08-21 17:24:14][354099889017400][5383 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:25:10][357800558946705][1 ms][INFO] === Request start ===
[2025-08-21 17:25:10][357800558946705][1 ms][DEBUG] START check_frida
[2025-08-21 17:25:10][357800558946705][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:25:10][357800558946705][301 ms][DEBUG] SU: done in 299 ms; outroot          4632     1 2332716   4216 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:25:10][357800558946705][301 ms][DEBUG] check_frida: running
[2025-08-21 17:25:10][357800558946705][301 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 17:25:10][357800558946705][301 ms][DEBUG] START check_scloud
[2025-08-21 17:25:10][357800558946705][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:25:11][357800558946705][613 ms][DEBUG] SU: done in 312 ms; outu0_a118       7086 20714 23808928 77484 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:25:11][357800558946705][613 ms][DEBUG] targetPkg: running
[2025-08-21 17:25:11][357800558946705][613 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 17:25:11][357800558946705][613 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:25:11][357800558946705][613 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODAwNTU4OTQ2NzA1IiwibW9kZWwiOiJTTS1NMjM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1RBMDdZSDlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTQyIn0='" -e "main()" -q"
[2025-08-21 17:25:11][357800558946705][613 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:25:11][357800558946705][614 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODAwNTU4OTQ2NzA1IiwibW9kZWwiOiJTTS1NMjM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1RBMDdZSDlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTQyIn0='" -e "main()" -q"
[2025-08-21 17:25:13][357800558946705][3237 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3ODAwNTU4OTQ2NzA1IiwibW9kZWwiOiJTTS1NMjM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1RBMDdZSDlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTQyIn0="\r\n
[2025-08-21 17:25:17][357800558946705][6612 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55c56052-1b83-4746-90b4-cf27052a5fb7","id":"QR_55c56052-1b83-4746-90b4-cf27052a5fb7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:25:17][357800558946705][6612 ms][DEBUG] proc_open done in 5999 ms; code=0; res.len=3152
[2025-08-21 17:25:17][357800558946705][6612 ms][DEBUG] END   runCmdUntilRes#1 in 5999 ms
[2025-08-21 17:25:17][357800558946705][6612 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:26:08][350635581871612][1 ms][INFO] === Request start ===
[2025-08-21 17:26:08][350635581871612][1 ms][DEBUG] START check_frida
[2025-08-21 17:26:08][350635581871612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:26:09][350635581871612][264 ms][DEBUG] SU: done in 263 ms; outroot          4632     1 2332716   4224 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:26:09][350635581871612][264 ms][DEBUG] check_frida: running
[2025-08-21 17:26:09][350635581871612][264 ms][DEBUG] END   check_frida in 263 ms
[2025-08-21 17:26:09][350635581871612][264 ms][DEBUG] START check_internet
[2025-08-21 17:26:09][350635581871612][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:26:09][350635581871612][795 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.937/201.937/201.937/0.000 ms\n
[2025-08-21 17:26:09][350635581871612][795 ms][DEBUG] check_internet: online
[2025-08-21 17:26:09][350635581871612][796 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 17:26:09][350635581871612][796 ms][DEBUG] START check_scloud
[2025-08-21 17:26:09][350635581871612][796 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:26:09][350635581871612][1061 ms][DEBUG] SU: done in 265 ms; outu0_a118       7086 20714 23808960 77252 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:26:09][350635581871612][1061 ms][DEBUG] targetPkg: running
[2025-08-21 17:26:09][350635581871612][1061 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 17:26:09][350635581871612][1061 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:26:09][350635581871612][1061 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM1NTgxODcxNjEyIiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I3MFM0SEtMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTIwNiJ9'" -e "main()" -q"
[2025-08-21 17:26:09][350635581871612][1061 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:26:09][350635581871612][1061 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM1NTgxODcxNjEyIiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I3MFM0SEtMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTIwNiJ9'" -e "main()" -q"
[2025-08-21 17:26:12][350635581871612][3716 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjM1NTgxODcxNjEyIiwibW9kZWwiOiJTTS1HOTk4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I3MFM0SEtMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTIwNiJ9"\r\n
[2025-08-21 17:26:14][350635581871612][5981 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b01547ca-79af-43a6-8164-38781a159a70","id":"QR_b01547ca-79af-43a6-8164-38781a159a70","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:26:14][350635581871612][5982 ms][DEBUG] proc_open done in 4921 ms; code=0; res.len=3152
[2025-08-21 17:26:14][350635581871612][5982 ms][DEBUG] END   runCmdUntilRes#1 in 4921 ms
[2025-08-21 17:26:14][350635581871612][5982 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:28:11][352978605172833][1 ms][INFO] === Request start ===
[2025-08-21 17:28:11][352978605172833][1 ms][DEBUG] START check_frida
[2025-08-21 17:28:11][352978605172833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:28:11][352978605172833][245 ms][DEBUG] SU: done in 243 ms; outroot          4632     1 2332716   4236 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:28:11][352978605172833][245 ms][DEBUG] check_frida: running
[2025-08-21 17:28:11][352978605172833][245 ms][DEBUG] END   check_frida in 244 ms
[2025-08-21 17:28:11][352978605172833][245 ms][DEBUG] START check_internet
[2025-08-21 17:28:11][352978605172833][245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:28:11][352978605172833][589 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.242/258.242/258.242/0.000 ms\n
[2025-08-21 17:28:11][352978605172833][589 ms][DEBUG] check_internet: online
[2025-08-21 17:28:11][352978605172833][589 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 17:28:11][352978605172833][589 ms][DEBUG] START check_scloud
[2025-08-21 17:28:11][352978605172833][589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:28:12][352978605172833][839 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23808992 77836 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:28:12][352978605172833][839 ms][DEBUG] targetPkg: running
[2025-08-21 17:28:12][352978605172833][839 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 17:28:12][352978605172833][839 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:28:12][352978605172833][839 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTc4NjA1MTcyODMzIiwibW9kZWwiOiJTTS1NMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1QyMEwzS0ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQzOCJ9'" -e "main()" -q"
[2025-08-21 17:28:12][352978605172833][839 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:28:12][352978605172833][839 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTc4NjA1MTcyODMzIiwibW9kZWwiOiJTTS1NMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1QyMEwzS0ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQzOCJ9'" -e "main()" -q"
[2025-08-21 17:28:14][352978605172833][3463 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTc4NjA1MTcyODMzIiwibW9kZWwiOiJTTS1NMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1QyMEwzS0ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQzOCJ9"\r\n
[2025-08-21 17:28:17][352978605172833][5900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f953efef-08bb-4dd2-b6de-7de9c759a640","id":"QR_f953efef-08bb-4dd2-b6de-7de9c759a640","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:28:17][352978605172833][5900 ms][DEBUG] proc_open done in 5061 ms; code=0; res.len=3152
[2025-08-21 17:28:17][352978605172833][5900 ms][DEBUG] END   runCmdUntilRes#1 in 5061 ms
[2025-08-21 17:28:17][352978605172833][5900 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:31:08][353353822692238][1 ms][INFO] === Request start ===
[2025-08-21 17:31:08][353353822692238][1 ms][DEBUG] START check_frida
[2025-08-21 17:31:08][353353822692238][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:31:09][353353822692238][308 ms][DEBUG] SU: done in 306 ms; outroot          4632     1 2332716   4220 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:31:09][353353822692238][308 ms][DEBUG] check_frida: running
[2025-08-21 17:31:09][353353822692238][308 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 17:31:09][353353822692238][308 ms][DEBUG] START check_scloud
[2025-08-21 17:31:09][353353822692238][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:31:09][353353822692238][604 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23809024 77072 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:31:09][353353822692238][605 ms][DEBUG] targetPkg: running
[2025-08-21 17:31:09][353353822692238][605 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:31:09][353353822692238][605 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:31:09][353353822692238][605 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzUzODIyNjkyMjM4IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJBMjg4NUZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDY4In0='" -e "main()" -q"
[2025-08-21 17:31:09][353353822692238][605 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:31:09][353353822692238][605 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzUzODIyNjkyMjM4IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJBMjg4NUZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDY4In0='" -e "main()" -q"
[2025-08-21 17:31:12][353353822692238][3213 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzUzODIyNjkyMjM4IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJBMjg4NUZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDY4In0="\r\n
[2025-08-21 17:31:17][353353822692238][8915 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_acb7de42-172b-4cf1-8b73-875f3b48908f","id":"QR_acb7de42-172b-4cf1-8b73-875f3b48908f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:31:17][353353822692238][8915 ms][DEBUG] proc_open done in 8310 ms; code=0; res.len=3152
[2025-08-21 17:31:17][353353822692238][8915 ms][DEBUG] END   runCmdUntilRes#1 in 8310 ms
[2025-08-21 17:31:17][353353822692238][8915 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:32:49][351234167629179][1 ms][INFO] === Request start ===
[2025-08-21 17:32:49][351234167629179][2 ms][DEBUG] START check_frida
[2025-08-21 17:32:49][351234167629179][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:32:49][351234167629179][296 ms][DEBUG] SU: done in 295 ms; outroot          4632     1 2332716   4236 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:32:49][351234167629179][296 ms][DEBUG] check_frida: running
[2025-08-21 17:32:49][351234167629179][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 17:32:49][351234167629179][296 ms][DEBUG] START check_internet
[2025-08-21 17:32:49][351234167629179][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:32:49][357358147383047][0 ms][INFO] === Request start ===
[2025-08-21 17:32:50][351234167629179][796 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.152/203.152/203.152/0.000 ms\n
[2025-08-21 17:32:50][351234167629179][796 ms][DEBUG] check_internet: online
[2025-08-21 17:32:50][351234167629179][796 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 17:32:50][351234167629179][796 ms][DEBUG] START check_scloud
[2025-08-21 17:32:50][351234167629179][796 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:32:50][351234167629179][1031 ms][DEBUG] SU: done in 234 ms; outu0_a118       7086 20714 23809056 77692 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:32:50][351234167629179][1031 ms][DEBUG] targetPkg: running
[2025-08-21 17:32:50][351234167629179][1031 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 17:32:50][351234167629179][1031 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:32:50][351234167629179][1031 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjM0MTY3NjI5MTc5IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g0MjFRQkJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMwMCJ9'" -e "main()" -q"
[2025-08-21 17:32:50][351234167629179][1031 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:32:50][351234167629179][1031 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjM0MTY3NjI5MTc5IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g0MjFRQkJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMwMCJ9'" -e "main()" -q"
[2025-08-21 17:32:53][351234167629179][3670 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjM0MTY3NjI5MTc5IiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g0MjFRQkJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjMwMCJ9"\r\n
[2025-08-21 17:32:55][351234167629179][5936 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ecdc522-e6e6-4101-90b7-27c7b4740a0e","id":"QR_9ecdc522-e6e6-4101-90b7-27c7b4740a0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:32:55][351234167629179][5936 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 17:32:55][351234167629179][5936 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 17:32:55][351234167629179][5936 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:32:55][357358147383047][6090 ms][DEBUG] START check_frida
[2025-08-21 17:32:55][357358147383047][6090 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:32:56][357358147383047][6371 ms][DEBUG] SU: done in 281 ms; outroot          4632     1 2349136   4248 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:32:56][357358147383047][6371 ms][DEBUG] check_frida: running
[2025-08-21 17:32:56][357358147383047][6371 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 17:32:56][357358147383047][6371 ms][DEBUG] START check_internet
[2025-08-21 17:32:56][357358147383047][6371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:32:56][357358147383047][6652 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.151/150.151/150.151/0.000 ms\n
[2025-08-21 17:32:56][357358147383047][6653 ms][DEBUG] check_internet: online
[2025-08-21 17:32:56][357358147383047][6653 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 17:32:56][357358147383047][6653 ms][DEBUG] START check_scloud
[2025-08-21 17:32:56][357358147383047][6653 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:32:56][357358147383047][6902 ms][DEBUG] SU: done in 250 ms; outu0_a118       7086 20714 23809088 76872 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:32:56][357358147383047][6902 ms][DEBUG] targetPkg: running
[2025-08-21 17:32:56][357358147383047][6903 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 17:32:56][357358147383047][6903 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:32:56][357358147383047][6903 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzU4MTQ3MzgzMDQ3IiwibW9kZWwiOiJTTS1YMjE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5VFhCME5NTUVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg0MiJ9'" -e "main()" -q"
[2025-08-21 17:32:56][357358147383047][6903 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:32:56][357358147383047][6903 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzU4MTQ3MzgzMDQ3IiwibW9kZWwiOiJTTS1YMjE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5VFhCME5NTUVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg0MiJ9'" -e "main()" -q"
[2025-08-21 17:32:59][357358147383047][9542 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MzU4MTQ3MzgzMDQ3IiwibW9kZWwiOiJTTS1YMjE2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI5VFhCME5NTUVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg0MiJ9"\r\n
[2025-08-21 17:33:01][357358147383047][11542 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45be2c7a-06e0-4db5-8b66-8fe769e9dbde","id":"QR_45be2c7a-06e0-4db5-8b66-8fe769e9dbde","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:33:01][357358147383047][11542 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 17:33:01][357358147383047][11542 ms][DEBUG] END   runCmdUntilRes#1 in 4639 ms
[2025-08-21 17:33:01][357358147383047][11542 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:33:07][356413252594135][0 ms][INFO] === Request start ===
[2025-08-21 17:33:07][356413252594135][1 ms][DEBUG] START check_frida
[2025-08-21 17:33:07][356413252594135][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:33:07][356413252594135][307 ms][DEBUG] SU: done in 306 ms; outroot          4632     1 2349136   4232 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:33:07][356413252594135][307 ms][DEBUG] check_frida: running
[2025-08-21 17:33:07][356413252594135][307 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 17:33:07][356413252594135][307 ms][DEBUG] START check_scloud
[2025-08-21 17:33:07][356413252594135][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:33:07][356413252594135][604 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23809120 77436 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:33:07][356413252594135][604 ms][DEBUG] targetPkg: running
[2025-08-21 17:33:07][356413252594135][604 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:33:07][356413252594135][604 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:33:07][356413252594135][604 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDEzMjUyNTk0MTM1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJLOFczMDJQWVFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk5MyJ9'" -e "main()" -q"
[2025-08-21 17:33:07][356413252594135][604 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:33:07][356413252594135][604 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDEzMjUyNTk0MTM1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJLOFczMDJQWVFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk5MyJ9'" -e "main()" -q"
[2025-08-21 17:33:10][356413252594135][3259 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDEzMjUyNTk0MTM1IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJLOFczMDJQWVFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTk5MyJ9"\r\n
[2025-08-21 17:33:12][356413252594135][5118 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d364649-884d-474d-8f9d-a89b36a32d8d","id":"QR_5d364649-884d-474d-8f9d-a89b36a32d8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:33:12][356413252594135][5119 ms][DEBUG] proc_open done in 4515 ms; code=0; res.len=3152
[2025-08-21 17:33:12][356413252594135][5119 ms][DEBUG] END   runCmdUntilRes#1 in 4515 ms
[2025-08-21 17:33:12][356413252594135][5119 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:36:09][352813890344617][1 ms][INFO] === Request start ===
[2025-08-21 17:36:09][352813890344617][1 ms][DEBUG] START check_frida
[2025-08-21 17:36:09][352813890344617][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:36:09][352813890344617][291 ms][DEBUG] SU: done in 289 ms; outroot          4632     1 2332716   4240 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:36:09][352813890344617][291 ms][DEBUG] check_frida: running
[2025-08-21 17:36:09][352813890344617][291 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 17:36:09][352813890344617][291 ms][DEBUG] START check_internet
[2025-08-21 17:36:09][352813890344617][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:36:09][352813890344617][852 ms][DEBUG] SU: done in 561 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.692/202.692/202.692/0.000 ms\n
[2025-08-21 17:36:09][352813890344617][852 ms][DEBUG] check_internet: online
[2025-08-21 17:36:09][352813890344617][852 ms][DEBUG] END   check_internet in 561 ms
[2025-08-21 17:36:09][352813890344617][852 ms][DEBUG] START check_scloud
[2025-08-21 17:36:09][352813890344617][852 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:36:10][352813890344617][1149 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23809152 77284 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:36:10][352813890344617][1149 ms][DEBUG] targetPkg: running
[2025-08-21 17:36:10][352813890344617][1149 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:36:10][352813890344617][1149 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:36:10][352813890344617][1149 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODEzODkwMzQ0NjE3IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QzM0RYMlpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgwMCJ9'" -e "main()" -q"
[2025-08-21 17:36:10][352813890344617][1149 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:36:10][352813890344617][1149 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODEzODkwMzQ0NjE3IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QzM0RYMlpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgwMCJ9'" -e "main()" -q"
[2025-08-21 17:36:12][352813890344617][3804 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyODEzODkwMzQ0NjE3IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1QzM0RYMlpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzgwMCJ9"\r\n
[2025-08-21 17:36:15][352813890344617][6366 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f053820-8a48-4ecf-aa61-5833d2a3715e","id":"QR_3f053820-8a48-4ecf-aa61-5833d2a3715e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:36:15][352813890344617][6367 ms][DEBUG] proc_open done in 5217 ms; code=0; res.len=3152
[2025-08-21 17:36:15][352813890344617][6367 ms][DEBUG] END   runCmdUntilRes#1 in 5218 ms
[2025-08-21 17:36:15][352813890344617][6367 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:41:17][353454194819670][1 ms][INFO] === Request start ===
[2025-08-21 17:41:17][353454194819670][1 ms][DEBUG] START check_frida
[2025-08-21 17:41:17][353454194819670][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:41:17][353454194819670][293 ms][DEBUG] SU: done in 292 ms; outroot          4632     1 2332716   4252 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:41:17][353454194819670][294 ms][DEBUG] check_frida: running
[2025-08-21 17:41:17][353454194819670][294 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 17:41:17][353454194819670][294 ms][DEBUG] START check_scloud
[2025-08-21 17:41:17][353454194819670][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:41:17][353454194819670][590 ms][DEBUG] SU: done in 296 ms; outu0_a118       7086 20714 23809184 77972 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:41:17][353454194819670][590 ms][DEBUG] targetPkg: running
[2025-08-21 17:41:17][353454194819670][590 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:41:17][353454194819670][590 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:41:17][353454194819670][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDU0MTk0ODE5NjcwIiwibW9kZWwiOiJTTS1BNTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q2MkgyWTdIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDkzIn0='" -e "main()" -q"
[2025-08-21 17:41:17][353454194819670][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:41:17][353454194819670][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDU0MTk0ODE5NjcwIiwibW9kZWwiOiJTTS1BNTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q2MkgyWTdIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDkzIn0='" -e "main()" -q"
[2025-08-21 17:41:20][353454194819670][3230 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDU0MTk0ODE5NjcwIiwibW9kZWwiOiJTTS1BNTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q2MkgyWTdIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDkzIn0="\r\n
[2025-08-21 17:41:24][353454194819670][7120 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb1f38ed-fec9-43fb-85df-41e11a1bffb0","id":"QR_fb1f38ed-fec9-43fb-85df-41e11a1bffb0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:41:24][353454194819670][7120 ms][DEBUG] proc_open done in 6529 ms; code=0; res.len=3152
[2025-08-21 17:41:24][353454194819670][7120 ms][DEBUG] END   runCmdUntilRes#1 in 6529 ms
[2025-08-21 17:41:24][353454194819670][7120 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:41:55][350127630249362][0 ms][INFO] === Request start ===
[2025-08-21 17:41:55][350127630249362][0 ms][DEBUG] START check_frida
[2025-08-21 17:41:55][350127630249362][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:41:56][350127630249362][247 ms][DEBUG] SU: done in 247 ms; outroot          4632     1 2332716   4220 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:41:56][350127630249362][247 ms][DEBUG] check_frida: running
[2025-08-21 17:41:56][350127630249362][247 ms][DEBUG] END   check_frida in 247 ms
[2025-08-21 17:41:56][350127630249362][247 ms][DEBUG] START check_scloud
[2025-08-21 17:41:56][350127630249362][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:41:56][350127630249362][544 ms][DEBUG] SU: done in 297 ms; outu0_a118       7086 20714 23809216 77232 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:41:56][350127630249362][544 ms][DEBUG] targetPkg: running
[2025-08-21 17:41:56][350127630249362][544 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 17:41:56][350127630249362][544 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:41:56][350127630249362][545 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTI3NjMwMjQ5MzYyIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRCMjJWTlNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJIQ0UiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQwOSJ9'" -e "main()" -q"
[2025-08-21 17:41:56][350127630249362][545 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:41:56][350127630249362][545 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTI3NjMwMjQ5MzYyIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRCMjJWTlNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJIQ0UiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQwOSJ9'" -e "main()" -q"
[2025-08-21 17:41:58][350127630249362][3168 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTI3NjMwMjQ5MzYyIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRCMjJWTlNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJIQ0UiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQwOSJ9"\r\n
[2025-08-21 17:42:01][350127630249362][5511 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f8dd90b-6204-404e-a7e3-1c02b926b75d","id":"QR_3f8dd90b-6204-404e-a7e3-1c02b926b75d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:42:01][350127630249362][5512 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 17:42:01][350127630249362][5512 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-21 17:42:01][350127630249362][5512 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:42:26][355824559785815][0 ms][INFO] === Request start ===
[2025-08-21 17:42:26][355824559785815][1 ms][DEBUG] START check_frida
[2025-08-21 17:42:26][355824559785815][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:42:26][355824559785815][313 ms][DEBUG] SU: done in 312 ms; outroot          4632     1 2332716   4232 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 17:42:26][355824559785815][313 ms][DEBUG] check_frida: running
[2025-08-21 17:42:26][355824559785815][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 17:42:26][355824559785815][313 ms][DEBUG] START check_internet
[2025-08-21 17:42:26][355824559785815][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:42:26][355824559785815][782 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.746/202.746/202.746/0.000 ms\n
[2025-08-21 17:42:26][355824559785815][782 ms][DEBUG] check_internet: online
[2025-08-21 17:42:26][355824559785815][782 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 17:42:26][355824559785815][782 ms][DEBUG] START check_scloud
[2025-08-21 17:42:26][355824559785815][782 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:42:27][355824559785815][1048 ms][DEBUG] SU: done in 265 ms; outu0_a118       7086 20714 23809248 77780 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 17:42:27][355824559785815][1048 ms][DEBUG] targetPkg: running
[2025-08-21 17:42:27][355824559785815][1048 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 17:42:27][355824559785815][1048 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:42:27][355824559785815][1048 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODI0NTU5Nzg1ODE1IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFhCMDBQUThUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTcxIn0='" -e "main()" -q"
[2025-08-21 17:42:27][355824559785815][1048 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:42:27][355824559785815][1048 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODI0NTU5Nzg1ODE1IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFhCMDBQUThUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTcxIn0='" -e "main()" -q"
[2025-08-21 17:42:29][355824559785815][3687 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODI0NTU5Nzg1ODE1IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFhCMDBQUThUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTcxIn0="\r\n
[2025-08-21 17:42:32][355824559785815][6749 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33263d38-08ea-44f2-862a-85b392437962","id":"QR_33263d38-08ea-44f2-862a-85b392437962","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 17:42:32][355824559785815][6749 ms][DEBUG] proc_open done in 5702 ms; code=0; res.len=3152
[2025-08-21 17:42:32][355824559785815][6749 ms][DEBUG] END   runCmdUntilRes#1 in 5702 ms
[2025-08-21 17:42:32][355824559785815][6749 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 17:46:09][353911531355163][1 ms][INFO] === Request start ===
[2025-08-21 17:46:09][353911531355163][1 ms][DEBUG] START check_frida
[2025-08-21 17:46:09][353911531355163][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:46:14][353911531355163][5046 ms][DEBUG] SU: done in 5044 ms; out
[2025-08-21 17:46:14][353911531355163][5046 ms][WARN] check_frida: not running, restarting
[2025-08-21 17:46:14][353911531355163][5046 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 17:46:14][353911531355163][5093 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 17:46:14][353911531355163][5093 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 17:46:14][353911531355163][5124 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:46:16][353911531355163][7139 ms][DEBUG] END   check_frida in 7138 ms
[2025-08-21 17:46:16][353911531355163][7139 ms][DEBUG] START check_internet
[2025-08-21 17:46:16][353911531355163][7139 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:46:16][353911531355163][7186 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 17:46:16][353911531355163][7186 ms][WARN] check_internet: offline
[2025-08-21 17:46:16][353911531355163][7186 ms][DEBUG] END   check_internet in 47 ms
[2025-08-21 17:46:18][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 17:46:18][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 17:47:13][353911531355163][1 ms][INFO] === Request start ===
[2025-08-21 17:47:13][353911531355163][1 ms][DEBUG] START check_frida
[2025-08-21 17:47:13][353911531355163][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:47:13][353911531355163][36 ms][DEBUG] SU: done in 35 ms; out
[2025-08-21 17:47:13][353911531355163][36 ms][WARN] check_frida: not running, restarting
[2025-08-21 17:47:13][353911531355163][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 17:47:13][353911531355163][68 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:47:13][353911531355163][68 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 17:47:13][353911531355163][99 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:47:15][353911531355163][2114 ms][DEBUG] END   check_frida in 2113 ms
[2025-08-21 17:47:15][353911531355163][2114 ms][DEBUG] START check_scloud
[2025-08-21 17:47:15][353911531355163][2114 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:47:15][353911531355163][2161 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 17:47:15][353911531355163][2161 ms][WARN] targetPkg: not running, restarting
[2025-08-21 17:47:15][353911531355163][2161 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 17:47:15][353911531355163][2192 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:47:15][353911531355163][2192 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 17:47:15][353911531355163][2223 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:47:17][353911531355163][4238 ms][DEBUG] END   check_scloud in 2124 ms
[2025-08-21 17:47:17][353911531355163][4239 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:47:17][353911531355163][4239 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTExNTMxMzU1MTYzIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMFkxMjNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Nzc2In0='" -e "main()" -q"
[2025-08-21 17:47:17][353911531355163][4239 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:47:17][353911531355163][4239 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTExNTMxMzU1MTYzIiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMFkxMjNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Nzc2In0='" -e "main()" -q"
[2025-08-21 17:47:19][353911531355163][6019 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 17:47:19][353911531355163][6176 ms][DEBUG] proc_open done in 1937 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 17:47:19][353911531355163][6176 ms][DEBUG] END   runCmdUntilRes#1 in 1937 ms
[2025-08-21 17:47:19][353911531355163][6176 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 17:47:21][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 17:47:21][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 17:56:10][350287315541440][1 ms][INFO] === Request start ===
[2025-08-21 17:56:10][350287315541440][2 ms][DEBUG] START check_frida
[2025-08-21 17:56:10][350287315541440][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:56:15][350287315541440][5045 ms][DEBUG] SU: done in 5044 ms; out
[2025-08-21 17:56:15][350287315541440][5045 ms][WARN] check_frida: not running, restarting
[2025-08-21 17:56:15][350287315541440][5045 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 17:56:15][350287315541440][5077 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:56:15][350287315541440][5077 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 17:56:15][350287315541440][5108 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:56:17][350287315541440][7123 ms][DEBUG] END   check_frida in 7121 ms
[2025-08-21 17:56:17][350287315541440][7123 ms][DEBUG] START check_internet
[2025-08-21 17:56:17][350287315541440][7123 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:56:17][350287315541440][7170 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 17:56:17][350287315541440][7170 ms][WARN] check_internet: offline
[2025-08-21 17:56:17][350287315541440][7170 ms][DEBUG] END   check_internet in 47 ms
[2025-08-21 17:56:19][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 17:56:19][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 17:57:12][351270411655685][1 ms][INFO] === Request start ===
[2025-08-21 17:57:12][351270411655685][1 ms][DEBUG] START check_frida
[2025-08-21 17:57:12][351270411655685][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:57:12][351270411655685][36 ms][DEBUG] SU: done in 34 ms; out
[2025-08-21 17:57:12][351270411655685][36 ms][WARN] check_frida: not running, restarting
[2025-08-21 17:57:12][351270411655685][36 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 17:57:12][351270411655685][67 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:57:12][351270411655685][67 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 17:57:12][351270411655685][98 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:57:13][350287315541440][1 ms][INFO] === Request start ===
[2025-08-21 17:57:14][351270411655685][2113 ms][DEBUG] END   check_frida in 2112 ms
[2025-08-21 17:57:14][351270411655685][2113 ms][DEBUG] START check_scloud
[2025-08-21 17:57:14][351270411655685][2114 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:57:14][351270411655685][2160 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 17:57:14][351270411655685][2160 ms][WARN] targetPkg: not running, restarting
[2025-08-21 17:57:14][351270411655685][2160 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 17:57:14][351270411655685][2192 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:57:14][351270411655685][2192 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 17:57:14][351270411655685][2223 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:57:16][351270411655685][4232 ms][DEBUG] END   check_scloud in 2119 ms
[2025-08-21 17:57:16][351270411655685][4232 ms][DEBUG] rawBody.length=1161
[2025-08-21 17:57:16][351270411655685][4232 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDExNjU1Njg1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MDNMVFpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk3NCJ9'" -e "main()" -q"
[2025-08-21 17:57:16][351270411655685][4232 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:57:16][351270411655685][4232 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDExNjU1Njg1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MDNMVFpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDk3NCJ9'" -e "main()" -q"
[2025-08-21 17:57:18][351270411655685][5998 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 17:57:18][351270411655685][6154 ms][DEBUG] proc_open done in 1921 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 17:57:18][351270411655685][6154 ms][DEBUG] END   runCmdUntilRes#1 in 1922 ms
[2025-08-21 17:57:18][351270411655685][6154 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 17:57:18][350287315541440][5055 ms][DEBUG] START check_frida
[2025-08-21 17:57:18][350287315541440][5055 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:57:18][350287315541440][5101 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 17:57:18][350287315541440][5102 ms][WARN] check_frida: not running, restarting
[2025-08-21 17:57:18][350287315541440][5102 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 17:57:18][350287315541440][5133 ms][DEBUG] SU: done in 32 ms; out
[2025-08-21 17:57:18][350287315541440][5133 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 17:57:18][350287315541440][5164 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:57:20][][1 ms][DEBUG] START check_boot_completed
[2025-08-21 17:57:20][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 17:57:20][350287315541440][7180 ms][DEBUG] END   check_frida in 2125 ms
[2025-08-21 17:57:20][350287315541440][7180 ms][DEBUG] START check_scloud
[2025-08-21 17:57:20][350287315541440][7180 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:57:21][350287315541440][7211 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:57:21][350287315541440][7211 ms][WARN] targetPkg: not running, restarting
[2025-08-21 17:57:21][350287315541440][7211 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 17:57:21][350287315541440][7242 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:57:21][350287315541440][7242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 17:57:21][350287315541440][7273 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:57:23][350287315541440][9274 ms][DEBUG] END   check_scloud in 2094 ms
[2025-08-21 17:57:23][350287315541440][9274 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:57:23][350287315541440][9274 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE1NTQxNDQwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMFQwNktSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTA3In0='" -e "main()" -q"
[2025-08-21 17:57:23][350287315541440][9274 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:57:23][350287315541440][9274 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE1NTQxNDQwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMFQwNktSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTA3In0='" -e "main()" -q"
[2025-08-21 17:57:24][350287315541440][11055 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 17:57:25][350287315541440][11211 ms][DEBUG] proc_open done in 1937 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 17:57:25][350287315541440][11211 ms][DEBUG] END   runCmdUntilRes#1 in 1937 ms
[2025-08-21 17:57:25][350287315541440][11211 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 17:57:26][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 17:57:26][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 17:58:14][351270411655685][1 ms][INFO] === Request start ===
[2025-08-21 17:58:14][351270411655685][1 ms][DEBUG] START check_frida
[2025-08-21 17:58:14][351270411655685][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:58:14][351270411655685][37 ms][DEBUG] SU: done in 35 ms; out
[2025-08-21 17:58:14][351270411655685][37 ms][WARN] check_frida: not running, restarting
[2025-08-21 17:58:14][351270411655685][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 17:58:14][351270411655685][68 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:58:14][351270411655685][68 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 17:58:14][351270411655685][99 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:58:16][351270411655685][2115 ms][DEBUG] END   check_frida in 2113 ms
[2025-08-21 17:58:16][351270411655685][2115 ms][DEBUG] START check_internet
[2025-08-21 17:58:16][351270411655685][2115 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 17:58:16][351270411655685][2162 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 17:58:16][351270411655685][2162 ms][WARN] check_internet: offline
[2025-08-21 17:58:16][351270411655685][2162 ms][DEBUG] END   check_internet in 47 ms
[2025-08-21 17:58:18][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 17:58:18][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 17:59:36][][78420 ms][DEBUG] ADB: done in 78420 ms; out
[2025-08-21 17:59:36][][78420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 17:59:40][][81624 ms][DEBUG] SU: done in 3203 ms; out
[2025-08-21 17:59:40][][81624 ms][DEBUG] END   check_boot_completed in 81624 ms
[2025-08-21 17:59:40][351270411655685][81624 ms][INFO] === Request start ===
[2025-08-21 17:59:40][351270411655685][81624 ms][DEBUG] START check_frida
[2025-08-21 17:59:40][351270411655685][81624 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 17:59:40][351270411655685][81655 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:59:40][351270411655685][81655 ms][WARN] check_frida: not running, restarting
[2025-08-21 17:59:40][351270411655685][81655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 17:59:40][351270411655685][81686 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:59:40][351270411655685][81686 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 17:59:40][351270411655685][81717 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:59:42][351270411655685][83733 ms][DEBUG] END   check_frida in 2109 ms
[2025-08-21 17:59:42][351270411655685][83733 ms][DEBUG] START check_scloud
[2025-08-21 17:59:42][351270411655685][83733 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 17:59:42][351270411655685][83780 ms][DEBUG] SU: done in 47 ms; out
[2025-08-21 17:59:42][351270411655685][83780 ms][WARN] targetPkg: not running, restarting
[2025-08-21 17:59:42][351270411655685][83780 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 17:59:42][351270411655685][83811 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:59:42][351270411655685][83811 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 17:59:42][351270411655685][83842 ms][DEBUG] SU: done in 31 ms; out
[2025-08-21 17:59:44][351270411655685][85858 ms][DEBUG] END   check_scloud in 2125 ms
[2025-08-21 17:59:44][351270411655685][85858 ms][DEBUG] rawBody.length=1160
[2025-08-21 17:59:44][351270411655685][85858 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDExNjU1Njg1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MDNMVFpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NTU0In0='" -e "main()" -q"
[2025-08-21 17:59:44][351270411655685][85858 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 17:59:44][351270411655685][85858 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDExNjU1Njg1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MDNMVFpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFGQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NTU0In0='" -e "main()" -q"
[2025-08-21 17:59:46][351270411655685][87624 ms][DEBUG] frida res:Waiting for USB device to appear...\r\n
[2025-08-21 17:59:46][351270411655685][87780 ms][DEBUG] proc_open done in 1922 ms (timeout); code=255; out.len=37 err.len=11
[2025-08-21 17:59:46][351270411655685][87780 ms][DEBUG] END   runCmdUntilRes#1 in 1922 ms
[2025-08-21 17:59:46][351270411655685][87780 ms][ERROR] NO RESULT; code=124 out.len=35 err.len=11
[2025-08-21 18:04:36][350655880550808][1 ms][INFO] === Request start ===
[2025-08-21 18:04:36][350655880550808][2 ms][DEBUG] START check_frida
[2025-08-21 18:04:36][350655880550808][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:04:37][350655880550808][257 ms][DEBUG] SU: done in 255 ms; out
[2025-08-21 18:04:37][350655880550808][257 ms][WARN] check_frida: not running, restarting
[2025-08-21 18:04:37][350655880550808][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof frida-server)"
[2025-08-21 18:04:37][350655880550808][413 ms][DEBUG] SU: done in 156 ms; out
[2025-08-21 18:04:37][350655880550808][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c 'nohup /data/local/tmp/frida-server >/dev/null 2>&1 &'"
[2025-08-21 18:04:37][350655880550808][507 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 18:04:39][350655880550808][2522 ms][DEBUG] END   check_frida in 2520 ms
[2025-08-21 18:04:39][350655880550808][2522 ms][DEBUG] START check_internet
[2025-08-21 18:04:39][350655880550808][2522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:04:39][350655880550808][2772 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.856/134.856/134.856/0.000 ms\n
[2025-08-21 18:04:39][350655880550808][2773 ms][DEBUG] check_internet: online
[2025-08-21 18:04:39][350655880550808][2773 ms][DEBUG] END   check_internet in 251 ms
[2025-08-21 18:04:39][350655880550808][2773 ms][DEBUG] START check_scloud
[2025-08-21 18:04:39][350655880550808][2773 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:04:39][350655880550808][3085 ms][DEBUG] SU: done in 312 ms; out
[2025-08-21 18:04:39][350655880550808][3085 ms][WARN] targetPkg: not running, restarting
[2025-08-21 18:04:39][350655880550808][3085 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)"
[2025-08-21 18:04:40][350655880550808][3209 ms][DEBUG] SU: done in 125 ms; out
[2025-08-21 18:04:40][350655880550808][3209 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity"
[2025-08-21 18:04:40][350655880550808][3381 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n
[2025-08-21 18:04:42][350655880550808][5397 ms][DEBUG] END   check_scloud in 2624 ms
[2025-08-21 18:04:42][350655880550808][5397 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:04:42][350655880550808][5397 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjU1ODgwNTUwODA4IiwibW9kZWwiOiJTTS1BMTU2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMFBBTVRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDI4In0='" -e "main()" -q"
[2025-08-21 18:04:42][350655880550808][5397 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:04:42][350655880550808][5397 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjU1ODgwNTUwODA4IiwibW9kZWwiOiJTTS1BMTU2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMFBBTVRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDI4In0='" -e "main()" -q"
[2025-08-21 18:04:44][350655880550808][8022 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjU1ODgwNTUwODA4IiwibW9kZWwiOiJTTS1BMTU2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMFBBTVRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDI4In0="\r\n
[2025-08-21 18:04:48][350655880550808][12006 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_703c6936-92a2-4d05-aca0-f49a8d779322","id":"QR_703c6936-92a2-4d05-aca0-f49a8d779322","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:04:48][350655880550808][12007 ms][DEBUG] proc_open done in 6610 ms; code=0; res.len=3152
[2025-08-21 18:04:48][350655880550808][12007 ms][DEBUG] END   runCmdUntilRes#1 in 6610 ms
[2025-08-21 18:04:48][350655880550808][12007 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:05:09][350226692520445][0 ms][INFO] === Request start ===
[2025-08-21 18:05:09][350226692520445][1 ms][DEBUG] START check_frida
[2025-08-21 18:05:09][350226692520445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:05:09][350226692520445][275 ms][DEBUG] SU: done in 274 ms; outroot         16270     1 2296864  49928 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:05:09][350226692520445][275 ms][DEBUG] check_frida: running
[2025-08-21 18:05:09][350226692520445][275 ms][DEBUG] END   check_frida in 274 ms
[2025-08-21 18:05:09][350226692520445][275 ms][DEBUG] START check_scloud
[2025-08-21 18:05:09][350226692520445][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:05:09][350226692520445][541 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23749296 133364 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:05:09][350226692520445][541 ms][DEBUG] targetPkg: running
[2025-08-21 18:05:09][350226692520445][541 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 18:05:09][350226692520445][541 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:05:09][350226692520445][541 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjI2NjkyNTIwNDQ1IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc0ME1NNDBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMyMSJ9'" -e "main()" -q"
[2025-08-21 18:05:09][350226692520445][541 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:05:09][350226692520445][541 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjI2NjkyNTIwNDQ1IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc0ME1NNDBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMyMSJ9'" -e "main()" -q"
[2025-08-21 18:05:12][350226692520445][3150 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjI2NjkyNTIwNDQ1IiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc0ME1NNDBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMyMSJ9"\r\n
[2025-08-21 18:05:14][350226692520445][5447 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59289a05-6746-477d-80bc-98c0d6b8fe51","id":"QR_59289a05-6746-477d-80bc-98c0d6b8fe51","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:05:14][350226692520445][5447 ms][DEBUG] proc_open done in 4906 ms; code=0; res.len=3152
[2025-08-21 18:05:14][350226692520445][5448 ms][DEBUG] END   runCmdUntilRes#1 in 4906 ms
[2025-08-21 18:05:14][350226692520445][5448 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:05:19][356846100316062][0 ms][INFO] === Request start ===
[2025-08-21 18:05:19][356846100316062][1 ms][DEBUG] START check_frida
[2025-08-21 18:05:19][356846100316062][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:05:20][356846100316062][259 ms][DEBUG] SU: done in 258 ms; outroot         16270     1 2312272  50052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:05:20][356846100316062][259 ms][DEBUG] check_frida: running
[2025-08-21 18:05:20][356846100316062][259 ms][DEBUG] END   check_frida in 258 ms
[2025-08-21 18:05:20][356846100316062][259 ms][DEBUG] START check_scloud
[2025-08-21 18:05:20][356846100316062][259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:05:20][356846100316062][509 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23699900 134784 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:05:20][356846100316062][509 ms][DEBUG] targetPkg: running
[2025-08-21 18:05:20][356846100316062][509 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:05:20][356846100316062][509 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:05:20][356846100316062][509 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2ODQ2MTAwMzE2MDYyIiwibW9kZWwiOiJTTS1GOTA3QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ01CMEM0MUtLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJEQlQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA1OCJ9'" -e "main()" -q"
[2025-08-21 18:05:20][356846100316062][509 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:05:20][356846100316062][509 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2ODQ2MTAwMzE2MDYyIiwibW9kZWwiOiJTTS1GOTA3QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ01CMEM0MUtLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJEQlQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA1OCJ9'" -e "main()" -q"
[2025-08-21 18:05:23][356846100316062][3139 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2ODQ2MTAwMzE2MDYyIiwibW9kZWwiOiJTTS1GOTA3QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ01CMEM0MUtLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJEQlQiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA1OCJ9"\r\n
[2025-08-21 18:05:25][356846100316062][5154 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb246c8b-1416-41be-ac1b-497a77b63312","id":"QR_eb246c8b-1416-41be-ac1b-497a77b63312","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:05:25][356846100316062][5154 ms][DEBUG] proc_open done in 4645 ms; code=0; res.len=3152
[2025-08-21 18:05:25][356846100316062][5154 ms][DEBUG] END   runCmdUntilRes#1 in 4645 ms
[2025-08-21 18:05:25][356846100316062][5154 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:05:27][356544392434376][0 ms][INFO] === Request start ===
[2025-08-21 18:05:27][356544392434376][1 ms][DEBUG] START check_frida
[2025-08-21 18:05:27][356544392434376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:05:27][356544392434376][303 ms][DEBUG] SU: done in 302 ms; outroot         16270     1 2312272  50072 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:05:27][356544392434376][303 ms][DEBUG] check_frida: running
[2025-08-21 18:05:27][356544392434376][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 18:05:27][356544392434376][303 ms][DEBUG] START check_scloud
[2025-08-21 18:05:27][356544392434376][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:05:28][356544392434376][569 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23699932 135400 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:05:28][356544392434376][569 ms][DEBUG] targetPkg: running
[2025-08-21 18:05:28][356544392434376][569 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 18:05:28][356544392434376][569 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:05:28][356544392434376][569 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0MzkyNDM0Mzc2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dCMDlTMkFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzExIn0='" -e "main()" -q"
[2025-08-21 18:05:28][356544392434376][569 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:05:28][356544392434376][569 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NTQ0MzkyNDM0Mzc2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dCMDlTMkFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzExIn0='" -e "main()" -q"
[2025-08-21 18:05:30][356544392434376][3177 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NTQ0MzkyNDM0Mzc2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1dCMDlTMkFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzExIn0="\r\n
[2025-08-21 18:05:36][351131562207553][1 ms][INFO] === Request start ===
[2025-08-21 18:05:36][356544392434376][9160 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc40fa83-a845-4993-a0a4-d2db1a795902","id":"QR_cc40fa83-a845-4993-a0a4-d2db1a795902","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:05:36][356544392434376][9160 ms][DEBUG] proc_open done in 8591 ms; code=0; res.len=3152
[2025-08-21 18:05:36][356544392434376][9160 ms][DEBUG] END   runCmdUntilRes#1 in 8591 ms
[2025-08-21 18:05:36][356544392434376][9160 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:05:37][351131562207553][1014 ms][DEBUG] START check_frida
[2025-08-21 18:05:37][351131562207553][1014 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:05:37][351131562207553][1280 ms][DEBUG] SU: done in 265 ms; outroot         16270     1 2312272  50076 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:05:37][351131562207553][1280 ms][DEBUG] check_frida: running
[2025-08-21 18:05:37][351131562207553][1280 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 18:05:37][351131562207553][1280 ms][DEBUG] START check_scloud
[2025-08-21 18:05:37][351131562207553][1280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:05:38][351131562207553][1531 ms][DEBUG] SU: done in 251 ms; outu0_a118      16385  4994 23699964 136036 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:05:38][351131562207553][1531 ms][DEBUG] targetPkg: running
[2025-08-21 18:05:38][351131562207553][1531 ms][DEBUG] END   check_scloud in 251 ms
[2025-08-21 18:05:38][351131562207553][1531 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:05:38][351131562207553][1531 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTMxNTYyMjA3NTUzIiwibW9kZWwiOiJTTS1YODA2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYMlQ5MDA0TURNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDcwIn0='" -e "main()" -q"
[2025-08-21 18:05:38][351131562207553][1532 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:05:38][351131562207553][1532 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTMxNTYyMjA3NTUzIiwibW9kZWwiOiJTTS1YODA2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYMlQ5MDA0TURNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDcwIn0='" -e "main()" -q"
[2025-08-21 18:05:40][351131562207553][4154 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTMxNTYyMjA3NTUzIiwibW9kZWwiOiJTTS1YODA2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYMlQ5MDA0TURNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDcwIn0="\r\n
[2025-08-21 18:05:43][351131562207553][6997 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d3abb4c-5501-4e7c-ac2e-711724e56703","id":"QR_5d3abb4c-5501-4e7c-ac2e-711724e56703","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:05:43][351131562207553][6998 ms][DEBUG] proc_open done in 5466 ms; code=0; res.len=3152
[2025-08-21 18:05:43][351131562207553][6998 ms][DEBUG] END   runCmdUntilRes#1 in 5466 ms
[2025-08-21 18:05:43][351131562207553][6998 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:06:07][353089185109689][0 ms][INFO] === Request start ===
[2025-08-21 18:06:07][353089185109689][1 ms][DEBUG] START check_frida
[2025-08-21 18:06:07][353089185109689][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:06:07][353089185109689][296 ms][DEBUG] SU: done in 295 ms; outroot         16270     1 2295852  50052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:06:07][353089185109689][296 ms][DEBUG] check_frida: running
[2025-08-21 18:06:07][353089185109689][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 18:06:07][353089185109689][296 ms][DEBUG] START check_internet
[2025-08-21 18:06:07][353089185109689][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:06:08][353089185109689][859 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.460/202.460/202.460/0.000 ms\n
[2025-08-21 18:06:08][353089185109689][859 ms][DEBUG] check_internet: online
[2025-08-21 18:06:08][353089185109689][859 ms][DEBUG] END   check_internet in 562 ms
[2025-08-21 18:06:08][353089185109689][859 ms][DEBUG] START check_scloud
[2025-08-21 18:06:08][353089185109689][859 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:06:08][353089185109689][1155 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23699996 136188 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:06:08][353089185109689][1156 ms][DEBUG] targetPkg: running
[2025-08-21 18:06:08][353089185109689][1156 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 18:06:08][353089185109689][1156 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:06:08][353089185109689][1156 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDg5MTg1MTA5Njg5IiwibW9kZWwiOiJTTS1BMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI4MkJXQTVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkxNyJ9'" -e "main()" -q"
[2025-08-21 18:06:08][353089185109689][1156 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:06:08][353089185109689][1156 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDg5MTg1MTA5Njg5IiwibW9kZWwiOiJTTS1BMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI4MkJXQTVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkxNyJ9'" -e "main()" -q"
[2025-08-21 18:06:11][353089185109689][3780 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDg5MTg1MTA5Njg5IiwibW9kZWwiOiJTTS1BMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFI4MkJXQTVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkxNyJ9"\r\n
[2025-08-21 18:06:13][353089185109689][5561 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c31ba6ca-671f-4e09-ad0a-3fa0b0922cac","id":"QR_c31ba6ca-671f-4e09-ad0a-3fa0b0922cac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:06:13][353089185109689][5561 ms][DEBUG] proc_open done in 4405 ms; code=0; res.len=3152
[2025-08-21 18:06:13][353089185109689][5561 ms][DEBUG] END   runCmdUntilRes#1 in 4405 ms
[2025-08-21 18:06:13][353089185109689][5561 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:06:22][353182170146830][0 ms][INFO] === Request start ===
[2025-08-21 18:06:22][353182170146830][1 ms][DEBUG] START check_frida
[2025-08-21 18:06:22][353182170146830][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:06:23][353182170146830][304 ms][DEBUG] SU: done in 302 ms; outroot         16270     1 2312272  48104 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:06:23][353182170146830][304 ms][DEBUG] check_frida: running
[2025-08-21 18:06:23][353182170146830][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 18:06:23][353182170146830][304 ms][DEBUG] START check_internet
[2025-08-21 18:06:23][353182170146830][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:06:23][353182170146830][632 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.798/214.798/214.798/0.000 ms\n
[2025-08-21 18:06:23][353182170146830][632 ms][DEBUG] check_internet: online
[2025-08-21 18:06:23][353182170146830][632 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 18:06:23][353182170146830][632 ms][DEBUG] START check_scloud
[2025-08-21 18:06:23][353182170146830][632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:06:23][353182170146830][882 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23700028 136912 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:06:23][353182170146830][882 ms][DEBUG] targetPkg: running
[2025-08-21 18:06:23][353182170146830][882 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:06:23][353182170146830][882 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:06:23][353182170146830][882 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTgyMTcwMTQ2ODMwIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MTA2UkFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MDc0In0='" -e "main()" -q"
[2025-08-21 18:06:23][353182170146830][882 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:06:23][353182170146830][882 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTgyMTcwMTQ2ODMwIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MTA2UkFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MDc0In0='" -e "main()" -q"
[2025-08-21 18:06:26][353182170146830][3490 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTgyMTcwMTQ2ODMwIiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ3MTA2UkFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MDc0In0="\r\n
[2025-08-21 18:06:31][353182170146830][8911 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_facaae84-cc9c-4b86-aa27-20033967e18e","id":"QR_facaae84-cc9c-4b86-aa27-20033967e18e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:06:31][353182170146830][8911 ms][DEBUG] proc_open done in 8029 ms; code=0; res.len=3152
[2025-08-21 18:06:31][353182170146830][8911 ms][DEBUG] END   runCmdUntilRes#1 in 8029 ms
[2025-08-21 18:06:31][353182170146830][8911 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:06:35][354747953042346][0 ms][INFO] === Request start ===
[2025-08-21 18:06:35][354747953042346][1 ms][DEBUG] START check_frida
[2025-08-21 18:06:35][354747953042346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:06:36][354747953042346][295 ms][DEBUG] SU: done in 294 ms; outroot         16270     1 2312272  48080 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:06:36][354747953042346][295 ms][DEBUG] check_frida: running
[2025-08-21 18:06:36][354747953042346][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 18:06:36][354747953042346][295 ms][DEBUG] START check_internet
[2025-08-21 18:06:36][354747953042346][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:06:36][354747953042346][592 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.615/175.615/175.615/0.000 ms\n
[2025-08-21 18:06:36][354747953042346][592 ms][DEBUG] check_internet: online
[2025-08-21 18:06:36][354747953042346][592 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 18:06:36][354747953042346][592 ms][DEBUG] START check_scloud
[2025-08-21 18:06:36][354747953042346][592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:06:36][354747953042346][857 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23700060 134624 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:06:36][354747953042346][857 ms][DEBUG] targetPkg: running
[2025-08-21 18:06:36][354747953042346][857 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 18:06:36][354747953042346][857 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:06:36][354747953042346][857 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUzMDQyMzQ2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDJXN1ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjMzNyJ9'" -e "main()" -q"
[2025-08-21 18:06:36][354747953042346][858 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:06:36][354747953042346][858 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUzMDQyMzQ2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDJXN1ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjMzNyJ9'" -e "main()" -q"
[2025-08-21 18:06:39][354747953042346][3466 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTUzMDQyMzQ2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDJXN1ZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjMzNyJ9"\r\n
[2025-08-21 18:06:39][351877479162808][0 ms][INFO] === Request start ===
[2025-08-21 18:06:41][354747953042346][5653 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e90d8a7c-d104-4947-8b2c-9e3752111047","id":"QR_e90d8a7c-d104-4947-8b2c-9e3752111047","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:06:41][354747953042346][5653 ms][DEBUG] proc_open done in 4796 ms; code=0; res.len=3152
[2025-08-21 18:06:41][354747953042346][5653 ms][DEBUG] END   runCmdUntilRes#1 in 4796 ms
[2025-08-21 18:06:41][354747953042346][5654 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:06:41][351877479162808][2017 ms][DEBUG] START check_frida
[2025-08-21 18:06:41][351877479162808][2018 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:06:42][351877479162808][2315 ms][DEBUG] SU: done in 297 ms; outroot         16270     1 2312272  48088 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:06:42][351877479162808][2315 ms][DEBUG] check_frida: running
[2025-08-21 18:06:42][351877479162808][2315 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 18:06:42][351877479162808][2315 ms][DEBUG] START check_internet
[2025-08-21 18:06:42][351877479162808][2315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:06:42][351877479162808][2675 ms][DEBUG] SU: done in 361 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=129 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 129.583/129.583/129.583/0.000 ms\n
[2025-08-21 18:06:42][351877479162808][2676 ms][DEBUG] check_internet: online
[2025-08-21 18:06:42][351877479162808][2676 ms][DEBUG] END   check_internet in 361 ms
[2025-08-21 18:06:42][351877479162808][2676 ms][DEBUG] START check_scloud
[2025-08-21 18:06:42][351877479162808][2676 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:06:42][351877479162808][2970 ms][DEBUG] SU: done in 295 ms; outu0_a118      16385  4994 23682608 135520 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:06:42][351877479162808][2971 ms][DEBUG] targetPkg: running
[2025-08-21 18:06:42][351877479162808][2971 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-21 18:06:42][351877479162808][2971 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:06:42][351877479162808][2971 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc5MTYyODA4IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MU4yS1hOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUwNSJ9'" -e "main()" -q"
[2025-08-21 18:06:42][351877479162808][2971 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:06:42][351877479162808][2971 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc5MTYyODA4IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MU4yS1hOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUwNSJ9'" -e "main()" -q"
[2025-08-21 18:06:45][351877479162808][5579 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDc5MTYyODA4IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MU4yS1hOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUwNSJ9"\r\n
[2025-08-21 18:06:47][351877479162808][7297 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d96842e-91ac-452f-a7a1-f3709cecaa56","id":"QR_4d96842e-91ac-452f-a7a1-f3709cecaa56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:06:47][351877479162808][7297 ms][DEBUG] proc_open done in 4326 ms; code=0; res.len=3152
[2025-08-21 18:06:47][351877479162808][7297 ms][DEBUG] END   runCmdUntilRes#1 in 4327 ms
[2025-08-21 18:06:47][351877479162808][7297 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:08:06][354956900062428][1 ms][INFO] === Request start ===
[2025-08-21 18:08:06][354956900062428][2 ms][DEBUG] START check_frida
[2025-08-21 18:08:06][354956900062428][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:08:06][354956900062428][247 ms][DEBUG] SU: done in 246 ms; outroot         16270     1 2295852  48168 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:08:06][354956900062428][247 ms][DEBUG] check_frida: running
[2025-08-21 18:08:06][354956900062428][247 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 18:08:06][354956900062428][248 ms][DEBUG] START check_internet
[2025-08-21 18:08:06][354956900062428][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:08:07][354956900062428][544 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.121/191.121/191.121/0.000 ms\n
[2025-08-21 18:08:07][354956900062428][544 ms][DEBUG] check_internet: online
[2025-08-21 18:08:07][354956900062428][544 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 18:08:07][354956900062428][544 ms][DEBUG] START check_scloud
[2025-08-21 18:08:07][354956900062428][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:08:07][354956900062428][810 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23682640 136148 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:08:07][354956900062428][810 ms][DEBUG] targetPkg: running
[2025-08-21 18:08:07][354956900062428][810 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 18:08:07][354956900062428][810 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:08:07][354956900062428][810 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTU2OTAwMDYyNDI4IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE5BMEYwWjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklDRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzE0In0='" -e "main()" -q"
[2025-08-21 18:08:07][354956900062428][810 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:08:07][354956900062428][810 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTU2OTAwMDYyNDI4IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE5BMEYwWjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklDRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzE0In0='" -e "main()" -q"
[2025-08-21 18:08:10][354956900062428][3450 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTU2OTAwMDYyNDI4IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE5BMEYwWjFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IklDRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzE0In0="\r\n
[2025-08-21 18:08:14][354956900062428][8167 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed511319-8c28-4e10-9205-f0883e471f43","id":"QR_ed511319-8c28-4e10-9205-f0883e471f43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:08:14][354956900062428][8167 ms][DEBUG] proc_open done in 7357 ms; code=0; res.len=3152
[2025-08-21 18:08:14][354956900062428][8167 ms][DEBUG] END   runCmdUntilRes#1 in 7357 ms
[2025-08-21 18:08:14][354956900062428][8167 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:10:08][352397459281436][1 ms][INFO] === Request start ===
[2025-08-21 18:10:08][352397459281436][2 ms][DEBUG] START check_frida
[2025-08-21 18:10:08][352397459281436][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:10:09][352397459281436][308 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2294840  48072 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:10:09][352397459281436][308 ms][DEBUG] check_frida: running
[2025-08-21 18:10:09][352397459281436][308 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 18:10:09][352397459281436][308 ms][DEBUG] START check_internet
[2025-08-21 18:10:09][352397459281436][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:10:09][352397459281436][667 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.064/251.064/251.064/0.000 ms\n
[2025-08-21 18:10:09][352397459281436][667 ms][DEBUG] check_internet: online
[2025-08-21 18:10:09][352397459281436][667 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 18:10:09][352397459281436][668 ms][DEBUG] START check_scloud
[2025-08-21 18:10:09][352397459281436][668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:10:09][352397459281436][933 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23700108 137516 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:10:09][352397459281436][933 ms][DEBUG] targetPkg: running
[2025-08-21 18:10:09][352397459281436][933 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 18:10:09][352397459281436][933 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:10:09][352397459281436][933 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDU5MjgxNDM2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDZSSFFQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgxMiJ9'" -e "main()" -q"
[2025-08-21 18:10:09][352397459281436][933 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:10:09][352397459281436][933 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDU5MjgxNDM2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDZSSFFQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgxMiJ9'" -e "main()" -q"
[2025-08-21 18:10:12][352397459281436][3557 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzk3NDU5MjgxNDM2IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ5MDZSSFFQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgxMiJ9"\r\n
[2025-08-21 18:10:14][352397459281436][5697 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a2283af-6e21-47ae-9d39-e5ec0b044770","id":"QR_9a2283af-6e21-47ae-9d39-e5ec0b044770","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:10:14][352397459281436][5698 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 18:10:14][352397459281436][5698 ms][DEBUG] END   runCmdUntilRes#1 in 4765 ms
[2025-08-21 18:10:14][352397459281436][5698 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:11:09][354432551490144][1 ms][INFO] === Request start ===
[2025-08-21 18:11:09][354432551490144][2 ms][DEBUG] START check_frida
[2025-08-21 18:11:09][354432551490144][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:11:10][354432551490144][253 ms][DEBUG] SU: done in 251 ms; outroot         16270     1 2295852  48084 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:11:10][354432551490144][253 ms][DEBUG] check_frida: running
[2025-08-21 18:11:10][354432551490144][253 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 18:11:10][354432551490144][253 ms][DEBUG] START check_scloud
[2025-08-21 18:11:10][354432551490144][253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:11:10][354432551490144][503 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23700140 138268 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:11:10][354432551490144][503 ms][DEBUG] targetPkg: running
[2025-08-21 18:11:10][354432551490144][503 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:11:10][354432551490144][503 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:11:10][354432551490144][503 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDMyNTUxNDkwMTQ0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MkVBNjNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Mjc0In0='" -e "main()" -q"
[2025-08-21 18:11:10][354432551490144][503 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:11:10][354432551490144][503 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDMyNTUxNDkwMTQ0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MkVBNjNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Mjc0In0='" -e "main()" -q"
[2025-08-21 18:11:13][354432551490144][3111 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDMyNTUxNDkwMTQ0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MkVBNjNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5Mjc0In0="\r\n
[2025-08-21 18:11:16][354432551490144][6517 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89dafc1b-1c70-49ea-8876-555a37f5b92e","id":"QR_89dafc1b-1c70-49ea-8876-555a37f5b92e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:11:16][354432551490144][6517 ms][DEBUG] proc_open done in 6013 ms; code=0; res.len=3152
[2025-08-21 18:11:16][354432551490144][6517 ms][DEBUG] END   runCmdUntilRes#1 in 6014 ms
[2025-08-21 18:11:16][354432551490144][6517 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:12:09][352879323441049][1 ms][INFO] === Request start ===
[2025-08-21 18:12:09][352879323441049][2 ms][DEBUG] START check_frida
[2025-08-21 18:12:09][352879323441049][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:12:09][352879323441049][259 ms][DEBUG] SU: done in 257 ms; outroot         16270     1 2295852  48076 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:12:09][352879323441049][259 ms][DEBUG] check_frida: running
[2025-08-21 18:12:09][352879323441049][259 ms][DEBUG] END   check_frida in 258 ms
[2025-08-21 18:12:09][352879323441049][260 ms][DEBUG] START check_internet
[2025-08-21 18:12:09][352879323441049][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:12:10][352879323441049][775 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.457/200.457/200.457/0.000 ms\n
[2025-08-21 18:12:10][352879323441049][775 ms][DEBUG] check_internet: online
[2025-08-21 18:12:10][352879323441049][775 ms][DEBUG] END   check_internet in 516 ms
[2025-08-21 18:12:10][352879323441049][775 ms][DEBUG] START check_scloud
[2025-08-21 18:12:10][352879323441049][775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:12:10][352879323441049][1024 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23700172 136028 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:12:10][352879323441049][1024 ms][DEBUG] targetPkg: running
[2025-08-21 18:12:10][352879323441049][1024 ms][DEBUG] END   check_scloud in 249 ms
[2025-08-21 18:12:10][352879323441049][1024 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:12:10][352879323441049][1024 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODc5MzIzNDQxMDQ5IiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dBME1FNFhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUzNiJ9'" -e "main()" -q"
[2025-08-21 18:12:10][352879323441049][1024 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:12:10][352879323441049][1024 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODc5MzIzNDQxMDQ5IiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dBME1FNFhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUzNiJ9'" -e "main()" -q"
[2025-08-21 18:12:12][352879323441049][3618 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyODc5MzIzNDQxMDQ5IiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dBME1FNFhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUzNiJ9"\r\n
[2025-08-21 18:12:15][352879323441049][5789 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb974a4b-be6b-4c94-98b3-889d19c9589b","id":"QR_bb974a4b-be6b-4c94-98b3-889d19c9589b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:12:15][352879323441049][5789 ms][DEBUG] proc_open done in 4765 ms; code=0; res.len=3152
[2025-08-21 18:12:15][352879323441049][5789 ms][DEBUG] END   runCmdUntilRes#1 in 4765 ms
[2025-08-21 18:12:15][352879323441049][5789 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:12:23][357299881665597][0 ms][INFO] === Request start ===
[2025-08-21 18:12:23][357299881665597][1 ms][DEBUG] START check_frida
[2025-08-21 18:12:23][357299881665597][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:12:23][357299881665597][259 ms][DEBUG] SU: done in 258 ms; outroot         16270     1 2312272  48052 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:12:23][357299881665597][259 ms][DEBUG] check_frida: running
[2025-08-21 18:12:23][357299881665597][260 ms][DEBUG] END   check_frida in 259 ms
[2025-08-21 18:12:23][357299881665597][260 ms][DEBUG] START check_internet
[2025-08-21 18:12:23][357299881665597][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:12:24][357299881665597][619 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.122/241.122/241.122/0.000 ms\n
[2025-08-21 18:12:24][357299881665597][619 ms][DEBUG] check_internet: online
[2025-08-21 18:12:24][357299881665597][619 ms][DEBUG] END   check_internet in 360 ms
[2025-08-21 18:12:24][357299881665597][619 ms][DEBUG] START check_scloud
[2025-08-21 18:12:24][357299881665597][619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:12:24][357299881665597][915 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23700204 136624 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:12:24][357299881665597][916 ms][DEBUG] targetPkg: running
[2025-08-21 18:12:24][357299881665597][916 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 18:12:24][357299881665597][916 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:12:24][357299881665597][916 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Mjk5ODgxNjY1NTk3IiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RCMUxBSk1NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTA4In0='" -e "main()" -q"
[2025-08-21 18:12:24][357299881665597][916 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:12:24][357299881665597][916 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Mjk5ODgxNjY1NTk3IiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RCMUxBSk1NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTA4In0='" -e "main()" -q"
[2025-08-21 18:12:27][357299881665597][3524 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Mjk5ODgxNjY1NTk3IiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RCMUxBSk1NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTA4In0="\r\n
[2025-08-21 18:12:31][357299881665597][8086 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe125916-35a0-40aa-80ff-d007e466f342","id":"QR_fe125916-35a0-40aa-80ff-d007e466f342","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:12:31][357299881665597][8086 ms][DEBUG] proc_open done in 7170 ms; code=0; res.len=3152
[2025-08-21 18:12:31][357299881665597][8086 ms][DEBUG] END   runCmdUntilRes#1 in 7170 ms
[2025-08-21 18:12:31][357299881665597][8086 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:13:08][350525792349302][0 ms][INFO] === Request start ===
[2025-08-21 18:13:08][350525792349302][1 ms][DEBUG] START check_frida
[2025-08-21 18:13:08][350525792349302][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:13:08][350525792349302][321 ms][DEBUG] SU: done in 320 ms; outroot         16270     1 2294840  48024 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:13:08][350525792349302][321 ms][DEBUG] check_frida: running
[2025-08-21 18:13:08][350525792349302][321 ms][DEBUG] END   check_frida in 320 ms
[2025-08-21 18:13:08][350525792349302][321 ms][DEBUG] START check_scloud
[2025-08-21 18:13:08][350525792349302][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:13:09][350525792349302][635 ms][DEBUG] SU: done in 313 ms; outu0_a118      16385  4994 23700236 122448 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:13:09][350525792349302][635 ms][DEBUG] targetPkg: running
[2025-08-21 18:13:09][350525792349302][635 ms][DEBUG] END   check_scloud in 314 ms
[2025-08-21 18:13:09][350525792349302][635 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:13:09][350525792349302][635 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTI1NzkyMzQ5MzAyIiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzMkU0SFdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDY4In0='" -e "main()" -q"
[2025-08-21 18:13:09][350525792349302][635 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:13:09][350525792349302][636 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTI1NzkyMzQ5MzAyIiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzMkU0SFdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDY4In0='" -e "main()" -q"
[2025-08-21 18:13:11][350525792349302][3227 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTI1NzkyMzQ5MzAyIiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kzMkU0SFdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDY4In0="\r\n
[2025-08-21 18:13:15][350525792349302][6851 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_850e0dd9-b0c6-42ae-9b73-b686a3e9332d","id":"QR_850e0dd9-b0c6-42ae-9b73-b686a3e9332d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:13:15][350525792349302][6851 ms][DEBUG] proc_open done in 6215 ms; code=0; res.len=3152
[2025-08-21 18:13:15][350525792349302][6851 ms][DEBUG] END   runCmdUntilRes#1 in 6216 ms
[2025-08-21 18:13:15][350525792349302][6851 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:13:24][351877472477948][0 ms][INFO] === Request start ===
[2025-08-21 18:13:24][351877472477948][1 ms][DEBUG] START check_frida
[2025-08-21 18:13:24][351877472477948][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:13:24][351877472477948][322 ms][DEBUG] SU: done in 321 ms; outroot         16270     1 2312272  47744 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:13:24][351877472477948][322 ms][DEBUG] check_frida: running
[2025-08-21 18:13:24][351877472477948][322 ms][DEBUG] END   check_frida in 321 ms
[2025-08-21 18:13:24][351877472477948][322 ms][DEBUG] START check_scloud
[2025-08-21 18:13:24][351877472477948][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:13:24][351877472477948][619 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23700268 123252 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:13:24][351877472477948][619 ms][DEBUG] targetPkg: running
[2025-08-21 18:13:24][351877472477948][619 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 18:13:24][351877472477948][619 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:13:24][351877472477948][619 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDcyNDc3OTQ4IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDEwTUxCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQyOSJ9'" -e "main()" -q"
[2025-08-21 18:13:24][351877472477948][619 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:13:24][351877472477948][619 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDcyNDc3OTQ4IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDEwTUxCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQyOSJ9'" -e "main()" -q"
[2025-08-21 18:13:27][351877472477948][3227 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDcyNDc3OTQ4IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFczMDEwTUxCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQyOSJ9"\r\n
[2025-08-21 18:13:29][351877472477948][5539 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71c891a3-7a00-43da-bfd4-46fdbaefebea","id":"QR_71c891a3-7a00-43da-bfd4-46fdbaefebea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:13:29][351877472477948][5539 ms][DEBUG] proc_open done in 4920 ms; code=0; res.len=3152
[2025-08-21 18:13:29][351877472477948][5539 ms][DEBUG] END   runCmdUntilRes#1 in 4920 ms
[2025-08-21 18:13:29][351877472477948][5539 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:13:43][354274904053686][0 ms][INFO] === Request start ===
[2025-08-21 18:13:43][354274904053686][1 ms][DEBUG] START check_frida
[2025-08-21 18:13:43][354274904053686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:13:43][354274904053686][264 ms][DEBUG] SU: done in 263 ms; outroot         16270     1 2295852  47752 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:13:43][354274904053686][265 ms][DEBUG] check_frida: running
[2025-08-21 18:13:43][354274904053686][265 ms][DEBUG] END   check_frida in 264 ms
[2025-08-21 18:13:43][354274904053686][265 ms][DEBUG] START check_scloud
[2025-08-21 18:13:43][354274904053686][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:13:43][355346631897871][0 ms][INFO] === Request start ===
[2025-08-21 18:13:43][354274904053686][499 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23700300 123900 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:13:43][354274904053686][499 ms][DEBUG] targetPkg: running
[2025-08-21 18:13:43][354274904053686][499 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 18:13:43][354274904053686][499 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:13:43][354274904053686][499 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0Mjc0OTA0MDUzNjg2IiwibW9kZWwiOiJTTS1YMjE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Mlg1MUtaVkRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDA1In0='" -e "main()" -q"
[2025-08-21 18:13:43][354274904053686][499 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:13:43][354274904053686][499 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0Mjc0OTA0MDUzNjg2IiwibW9kZWwiOiJTTS1YMjE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Mlg1MUtaVkRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDA1In0='" -e "main()" -q"
[2025-08-21 18:13:44][350272252488631][0 ms][INFO] === Request start ===
[2025-08-21 18:13:45][356663766197458][1 ms][INFO] === Request start ===
[2025-08-21 18:13:46][354274904053686][3107 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0Mjc0OTA0MDUzNjg2IiwibW9kZWwiOiJTTS1YMjE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI5Mlg1MUtaVkRaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDA1In0="\r\n
[2025-08-21 18:13:49][354274904053686][6154 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e9bfc0e-a471-4416-a2d1-556614b6bd4a","id":"QR_4e9bfc0e-a471-4416-a2d1-556614b6bd4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:13:49][354274904053686][6154 ms][DEBUG] proc_open done in 5655 ms; code=0; res.len=3152
[2025-08-21 18:13:49][354274904053686][6154 ms][DEBUG] END   runCmdUntilRes#1 in 5655 ms
[2025-08-21 18:13:49][354274904053686][6154 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:13:49][350272252488631][5068 ms][DEBUG] START check_frida
[2025-08-21 18:13:49][350272252488631][5068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:13:50][350272252488631][5382 ms][DEBUG] SU: done in 314 ms; outroot         16270     1 2312272  47768 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:13:50][350272252488631][5382 ms][DEBUG] check_frida: running
[2025-08-21 18:13:50][350272252488631][5382 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 18:13:50][350272252488631][5382 ms][DEBUG] START check_scloud
[2025-08-21 18:13:50][350272252488631][5382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:13:50][350272252488631][5630 ms][DEBUG] SU: done in 248 ms; outu0_a118      16385  4994 23700332 124656 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:13:50][350272252488631][5630 ms][DEBUG] targetPkg: running
[2025-08-21 18:13:50][350272252488631][5630 ms][DEBUG] END   check_scloud in 248 ms
[2025-08-21 18:13:50][350272252488631][5630 ms][DEBUG] rawBody.length=1159
[2025-08-21 18:13:50][350272252488631][5630 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjcyMjUyNDg4NjMxIiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDMwSE0wUFgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzUyNDAifQ=='" -e "main()" -q"
[2025-08-21 18:13:50][350272252488631][5631 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:13:50][350272252488631][5631 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjcyMjUyNDg4NjMxIiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDMwSE0wUFgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzUyNDAifQ=='" -e "main()" -q"
[2025-08-21 18:13:53][350272252488631][8223 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjcyMjUyNDg4NjMxIiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDMwSE0wUFgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzUyNDAifQ=="\r\n
[2025-08-21 18:13:56][350272252488631][11347 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8f85029-f532-4ee6-9187-1fb5ed65947a","id":"QR_a8f85029-f532-4ee6-9187-1fb5ed65947a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:13:56][350272252488631][11348 ms][DEBUG] proc_open done in 5717 ms; code=0; res.len=3152
[2025-08-21 18:13:56][350272252488631][11348 ms][DEBUG] END   runCmdUntilRes#1 in 5718 ms
[2025-08-21 18:13:56][350272252488631][11348 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:13:56][356663766197458][11169 ms][DEBUG] START check_frida
[2025-08-21 18:13:56][356663766197458][11169 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:13:57][356663766197458][11483 ms][DEBUG] SU: done in 314 ms; outroot         16270     1 2312272  47812 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:13:57][356663766197458][11483 ms][DEBUG] check_frida: running
[2025-08-21 18:13:57][356663766197458][11483 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 18:13:57][356663766197458][11483 ms][DEBUG] START check_scloud
[2025-08-21 18:13:57][356663766197458][11483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:13:57][356663766197458][11732 ms][DEBUG] SU: done in 248 ms; outu0_a118      16385  4994 23700364 125324 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:13:57][356663766197458][11732 ms][DEBUG] targetPkg: running
[2025-08-21 18:13:57][356663766197458][11732 ms][DEBUG] END   check_scloud in 249 ms
[2025-08-21 18:13:57][356663766197458][11732 ms][DEBUG] rawBody.length=1159
[2025-08-21 18:13:57][356663766197458][11732 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjYzNzY2MTk3NDU4IiwibW9kZWwiOiJTTS1YOTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzcwNDRZTlkiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzkyNjQifQ=='" -e "main()" -q"
[2025-08-21 18:13:57][356663766197458][11732 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:13:57][356663766197458][11732 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjYzNzY2MTk3NDU4IiwibW9kZWwiOiJTTS1YOTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzcwNDRZTlkiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzkyNjQifQ=='" -e "main()" -q"
[2025-08-21 18:13:59][356663766197458][14293 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NjYzNzY2MTk3NDU4IiwibW9kZWwiOiJTTS1YOTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVzcwNDRZTlkiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzkyNjQifQ=="\r\n
[2025-08-21 18:14:00][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 18:14:00][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 18:14:00][][49 ms][DEBUG] ADB: done in 49 ms; out
[2025-08-21 18:14:00][][49 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 18:14:00][][112 ms][DEBUG] SU: done in 63 ms; out
[2025-08-21 18:14:00][][112 ms][DEBUG] END   check_boot_completed in 112 ms
[2025-08-21 18:14:00][355346631897871][112 ms][INFO] === Request start ===
[2025-08-21 18:14:00][355346631897871][113 ms][DEBUG] START check_frida
[2025-08-21 18:14:00][355346631897871][113 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:14:01][355346631897871][455 ms][DEBUG] SU: done in 342 ms; outroot         16270     1 2312272  47808 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:14:01][355346631897871][456 ms][DEBUG] check_frida: running
[2025-08-21 18:14:01][355346631897871][456 ms][DEBUG] END   check_frida in 343 ms
[2025-08-21 18:14:01][355346631897871][456 ms][DEBUG] START check_internet
[2025-08-21 18:14:01][355346631897871][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:14:01][355346631897871][830 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.672/259.672/259.672/0.000 ms\n
[2025-08-21 18:14:01][355346631897871][831 ms][DEBUG] check_internet: online
[2025-08-21 18:14:01][355346631897871][831 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 18:14:01][355346631897871][831 ms][DEBUG] START check_scloud
[2025-08-21 18:14:01][355346631897871][831 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:14:01][355346631897871][1096 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23877624 136208 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:14:01][355346631897871][1096 ms][DEBUG] targetPkg: running
[2025-08-21 18:14:01][355346631897871][1096 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 18:14:01][355346631897871][1096 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:14:01][355346631897871][1096 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQ2NjMxODk3ODcxIiwibW9kZWwiOiJTTS1YNTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlgyMDNSM0tSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1ODkxIn0='" -e "main()" -q"
[2025-08-21 18:14:01][355346631897871][1096 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:14:01][355346631897871][1096 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQ2NjMxODk3ODcxIiwibW9kZWwiOiJTTS1YNTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlgyMDNSM0tSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1ODkxIn0='" -e "main()" -q"
[2025-08-21 18:14:04][356663766197458][18511 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_801bf3e5-4b80-4593-b686-56daf70cca84","id":"QR_801bf3e5-4b80-4593-b686-56daf70cca84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:14:04][356663766197458][18512 ms][DEBUG] proc_open done in 6780 ms; code=0; res.len=3152
[2025-08-21 18:14:04][356663766197458][18512 ms][DEBUG] END   runCmdUntilRes#1 in 6780 ms
[2025-08-21 18:14:04][356663766197458][18512 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:14:04][355346631897871][3392 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MzQ2NjMxODk3ODcxIiwibW9kZWwiOiJTTS1YNTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlgyMDNSM0tSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1ODkxIn0="\r\n
[2025-08-21 18:14:07][355346631897871][6766 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2dcafd2-0ed8-4a85-a4dc-445bdea3b6b9","id":"QR_b2dcafd2-0ed8-4a85-a4dc-445bdea3b6b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:14:07][355346631897871][6767 ms][DEBUG] proc_open done in 5670 ms; code=0; res.len=3152
[2025-08-21 18:14:07][355346631897871][6767 ms][DEBUG] END   runCmdUntilRes#1 in 5671 ms
[2025-08-21 18:14:07][355346631897871][6767 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:14:07][350616254667016][0 ms][INFO] === Request start ===
[2025-08-21 18:14:07][350616254667016][1 ms][DEBUG] START check_frida
[2025-08-21 18:14:07][350616254667016][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:14:08][350616254667016][255 ms][DEBUG] SU: done in 254 ms; outroot         16270     1 2312272  47548 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:14:08][350616254667016][255 ms][DEBUG] check_frida: running
[2025-08-21 18:14:08][350616254667016][255 ms][DEBUG] END   check_frida in 254 ms
[2025-08-21 18:14:08][350616254667016][255 ms][DEBUG] START check_internet
[2025-08-21 18:14:08][350616254667016][255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:14:08][350616254667016][505 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.699/135.699/135.699/0.000 ms\n
[2025-08-21 18:14:08][350616254667016][505 ms][DEBUG] check_internet: online
[2025-08-21 18:14:08][350616254667016][505 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 18:14:08][350616254667016][505 ms][DEBUG] START check_scloud
[2025-08-21 18:14:08][350616254667016][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:14:08][350616254667016][770 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23700396 117096 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:14:08][350616254667016][770 ms][DEBUG] targetPkg: running
[2025-08-21 18:14:08][350616254667016][770 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 18:14:08][350616254667016][770 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:14:08][350616254667016][770 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjE2MjU0NjY3MDE2IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMVEzR0JKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI2MiJ9'" -e "main()" -q"
[2025-08-21 18:14:08][350616254667016][770 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:14:08][350616254667016][771 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjE2MjU0NjY3MDE2IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMVEzR0JKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI2MiJ9'" -e "main()" -q"
[2025-08-21 18:14:11][350616254667016][3363 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjE2MjU0NjY3MDE2IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gxMVEzR0JKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI2MiJ9"\r\n
[2025-08-21 18:14:13][350616254667016][5409 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e7489f6-3074-439d-9e8b-211300a4df1b","id":"QR_3e7489f6-3074-439d-9e8b-211300a4df1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:14:13][350616254667016][5410 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 18:14:13][350616254667016][5410 ms][DEBUG] END   runCmdUntilRes#1 in 4639 ms
[2025-08-21 18:14:13][350616254667016][5410 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:15:06][351270411655685][1 ms][INFO] === Request start ===
[2025-08-21 18:15:06][351270411655685][2 ms][DEBUG] START check_frida
[2025-08-21 18:15:06][351270411655685][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:15:06][351270411655685][293 ms][DEBUG] SU: done in 291 ms; outroot         16270     1 2295852  47500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:15:06][351270411655685][293 ms][DEBUG] check_frida: running
[2025-08-21 18:15:06][351270411655685][293 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 18:15:06][351270411655685][293 ms][DEBUG] START check_scloud
[2025-08-21 18:15:06][351270411655685][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:15:06][351270411655685][543 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23700428 117776 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:15:06][351270411655685][543 ms][DEBUG] targetPkg: running
[2025-08-21 18:15:06][351270411655685][543 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:15:06][351270411655685][543 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:15:06][351270411655685][543 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDExNjU1Njg1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MDNMVFpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY2NSJ9'" -e "main()" -q"
[2025-08-21 18:15:06][351270411655685][543 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:15:06][351270411655685][543 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDExNjU1Njg1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MDNMVFpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY2NSJ9'" -e "main()" -q"
[2025-08-21 18:15:09][351270411655685][3151 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcwNDExNjU1Njg1IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ2MDNMVFpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY2NSJ9"\r\n
[2025-08-21 18:15:11][351270411655685][5416 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_812a4ff6-129d-4b9b-a76f-c606e0029f09","id":"QR_812a4ff6-129d-4b9b-a76f-c606e0029f09","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:15:11][351270411655685][5416 ms][DEBUG] proc_open done in 4873 ms; code=0; res.len=3152
[2025-08-21 18:15:11][351270411655685][5416 ms][DEBUG] END   runCmdUntilRes#1 in 4874 ms
[2025-08-21 18:15:11][351270411655685][5416 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:15:37][358615311676046][0 ms][INFO] === Request start ===
[2025-08-21 18:15:37][358615311676046][1 ms][DEBUG] START check_frida
[2025-08-21 18:15:37][358615311676046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:15:38][358615311676046][267 ms][DEBUG] SU: done in 266 ms; outroot         16270     1 2295852  47468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:15:38][358615311676046][267 ms][DEBUG] check_frida: running
[2025-08-21 18:15:38][358615311676046][267 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 18:15:38][358615311676046][267 ms][DEBUG] START check_scloud
[2025-08-21 18:15:38][358615311676046][267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:15:38][358615311676046][579 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23700460 118356 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:15:38][358615311676046][579 ms][DEBUG] targetPkg: running
[2025-08-21 18:15:38][358615311676046][579 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 18:15:38][358615311676046][579 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:15:38][358615311676046][579 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NjE1MzExNjc2MDQ2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMUsxNVFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzgyIn0='" -e "main()" -q"
[2025-08-21 18:15:38][358615311676046][579 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:15:38][358615311676046][580 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NjE1MzExNjc2MDQ2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMUsxNVFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzgyIn0='" -e "main()" -q"
[2025-08-21 18:15:40][358615311676046][3172 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NjE1MzExNjc2MDQ2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMUsxNVFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNzgyIn0="\r\n
[2025-08-21 18:15:44][358615311676046][6437 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64cea43a-fd9c-480d-b06d-2adfec825b6e","id":"QR_64cea43a-fd9c-480d-b06d-2adfec825b6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:15:44][358615311676046][6437 ms][DEBUG] proc_open done in 5857 ms; code=0; res.len=3152
[2025-08-21 18:15:44][358615311676046][6437 ms][DEBUG] END   runCmdUntilRes#1 in 5858 ms
[2025-08-21 18:15:44][358615311676046][6437 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:17:09][353454191844010][1 ms][INFO] === Request start ===
[2025-08-21 18:17:09][353454191844010][2 ms][DEBUG] START check_frida
[2025-08-21 18:17:09][353454191844010][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:17:09][353454191844010][282 ms][DEBUG] SU: done in 280 ms; outroot         16270     1 2295852  47508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:17:09][353454191844010][282 ms][DEBUG] check_frida: running
[2025-08-21 18:17:09][353454191844010][282 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 18:17:09][353454191844010][282 ms][DEBUG] START check_scloud
[2025-08-21 18:17:09][353454191844010][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:17:09][353454191844010][532 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23700748 119864 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:17:09][353454191844010][532 ms][DEBUG] targetPkg: running
[2025-08-21 18:17:09][353454191844010][532 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:17:09][353454191844010][532 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:17:09][353454191844010][532 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDU0MTkxODQ0MDEwIiwibW9kZWwiOiJTTS1BNTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q0MDE5WURUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTUwIn0='" -e "main()" -q"
[2025-08-21 18:17:09][353454191844010][532 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:17:09][353454191844010][532 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNDU0MTkxODQ0MDEwIiwibW9kZWwiOiJTTS1BNTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q0MDE5WURUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTUwIn0='" -e "main()" -q"
[2025-08-21 18:17:12][353454191844010][3187 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNDU0MTkxODQ0MDEwIiwibW9kZWwiOiJTTS1BNTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q0MDE5WURUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTUwIn0="\r\n
[2025-08-21 18:17:17][353454191844010][7702 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_817909d7-8263-4ee2-a475-0b8134f5848b","id":"QR_817909d7-8263-4ee2-a475-0b8134f5848b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:17:17][353454191844010][7702 ms][DEBUG] proc_open done in 7170 ms; code=0; res.len=3152
[2025-08-21 18:17:17][353454191844010][7702 ms][DEBUG] END   runCmdUntilRes#1 in 7170 ms
[2025-08-21 18:17:17][353454191844010][7702 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:17:35][351460453123235][0 ms][INFO] === Request start ===
[2025-08-21 18:17:35][351460453123235][1 ms][DEBUG] START check_frida
[2025-08-21 18:17:35][351460453123235][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:17:35][351460453123235][265 ms][DEBUG] SU: done in 264 ms; outroot         16270     1 2295852  47480 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:17:35][351460453123235][265 ms][DEBUG] check_frida: running
[2025-08-21 18:17:35][351460453123235][265 ms][DEBUG] END   check_frida in 264 ms
[2025-08-21 18:17:35][351460453123235][265 ms][DEBUG] START check_scloud
[2025-08-21 18:17:35][351460453123235][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:17:36][351460453123235][515 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23700780 120388 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:17:36][351460453123235][515 ms][DEBUG] targetPkg: running
[2025-08-21 18:17:36][351460453123235][515 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:17:36][351460453123235][515 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:17:36][351460453123235][515 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDYwNDUzMTIzMjM1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTBGNVJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDMwIn0='" -e "main()" -q"
[2025-08-21 18:17:36][351460453123235][515 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:17:36][351460453123235][515 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDYwNDUzMTIzMjM1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTBGNVJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDMwIn0='" -e "main()" -q"
[2025-08-21 18:17:38][351460453123235][3108 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDYwNDUzMTIzMjM1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTBGNVJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDMwIn0="\r\n
[2025-08-21 18:17:41][351460453123235][6014 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4dcb2708-3df2-4bdf-993d-b3f82c419199","id":"QR_4dcb2708-3df2-4bdf-993d-b3f82c419199","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:17:41][351460453123235][6014 ms][DEBUG] proc_open done in 5498 ms; code=0; res.len=3152
[2025-08-21 18:17:41][351460453123235][6014 ms][DEBUG] END   runCmdUntilRes#1 in 5498 ms
[2025-08-21 18:17:41][351460453123235][6014 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:18:07][350814495071102][1 ms][INFO] === Request start ===
[2025-08-21 18:18:07][350814495071102][2 ms][DEBUG] START check_frida
[2025-08-21 18:18:07][350814495071102][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:18:07][350814495071102][248 ms][DEBUG] SU: done in 246 ms; outroot         16270     1 2295852  47520 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:18:07][350814495071102][248 ms][DEBUG] check_frida: running
[2025-08-21 18:18:07][350814495071102][248 ms][DEBUG] END   check_frida in 246 ms
[2025-08-21 18:18:07][350814495071102][248 ms][DEBUG] START check_internet
[2025-08-21 18:18:07][350814495071102][248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:18:07][350814495071102][810 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.982/196.982/196.982/0.000 ms\n
[2025-08-21 18:18:07][350814495071102][810 ms][DEBUG] check_internet: online
[2025-08-21 18:18:07][350814495071102][810 ms][DEBUG] END   check_internet in 562 ms
[2025-08-21 18:18:07][350814495071102][810 ms][DEBUG] START check_scloud
[2025-08-21 18:18:07][350814495071102][810 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:18:08][350814495071102][1044 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23701580 121248 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:18:08][350814495071102][1044 ms][DEBUG] targetPkg: running
[2025-08-21 18:18:08][350814495071102][1044 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 18:18:08][350814495071102][1044 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:18:08][350814495071102][1045 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk1MDcxMTAyIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMTBOUkVYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgwMyJ9'" -e "main()" -q"
[2025-08-21 18:18:08][350814495071102][1045 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:18:08][350814495071102][1045 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk1MDcxMTAyIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMTBOUkVYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgwMyJ9'" -e "main()" -q"
[2025-08-21 18:18:10][350814495071102][3637 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODE0NDk1MDcxMTAyIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMTBOUkVYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgwMyJ9"\r\n
[2025-08-21 18:18:12][350814495071102][5715 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81bb5e5a-6f54-4336-85c2-3da066be9dd6","id":"QR_81bb5e5a-6f54-4336-85c2-3da066be9dd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:18:12][350814495071102][5715 ms][DEBUG] proc_open done in 4671 ms; code=0; res.len=3152
[2025-08-21 18:18:12][350814495071102][5715 ms][DEBUG] END   runCmdUntilRes#1 in 4671 ms
[2025-08-21 18:18:12][350814495071102][5715 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:18:17][355644566363699][0 ms][INFO] === Request start ===
[2025-08-21 18:18:17][355644566363699][1 ms][DEBUG] START check_frida
[2025-08-21 18:18:17][355644566363699][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:18:18][355644566363699][285 ms][DEBUG] SU: done in 284 ms; outroot         16270     1 2312272  47488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:18:18][355644566363699][286 ms][DEBUG] check_frida: running
[2025-08-21 18:18:18][355644566363699][286 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 18:18:18][355644566363699][286 ms][DEBUG] START check_internet
[2025-08-21 18:18:18][355644566363699][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:18:18][355644566363699][660 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.026/261.026/261.026/0.000 ms\n
[2025-08-21 18:18:18][355644566363699][661 ms][DEBUG] check_internet: online
[2025-08-21 18:18:18][355644566363699][661 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 18:18:18][355644566363699][661 ms][DEBUG] START check_scloud
[2025-08-21 18:18:18][355644566363699][661 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:18:18][355644566363699][942 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23701612 117936 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:18:18][355644566363699][942 ms][DEBUG] targetPkg: running
[2025-08-21 18:18:18][355644566363699][942 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 18:18:18][355644566363699][942 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:18:18][355644566363699][942 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NjQ0NTY2MzYzNjk5IiwibW9kZWwiOiJTTS1NMTI3RyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQzMDhEUU1GIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1NSJ9'" -e "main()" -q"
[2025-08-21 18:18:18][355644566363699][942 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:18:18][355644566363699][942 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NjQ0NTY2MzYzNjk5IiwibW9kZWwiOiJTTS1NMTI3RyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQzMDhEUU1GIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1NSJ9'" -e "main()" -q"
[2025-08-21 18:18:21][355644566363699][3566 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NjQ0NTY2MzYzNjk5IiwibW9kZWwiOiJTTS1NMTI3RyIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQzMDhEUU1GIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODM1NSJ9"\r\n
[2025-08-21 18:18:23][355644566363699][5456 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f55210f-0d78-4c3f-a7bf-1d133db9b844","id":"QR_1f55210f-0d78-4c3f-a7bf-1d133db9b844","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:18:23][355644566363699][5456 ms][DEBUG] proc_open done in 4514 ms; code=0; res.len=3152
[2025-08-21 18:18:23][355644566363699][5456 ms][DEBUG] END   runCmdUntilRes#1 in 4514 ms
[2025-08-21 18:18:23][355644566363699][5456 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:19:11][353713132139263][0 ms][INFO] === Request start ===
[2025-08-21 18:19:11][353713132139263][1 ms][DEBUG] START check_frida
[2025-08-21 18:19:11][353713132139263][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:19:11][353713132139263][301 ms][DEBUG] SU: done in 300 ms; outroot         16270     1 2312272  47432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:19:11][353713132139263][302 ms][DEBUG] check_frida: running
[2025-08-21 18:19:11][353713132139263][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 18:19:11][353713132139263][302 ms][DEBUG] START check_scloud
[2025-08-21 18:19:11][353713132139263][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:19:11][353713132139263][551 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23701644 118740 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:19:11][353713132139263][551 ms][DEBUG] targetPkg: running
[2025-08-21 18:19:11][353713132139263][552 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:19:11][353713132139263][552 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:19:11][353713132139263][552 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzEzMTMyMTM5MjYzIiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cyMTJONDZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU3NiJ9'" -e "main()" -q"
[2025-08-21 18:19:11][353713132139263][552 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:19:11][353713132139263][552 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNzEzMTMyMTM5MjYzIiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cyMTJONDZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU3NiJ9'" -e "main()" -q"
[2025-08-21 18:19:14][353713132139263][3176 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNzEzMTMyMTM5MjYzIiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cyMTJONDZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU3NiJ9"\r\n
[2025-08-21 18:19:16][353713132139263][5534 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71671da9-33e1-4cb1-b728-4eee103ea8ac","id":"QR_71671da9-33e1-4cb1-b728-4eee103ea8ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:19:16][353713132139263][5535 ms][DEBUG] proc_open done in 4982 ms; code=0; res.len=3152
[2025-08-21 18:19:16][353713132139263][5535 ms][DEBUG] END   runCmdUntilRes#1 in 4983 ms
[2025-08-21 18:19:16][353713132139263][5535 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:19:24][359156944990669][0 ms][INFO] === Request start ===
[2025-08-21 18:19:24][359156944990669][1 ms][DEBUG] START check_frida
[2025-08-21 18:19:24][359156944990669][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:19:24][359156944990669][309 ms][DEBUG] SU: done in 308 ms; outroot         16270     1 2312272  47464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:19:24][359156944990669][309 ms][DEBUG] check_frida: running
[2025-08-21 18:19:24][359156944990669][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 18:19:24][359156944990669][309 ms][DEBUG] START check_scloud
[2025-08-21 18:19:24][359156944990669][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:19:25][359156944990669][605 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23701676 118988 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:19:25][359156944990669][606 ms][DEBUG] targetPkg: running
[2025-08-21 18:19:25][359156944990669][606 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 18:19:25][359156944990669][606 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:19:25][359156944990669][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQ0OTkwNjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMEI4NjZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTkzNCJ9'" -e "main()" -q"
[2025-08-21 18:19:25][359156944990669][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:19:25][359156944990669][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQ0OTkwNjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMEI4NjZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTkzNCJ9'" -e "main()" -q"
[2025-08-21 18:19:27][359156944990669][3183 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTU2OTQ0OTkwNjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMEI4NjZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTkzNCJ9"\r\n
[2025-08-21 18:19:29][359156944990669][5136 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2817dd5-2382-4e4b-8c8c-5018a960ef62","id":"QR_a2817dd5-2382-4e4b-8c8c-5018a960ef62","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:19:29][359156944990669][5136 ms][DEBUG] proc_open done in 4530 ms; code=0; res.len=3152
[2025-08-21 18:19:29][359156944990669][5136 ms][DEBUG] END   runCmdUntilRes#1 in 4530 ms
[2025-08-21 18:19:29][359156944990669][5136 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:19:35][352060483997415][0 ms][INFO] === Request start ===
[2025-08-21 18:19:35][352060483997415][0 ms][DEBUG] START check_frida
[2025-08-21 18:19:35][352060483997415][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:19:35][352060483997415][302 ms][DEBUG] SU: done in 302 ms; outroot         16270     1 2312272  47500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:19:35][352060483997415][302 ms][DEBUG] check_frida: running
[2025-08-21 18:19:35][352060483997415][302 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 18:19:35][352060483997415][302 ms][DEBUG] START check_scloud
[2025-08-21 18:19:35][352060483997415][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:19:36][352060483997415][552 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23701708 119520 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:19:36][352060483997415][552 ms][DEBUG] targetPkg: running
[2025-08-21 18:19:36][352060483997415][552 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:19:36][352060483997415][552 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:19:36][352060483997415][552 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDYwNDgzOTk3NDE1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMERRQlhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU3NCJ9'" -e "main()" -q"
[2025-08-21 18:19:36][352060483997415][552 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:19:36][352060483997415][552 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDYwNDgzOTk3NDE1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMERRQlhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU3NCJ9'" -e "main()" -q"
[2025-08-21 18:19:38][352060483997415][3145 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDYwNDgzOTk3NDE1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgzMERRQlhMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU3NCJ9"\r\n
[2025-08-21 18:19:41][352060483997415][5582 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0719d94-c9d8-43ea-8808-d5c06ad39dc2","id":"QR_c0719d94-c9d8-43ea-8808-d5c06ad39dc2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:19:41][352060483997415][5582 ms][DEBUG] proc_open done in 5030 ms; code=0; res.len=3152
[2025-08-21 18:19:41][352060483997415][5582 ms][DEBUG] END   runCmdUntilRes#1 in 5030 ms
[2025-08-21 18:19:41][352060483997415][5582 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:19:46][355088509403909][0 ms][INFO] === Request start ===
[2025-08-21 18:19:46][355088509403909][1 ms][DEBUG] START check_frida
[2025-08-21 18:19:46][355088509403909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:19:46][355088509403909][255 ms][DEBUG] SU: done in 254 ms; outroot         16270     1 2312272  47432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:19:46][355088509403909][255 ms][DEBUG] check_frida: running
[2025-08-21 18:19:46][355088509403909][255 ms][DEBUG] END   check_frida in 254 ms
[2025-08-21 18:19:46][355088509403909][255 ms][DEBUG] START check_scloud
[2025-08-21 18:19:46][355088509403909][255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:19:47][355088509403909][505 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23701740 120092 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:19:47][355088509403909][505 ms][DEBUG] targetPkg: running
[2025-08-21 18:19:47][355088509403909][505 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:19:47][355088509403909][505 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:19:47][355088509403909][505 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDg4NTA5NDAzOTA5IiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MUNQV0VZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ1NCJ9'" -e "main()" -q"
[2025-08-21 18:19:47][355088509403909][506 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:19:47][355088509403909][506 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDg4NTA5NDAzOTA5IiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MUNQV0VZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ1NCJ9'" -e "main()" -q"
[2025-08-21 18:19:49][355088509403909][3129 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDg4NTA5NDAzOTA5IiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MUNQV0VZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ1NCJ9"\r\n
[2025-08-21 18:19:51][355088509403909][5129 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db02b7b9-a26a-415e-83e1-a259486997bb","id":"QR_db02b7b9-a26a-415e-83e1-a259486997bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:19:51][355088509403909][5129 ms][DEBUG] proc_open done in 4623 ms; code=0; res.len=3152
[2025-08-21 18:19:51][355088509403909][5129 ms][DEBUG] END   runCmdUntilRes#1 in 4623 ms
[2025-08-21 18:19:51][355088509403909][5129 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:21:08][351272338255425][1 ms][INFO] === Request start ===
[2025-08-21 18:21:08][351272338255425][2 ms][DEBUG] START check_frida
[2025-08-21 18:21:08][351272338255425][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:21:08][351272338255425][268 ms][DEBUG] SU: done in 266 ms; outroot         16270     1 2295852  47492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:21:08][351272338255425][268 ms][DEBUG] check_frida: running
[2025-08-21 18:21:08][351272338255425][268 ms][DEBUG] END   check_frida in 267 ms
[2025-08-21 18:21:08][351272338255425][268 ms][DEBUG] START check_scloud
[2025-08-21 18:21:08][351272338255425][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:21:08][351272338255425][502 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23701772 120668 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:21:08][351272338255425][502 ms][DEBUG] targetPkg: running
[2025-08-21 18:21:08][351272338255425][502 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 18:21:08][351272338255425][502 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:21:08][351272338255425][503 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM4MjU1NDI1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEM5S1ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI4MSJ9'" -e "main()" -q"
[2025-08-21 18:21:08][351272338255425][503 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:21:08][351272338255425][503 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzM4MjU1NDI1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEM5S1ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI4MSJ9'" -e "main()" -q"
[2025-08-21 18:21:11][351272338255425][3111 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcyMzM4MjU1NDI1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk1MEM5S1ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI4MSJ9"\r\n
[2025-08-21 18:21:13][351272338255425][5298 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8aef9896-3893-4245-8a5a-feaa9fc1b3a8","id":"QR_8aef9896-3893-4245-8a5a-feaa9fc1b3a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:21:13][351272338255425][5298 ms][DEBUG] proc_open done in 4796 ms; code=0; res.len=3152
[2025-08-21 18:21:13][351272338255425][5298 ms][DEBUG] END   runCmdUntilRes#1 in 4796 ms
[2025-08-21 18:21:13][351272338255425][5298 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:22:07][350938289340900][0 ms][INFO] === Request start ===
[2025-08-21 18:22:07][350938289340900][1 ms][DEBUG] START check_frida
[2025-08-21 18:22:07][350938289340900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:22:07][350938289340900][245 ms][DEBUG] SU: done in 244 ms; outroot         16270     1 2295852  47480 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:22:07][350938289340900][246 ms][DEBUG] check_frida: running
[2025-08-21 18:22:07][350938289340900][246 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 18:22:07][350938289340900][246 ms][DEBUG] START check_internet
[2025-08-21 18:22:07][350938289340900][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:22:07][350938289340900][761 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.683/201.683/201.683/0.000 ms\n
[2025-08-21 18:22:07][350938289340900][761 ms][DEBUG] check_internet: online
[2025-08-21 18:22:07][350938289340900][761 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 18:22:07][350938289340900][761 ms][DEBUG] START check_scloud
[2025-08-21 18:22:07][350938289340900][761 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:22:08][350938289340900][1012 ms][DEBUG] SU: done in 251 ms; outu0_a118      16385  4994 23701804 121196 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:22:08][350938289340900][1012 ms][DEBUG] targetPkg: running
[2025-08-21 18:22:08][350938289340900][1012 ms][DEBUG] END   check_scloud in 251 ms
[2025-08-21 18:22:08][350938289340900][1012 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:22:08][350938289340900][1012 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg5MzQwOTAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFBFQjBBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI5NiJ9'" -e "main()" -q"
[2025-08-21 18:22:08][350938289340900][1012 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:22:08][350938289340900][1012 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg5MzQwOTAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFBFQjBBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI5NiJ9'" -e "main()" -q"
[2025-08-21 18:22:10][350938289340900][3619 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg5MzQwOTAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFBFQjBBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI5NiJ9"\r\n
[2025-08-21 18:22:13][350938289340900][5900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c989488f-aaa1-4c08-8e71-37b882a9e762","id":"QR_c989488f-aaa1-4c08-8e71-37b882a9e762","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:22:13][350938289340900][5900 ms][DEBUG] proc_open done in 4888 ms; code=0; res.len=3152
[2025-08-21 18:22:13][350938289340900][5900 ms][DEBUG] END   runCmdUntilRes#1 in 4888 ms
[2025-08-21 18:22:13][350938289340900][5900 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:23:09][354595805976942][1 ms][INFO] === Request start ===
[2025-08-21 18:23:09][354595805976942][2 ms][DEBUG] START check_frida
[2025-08-21 18:23:09][354595805976942][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:23:09][354595805976942][246 ms][DEBUG] SU: done in 245 ms; outroot         16270     1 2295852  47496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:23:09][354595805976942][246 ms][DEBUG] check_frida: running
[2025-08-21 18:23:09][354595805976942][246 ms][DEBUG] END   check_frida in 245 ms
[2025-08-21 18:23:09][354595805976942][246 ms][DEBUG] START check_scloud
[2025-08-21 18:23:09][354595805976942][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:23:09][354595805976942][496 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23701836 121308 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:23:09][354595805976942][496 ms][DEBUG] targetPkg: running
[2025-08-21 18:23:09][354595805976942][497 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:23:09][354595805976942][497 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:23:09][354595805976942][497 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTk1ODA1OTc2OTQyIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMEZFUExOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk2NSJ9'" -e "main()" -q"
[2025-08-21 18:23:09][354595805976942][497 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:23:09][354595805976942][497 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTk1ODA1OTc2OTQyIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMEZFUExOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk2NSJ9'" -e "main()" -q"
[2025-08-21 18:23:12][354595805976942][3073 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTk1ODA1OTc2OTQyIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMEZFUExOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk2NSJ9"\r\n
[2025-08-21 18:23:14][354595805976942][5339 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c422403-303b-4f4e-8389-98e578184d93","id":"QR_3c422403-303b-4f4e-8389-98e578184d93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:23:14][354595805976942][5339 ms][DEBUG] proc_open done in 4842 ms; code=0; res.len=3152
[2025-08-21 18:23:14][354595805976942][5339 ms][DEBUG] END   runCmdUntilRes#1 in 4842 ms
[2025-08-21 18:23:14][354595805976942][5339 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:27:10][352610710677675][1 ms][INFO] === Request start ===
[2025-08-21 18:27:10][352610710677675][2 ms][DEBUG] START check_frida
[2025-08-21 18:27:10][352610710677675][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:27:10][352610710677675][285 ms][DEBUG] SU: done in 283 ms; outroot         16270     1 2295852  47520 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:27:10][352610710677675][285 ms][DEBUG] check_frida: running
[2025-08-21 18:27:10][352610710677675][285 ms][DEBUG] END   check_frida in 284 ms
[2025-08-21 18:27:10][352610710677675][285 ms][DEBUG] START check_scloud
[2025-08-21 18:27:10][352610710677675][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:27:11][352610710677675][582 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23701868 118312 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:27:11][352610710677675][582 ms][DEBUG] targetPkg: running
[2025-08-21 18:27:11][352610710677675][582 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 18:27:11][352610710677675][582 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:27:11][352610710677675][582 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjEwNzEwNjc3Njc1IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MUxUWVJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTIxIn0='" -e "main()" -q"
[2025-08-21 18:27:11][352610710677675][582 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:27:11][352610710677675][582 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjEwNzEwNjc3Njc1IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MUxUWVJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTIxIn0='" -e "main()" -q"
[2025-08-21 18:27:13][352610710677675][3175 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjEwNzEwNjc3Njc1IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MUxUWVJUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTIxIn0="\r\n
[2025-08-21 18:27:18][352610710677675][8064 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fa45fa1-a487-48fd-bd12-737f31c25efe","id":"QR_0fa45fa1-a487-48fd-bd12-737f31c25efe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:27:18][352610710677675][8064 ms][DEBUG] proc_open done in 7482 ms; code=0; res.len=3152
[2025-08-21 18:27:18][352610710677675][8064 ms][DEBUG] END   runCmdUntilRes#1 in 7482 ms
[2025-08-21 18:27:18][352610710677675][8064 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:27:26][352631695305496][0 ms][INFO] === Request start ===
[2025-08-21 18:27:26][352631695305496][1 ms][DEBUG] START check_frida
[2025-08-21 18:27:26][352631695305496][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:27:26][352631695305496][245 ms][DEBUG] SU: done in 244 ms; outroot         16270     1 2312272  47488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:27:26][352631695305496][245 ms][DEBUG] check_frida: running
[2025-08-21 18:27:26][352631695305496][245 ms][DEBUG] END   check_frida in 244 ms
[2025-08-21 18:27:26][352631695305496][245 ms][DEBUG] START check_scloud
[2025-08-21 18:27:26][352631695305496][245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:27:26][352631695305496][510 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23701900 118872 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:27:26][352631695305496][511 ms][DEBUG] targetPkg: running
[2025-08-21 18:27:26][352631695305496][511 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 18:27:26][352631695305496][511 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:27:26][352631695305496][511 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjMxNjk1MzA1NDk2IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RBMFhBWUhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM4MCJ9'" -e "main()" -q"
[2025-08-21 18:27:26][352631695305496][511 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:27:26][352631695305496][511 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjMxNjk1MzA1NDk2IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RBMFhBWUhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM4MCJ9'" -e "main()" -q"
[2025-08-21 18:27:29][352631695305496][3088 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjMxNjk1MzA1NDk2IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RBMFhBWUhSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM4MCJ9"\r\n
[2025-08-21 18:27:31][352631695305496][5572 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d5a5525-818f-4136-82cb-9f38d42c9661","id":"QR_3d5a5525-818f-4136-82cb-9f38d42c9661","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:27:31][352631695305496][5572 ms][DEBUG] proc_open done in 5061 ms; code=0; res.len=3152
[2025-08-21 18:27:31][352631695305496][5572 ms][DEBUG] END   runCmdUntilRes#1 in 5061 ms
[2025-08-21 18:27:31][352631695305496][5572 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:27:37][350396223204486][0 ms][INFO] === Request start ===
[2025-08-21 18:27:37][350396223204486][1 ms][DEBUG] START check_frida
[2025-08-21 18:27:37][350396223204486][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:27:37][350396223204486][310 ms][DEBUG] SU: done in 309 ms; outroot         16270     1 2312272  47516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:27:37][350396223204486][310 ms][DEBUG] check_frida: running
[2025-08-21 18:27:37][350396223204486][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 18:27:37][350396223204486][310 ms][DEBUG] START check_scloud
[2025-08-21 18:27:37][350396223204486][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:27:37][350396223204486][560 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23701932 119420 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:27:37][350396223204486][560 ms][DEBUG] targetPkg: running
[2025-08-21 18:27:37][350396223204486][560 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:27:37][350396223204486][560 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:27:37][350396223204486][560 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzk2MjIzMjA0NDg2IiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MjROQUhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTA5NSJ9'" -e "main()" -q"
[2025-08-21 18:27:37][350396223204486][560 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:27:37][350396223204486][560 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzk2MjIzMjA0NDg2IiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MjROQUhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTA5NSJ9'" -e "main()" -q"
[2025-08-21 18:27:40][350396223204486][3184 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzk2MjIzMjA0NDg2IiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g5MjROQUhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTA5NSJ9"\r\n
[2025-08-21 18:27:42][350396223204486][5215 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b6efb54d-3253-4675-a1b5-6bccfe8c6fdc","id":"QR_b6efb54d-3253-4675-a1b5-6bccfe8c6fdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:27:42][350396223204486][5215 ms][DEBUG] proc_open done in 4654 ms; code=0; res.len=3152
[2025-08-21 18:27:42][350396223204486][5215 ms][DEBUG] END   runCmdUntilRes#1 in 4655 ms
[2025-08-21 18:27:42][350396223204486][5215 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:28:08][350287318086948][0 ms][INFO] === Request start ===
[2025-08-21 18:28:08][350287318086948][1 ms][DEBUG] START check_frida
[2025-08-21 18:28:08][350287318086948][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:28:09][350287318086948][286 ms][DEBUG] SU: done in 284 ms; outroot         16270     1 2295852  47492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:28:09][350287318086948][286 ms][DEBUG] check_frida: running
[2025-08-21 18:28:09][350287318086948][286 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 18:28:09][350287318086948][286 ms][DEBUG] START check_internet
[2025-08-21 18:28:09][350287318086948][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:28:09][350287318086948][802 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.997/199.997/199.997/0.000 ms\n
[2025-08-21 18:28:09][350287318086948][802 ms][DEBUG] check_internet: online
[2025-08-21 18:28:09][350287318086948][802 ms][DEBUG] END   check_internet in 516 ms
[2025-08-21 18:28:09][350287318086948][802 ms][DEBUG] START check_scloud
[2025-08-21 18:28:09][350287318086948][802 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:28:09][350287318086948][1035 ms][DEBUG] SU: done in 233 ms; outu0_a118      16385  4994 23701964 119972 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:28:09][350287318086948][1035 ms][DEBUG] targetPkg: running
[2025-08-21 18:28:09][350287318086948][1036 ms][DEBUG] END   check_scloud in 233 ms
[2025-08-21 18:28:09][350287318086948][1036 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:28:09][350287318086948][1036 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE4MDg2OTQ4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMDZONzZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU2NiJ9'" -e "main()" -q"
[2025-08-21 18:28:09][350287318086948][1036 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:28:09][350287318086948][1036 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE4MDg2OTQ4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMDZONzZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU2NiJ9'" -e "main()" -q"
[2025-08-21 18:28:12][350287318086948][3644 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjg3MzE4MDg2OTQ4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMDZONzZaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU2NiJ9"\r\n
[2025-08-21 18:28:14][350287318086948][5722 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20831b6c-5e85-4efe-9a97-47380fc78f00","id":"QR_20831b6c-5e85-4efe-9a97-47380fc78f00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:28:14][350287318086948][5722 ms][DEBUG] proc_open done in 4686 ms; code=0; res.len=3152
[2025-08-21 18:28:14][350287318086948][5722 ms][DEBUG] END   runCmdUntilRes#1 in 4687 ms
[2025-08-21 18:28:14][350287318086948][5722 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:28:25][352665182311526][0 ms][INFO] === Request start ===
[2025-08-21 18:28:25][352665182311526][0 ms][DEBUG] START check_frida
[2025-08-21 18:28:25][352665182311526][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:28:25][352665182311526][242 ms][DEBUG] SU: done in 242 ms; outroot         16270     1 2312272  47468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:28:25][352665182311526][242 ms][DEBUG] check_frida: running
[2025-08-21 18:28:25][352665182311526][242 ms][DEBUG] END   check_frida in 242 ms
[2025-08-21 18:28:25][352665182311526][242 ms][DEBUG] START check_internet
[2025-08-21 18:28:25][352665182311526][242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:28:25][352665182311526][601 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.302/254.302/254.302/0.000 ms\n
[2025-08-21 18:28:25][352665182311526][602 ms][DEBUG] check_internet: online
[2025-08-21 18:28:25][352665182311526][602 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 18:28:25][352665182311526][602 ms][DEBUG] START check_scloud
[2025-08-21 18:28:25][352665182311526][602 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:28:26][352665182311526][867 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23701996 120240 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:28:26][352665182311526][867 ms][DEBUG] targetPkg: running
[2025-08-21 18:28:26][352665182311526][867 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 18:28:26][352665182311526][867 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:28:26][352665182311526][867 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjY1MTgyMzExNTI2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MDZEVzNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEzMCJ9'" -e "main()" -q"
[2025-08-21 18:28:26][352665182311526][867 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:28:26][352665182311526][867 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjY1MTgyMzExNTI2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MDZEVzNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEzMCJ9'" -e "main()" -q"
[2025-08-21 18:28:28][352665182311526][3476 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjY1MTgyMzExNTI2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MDZEVzNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjEzMCJ9"\r\n
[2025-08-21 18:28:30][352665182311526][5397 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04bd7fac-3a31-46b0-9e28-c16bab2eb4e6","id":"QR_04bd7fac-3a31-46b0-9e28-c16bab2eb4e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:28:30][352665182311526][5397 ms][DEBUG] proc_open done in 4530 ms; code=0; res.len=3152
[2025-08-21 18:28:30][352665182311526][5398 ms][DEBUG] END   runCmdUntilRes#1 in 4530 ms
[2025-08-21 18:28:30][352665182311526][5398 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:28:59][350256484154251][1 ms][INFO] === Request start ===
[2025-08-21 18:28:59][350256484154251][2 ms][DEBUG] START check_frida
[2025-08-21 18:28:59][350256484154251][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:28:59][350256484154251][314 ms][DEBUG] SU: done in 313 ms; outroot         16270     1 2295852  47508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:28:59][350256484154251][315 ms][DEBUG] check_frida: running
[2025-08-21 18:28:59][350256484154251][315 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 18:28:59][350256484154251][315 ms][DEBUG] START check_internet
[2025-08-21 18:28:59][350256484154251][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:29:00][350256484154251][658 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.604/239.604/239.604/0.000 ms\n
[2025-08-21 18:29:00][350256484154251][658 ms][DEBUG] check_internet: online
[2025-08-21 18:29:00][350256484154251][658 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 18:29:00][350256484154251][658 ms][DEBUG] START check_scloud
[2025-08-21 18:29:00][350256484154251][658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:29:00][350256484154251][955 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23702028 120716 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:29:00][350256484154251][955 ms][DEBUG] targetPkg: running
[2025-08-21 18:29:00][350256484154251][955 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 18:29:00][350256484154251][955 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:29:00][350256484154251][955 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjU2NDg0MTU0MjUxIiwibW9kZWwiOiJTTS1BMTU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MU5ZMEdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzU1In0='" -e "main()" -q"
[2025-08-21 18:29:00][350256484154251][955 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:29:00][350256484154251][955 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjU2NDg0MTU0MjUxIiwibW9kZWwiOiJTTS1BMTU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MU5ZMEdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzU1In0='" -e "main()" -q"
[2025-08-21 18:29:03][350256484154251][3517 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjU2NDg0MTU0MjUxIiwibW9kZWwiOiJTTS1BMTU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MU5ZMEdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzU1In0="\r\n
[2025-08-21 18:29:08][350256484154251][8531 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1889890b-5131-4456-8fa6-98ea8c276c05","id":"QR_1889890b-5131-4456-8fa6-98ea8c276c05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:29:08][350256484154251][8531 ms][DEBUG] proc_open done in 7576 ms; code=0; res.len=3152
[2025-08-21 18:29:08][350256484154251][8531 ms][DEBUG] END   runCmdUntilRes#1 in 7577 ms
[2025-08-21 18:29:08][350256484154251][8531 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:30:09][350814494965122][0 ms][INFO] === Request start ===
[2025-08-21 18:30:09][350814494965122][1 ms][DEBUG] START check_frida
[2025-08-21 18:30:09][350814494965122][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:30:10][350814494965122][299 ms][DEBUG] SU: done in 297 ms; outroot         16270     1 2295852  47528 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:30:10][350814494965122][299 ms][DEBUG] check_frida: running
[2025-08-21 18:30:10][350814494965122][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 18:30:10][350814494965122][299 ms][DEBUG] START check_internet
[2025-08-21 18:30:10][350814494965122][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:30:10][350814494965122][642 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.692/223.692/223.692/0.000 ms\n
[2025-08-21 18:30:10][350814494965122][643 ms][DEBUG] check_internet: online
[2025-08-21 18:30:10][350814494965122][643 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 18:30:10][350814494965122][643 ms][DEBUG] START check_scloud
[2025-08-21 18:30:10][350814494965122][643 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:30:10][350814494965122][908 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23702060 121296 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:30:10][350814494965122][908 ms][DEBUG] targetPkg: running
[2025-08-21 18:30:10][350814494965122][908 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 18:30:10][350814494965122][908 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:30:10][350814494965122][908 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk0OTY1MTIyIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMFZSWkxBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMxNiJ9'" -e "main()" -q"
[2025-08-21 18:30:10][350814494965122][908 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:30:10][350814494965122][908 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODE0NDk0OTY1MTIyIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMFZSWkxBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMxNiJ9'" -e "main()" -q"
[2025-08-21 18:30:13][350814494965122][3485 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODE0NDk0OTY1MTIyIiwibW9kZWwiOiJTTS1NMTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMFZSWkxBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMxNiJ9"\r\n
[2025-08-21 18:30:15][350814494965122][5844 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7351ba5e-106e-4c5b-89e2-508105ce4c8b","id":"QR_7351ba5e-106e-4c5b-89e2-508105ce4c8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:30:15][350814494965122][5844 ms][DEBUG] proc_open done in 4936 ms; code=0; res.len=3152
[2025-08-21 18:30:15][350814494965122][5844 ms][DEBUG] END   runCmdUntilRes#1 in 4936 ms
[2025-08-21 18:30:15][350814494965122][5844 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:30:21][352549935500645][0 ms][INFO] === Request start ===
[2025-08-21 18:30:21][352549935500645][1 ms][DEBUG] START check_frida
[2025-08-21 18:30:21][352549935500645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:30:22][352549935500645][256 ms][DEBUG] SU: done in 255 ms; outroot         16270     1 2312272  47496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:30:22][352549935500645][256 ms][DEBUG] check_frida: running
[2025-08-21 18:30:22][352549935500645][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 18:30:22][352549935500645][256 ms][DEBUG] START check_internet
[2025-08-21 18:30:22][352549935500645][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:30:22][352549935500645][631 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.351/267.351/267.351/0.000 ms\n
[2025-08-21 18:30:22][352549935500645][631 ms][DEBUG] check_internet: online
[2025-08-21 18:30:22][352549935500645][631 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 18:30:22][352549935500645][631 ms][DEBUG] START check_scloud
[2025-08-21 18:30:22][352549935500645][631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:30:22][352549935500645][881 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23702092 117592 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:30:22][352549935500645][881 ms][DEBUG] targetPkg: running
[2025-08-21 18:30:22][352549935500645][881 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:30:22][352549935500645][881 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:30:22][352549935500645][881 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM1NTAwNjQ1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDY2QTRNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg0MCJ9'" -e "main()" -q"
[2025-08-21 18:30:22][352549935500645][881 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:30:22][352549935500645][882 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTQ5OTM1NTAwNjQ1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDY2QTRNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg0MCJ9'" -e "main()" -q"
[2025-08-21 18:30:25][352549935500645][3505 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTQ5OTM1NTAwNjQ1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MDY2QTRNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjg0MCJ9"\r\n
[2025-08-21 18:30:27][352549935500645][5442 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22ab3273-347e-4684-8173-eb57a2b75eaa","id":"QR_22ab3273-347e-4684-8173-eb57a2b75eaa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:30:27][352549935500645][5443 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-21 18:30:27][352549935500645][5443 ms][DEBUG] END   runCmdUntilRes#1 in 4561 ms
[2025-08-21 18:30:27][352549935500645][5443 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:31:08][350274352875378][1 ms][INFO] === Request start ===
[2025-08-21 18:31:08][350274352875378][2 ms][DEBUG] START check_frida
[2025-08-21 18:31:08][350274352875378][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:31:08][350274352875378][258 ms][DEBUG] SU: done in 256 ms; outroot         16270     1 2295852  47488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:31:08][350274352875378][258 ms][DEBUG] check_frida: running
[2025-08-21 18:31:08][350274352875378][258 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 18:31:08][350274352875378][258 ms][DEBUG] START check_scloud
[2025-08-21 18:31:08][350274352875378][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:31:09][350274352875378][492 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23702124 118160 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:31:09][350274352875378][492 ms][DEBUG] targetPkg: running
[2025-08-21 18:31:09][350274352875378][493 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 18:31:09][350274352875378][493 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:31:09][350274352875378][493 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzUyODc1Mzc4IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI5MEpLRTNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNTM3In0='" -e "main()" -q"
[2025-08-21 18:31:09][350274352875378][493 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:31:09][350274352875378][493 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzUyODc1Mzc4IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI5MEpLRTNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNTM3In0='" -e "main()" -q"
[2025-08-21 18:31:11][350274352875378][3117 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjc0MzUyODc1Mzc4IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI5MEpLRTNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNTM3In0="\r\n
[2025-08-21 18:31:15][350274352875378][6428 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3433c9d9-ff65-40af-8d8c-b93f7b549d86","id":"QR_3433c9d9-ff65-40af-8d8c-b93f7b549d86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:31:15][350274352875378][6429 ms][DEBUG] proc_open done in 5936 ms; code=0; res.len=3152
[2025-08-21 18:31:15][350274352875378][6429 ms][DEBUG] END   runCmdUntilRes#1 in 5936 ms
[2025-08-21 18:31:15][350274352875378][6429 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:32:08][350524541598087][0 ms][INFO] === Request start ===
[2025-08-21 18:32:08][350524541598087][1 ms][DEBUG] START check_frida
[2025-08-21 18:32:08][350524541598087][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:32:09][350524541598087][267 ms][DEBUG] SU: done in 266 ms; outroot         16270     1 2295852  47452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:32:09][350524541598087][267 ms][DEBUG] check_frida: running
[2025-08-21 18:32:09][350524541598087][267 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 18:32:09][350524541598087][267 ms][DEBUG] START check_internet
[2025-08-21 18:32:09][350524541598087][267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:32:09][350524541598087][798 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.530/202.530/202.530/0.000 ms\n
[2025-08-21 18:32:09][350524541598087][798 ms][DEBUG] check_internet: online
[2025-08-21 18:32:09][350524541598087][798 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 18:32:09][350524541598087][798 ms][DEBUG] START check_scloud
[2025-08-21 18:32:09][350524541598087][798 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:32:09][350524541598087][1079 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23702156 118868 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:32:09][350524541598087][1079 ms][DEBUG] targetPkg: running
[2025-08-21 18:32:09][350524541598087][1079 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 18:32:09][350524541598087][1079 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:32:09][350524541598087][1080 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTI0NTQxNTk4MDg3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MFMzQzVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMxNyJ9'" -e "main()" -q"
[2025-08-21 18:32:09][350524541598087][1080 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:32:09][350524541598087][1080 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTI0NTQxNTk4MDg3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MFMzQzVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMxNyJ9'" -e "main()" -q"
[2025-08-21 18:32:12][350524541598087][3703 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTI0NTQxNTk4MDg3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MFMzQzVXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTMxNyJ9"\r\n
[2025-08-21 18:32:14][350524541598087][6000 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c5e1dd2-eaf2-4ef8-8bea-195f78739f3a","id":"QR_0c5e1dd2-eaf2-4ef8-8bea-195f78739f3a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:32:14][350524541598087][6000 ms][DEBUG] proc_open done in 4920 ms; code=0; res.len=3152
[2025-08-21 18:32:14][350524541598087][6000 ms][DEBUG] END   runCmdUntilRes#1 in 4920 ms
[2025-08-21 18:32:14][350524541598087][6000 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:32:20][356663769509022][0 ms][INFO] === Request start ===
[2025-08-21 18:32:20][356663769509022][1 ms][DEBUG] START check_frida
[2025-08-21 18:32:20][356663769509022][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:32:20][356663769509022][249 ms][DEBUG] SU: done in 248 ms; outroot         16270     1 2312272  47416 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:32:20][356663769509022][250 ms][DEBUG] check_frida: running
[2025-08-21 18:32:20][356663769509022][250 ms][DEBUG] END   check_frida in 249 ms
[2025-08-21 18:32:20][356663769509022][250 ms][DEBUG] START check_internet
[2025-08-21 18:32:20][356663769509022][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:32:20][356663769509022][530 ms][DEBUG] SU: done in 279 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=169 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 169.569/169.569/169.569/0.000 ms\n
[2025-08-21 18:32:20][356663769509022][530 ms][DEBUG] check_internet: online
[2025-08-21 18:32:20][356663769509022][530 ms][DEBUG] END   check_internet in 280 ms
[2025-08-21 18:32:20][356663769509022][530 ms][DEBUG] START check_scloud
[2025-08-21 18:32:20][356663769509022][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:32:20][356663769509022][826 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23702188 119436 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:32:20][356663769509022][826 ms][DEBUG] targetPkg: running
[2025-08-21 18:32:20][356663769509022][826 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 18:32:20][356663769509022][827 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:32:20][356663769509022][827 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjYzNzY5NTA5MDIyIiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjUzV1RaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE1OCJ9'" -e "main()" -q"
[2025-08-21 18:32:20][356663769509022][827 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:32:20][356663769509022][827 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjYzNzY5NTA5MDIyIiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjUzV1RaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE1OCJ9'" -e "main()" -q"
[2025-08-21 18:32:23][356663769509022][3450 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NjYzNzY5NTA5MDIyIiwibW9kZWwiOiJTTS1TOTE4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MjUzV1RaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODE1OCJ9"\r\n
[2025-08-21 18:32:25][356663769509022][5434 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70ec9f98-1c9f-4155-a5cc-d8d8d07424ac","id":"QR_70ec9f98-1c9f-4155-a5cc-d8d8d07424ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:32:25][356663769509022][5435 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 18:32:25][356663769509022][5435 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-21 18:32:25][356663769509022][5435 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:32:36][351681596680878][0 ms][INFO] === Request start ===
[2025-08-21 18:32:36][351681596680878][1 ms][DEBUG] START check_frida
[2025-08-21 18:32:36][351681596680878][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:32:36][351681596680878][313 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2312272  47484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:32:36][351681596680878][313 ms][DEBUG] check_frida: running
[2025-08-21 18:32:36][351681596680878][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 18:32:36][351681596680878][314 ms][DEBUG] START check_internet
[2025-08-21 18:32:36][351681596680878][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:32:37][351681596680878][594 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=169 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 169.143/169.143/169.143/0.000 ms\n
[2025-08-21 18:32:37][351681596680878][595 ms][DEBUG] check_internet: online
[2025-08-21 18:32:37][351681596680878][595 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 18:32:37][351681596680878][595 ms][DEBUG] START check_scloud
[2025-08-21 18:32:37][351681596680878][595 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:32:37][351681596680878][907 ms][DEBUG] SU: done in 313 ms; outu0_a118      16385  4994 23702220 119908 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:32:37][351681596680878][907 ms][DEBUG] targetPkg: running
[2025-08-21 18:32:37][351681596680878][907 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 18:32:37][351681596680878][907 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:32:37][351681596680878][907 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjgxNTk2NjgwODc4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMURDTlpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgwNSJ9'" -e "main()" -q"
[2025-08-21 18:32:37][351681596680878][908 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:32:37][351681596680878][908 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjgxNTk2NjgwODc4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMURDTlpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgwNSJ9'" -e "main()" -q"
[2025-08-21 18:32:40][351681596680878][3515 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjgxNTk2NjgwODc4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMURDTlpYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDgwNSJ9"\r\n
[2025-08-21 18:32:42][351681596680878][5484 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9683f1d4-0b27-4604-8ac2-effe55d329a1","id":"QR_9683f1d4-0b27-4604-8ac2-effe55d329a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:32:42][351681596680878][5484 ms][DEBUG] proc_open done in 4577 ms; code=0; res.len=3152
[2025-08-21 18:32:42][351681596680878][5484 ms][DEBUG] END   runCmdUntilRes#1 in 4577 ms
[2025-08-21 18:32:42][351681596680878][5484 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:33:07][350287314733907][0 ms][INFO] === Request start ===
[2025-08-21 18:33:07][350287314733907][1 ms][DEBUG] START check_frida
[2025-08-21 18:33:07][350287314733907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:33:07][350287314733907][280 ms][DEBUG] SU: done in 279 ms; outroot         16270     1 2295852  47444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:33:07][350287314733907][280 ms][DEBUG] check_frida: running
[2025-08-21 18:33:07][350287314733907][280 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 18:33:07][350287314733907][280 ms][DEBUG] START check_scloud
[2025-08-21 18:33:07][350287314733907][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:33:07][350287314733907][514 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23702252 120484 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:33:07][350287314733907][514 ms][DEBUG] targetPkg: running
[2025-08-21 18:33:07][350287314733907][514 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 18:33:07][350287314733907][514 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:33:07][350287314733907][515 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE0NzMzOTA3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME1LUFRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzMCJ9'" -e "main()" -q"
[2025-08-21 18:33:07][350287314733907][515 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:33:07][350287314733907][515 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE0NzMzOTA3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME1LUFRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzMCJ9'" -e "main()" -q"
[2025-08-21 18:33:10][350287314733907][3123 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjg3MzE0NzMzOTA3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME1LUFRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzMCJ9"\r\n
[2025-08-21 18:33:12][350287314733907][4904 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50b735cb-8146-4b2c-a0ec-8e02ca60f1d3","id":"QR_50b735cb-8146-4b2c-a0ec-8e02ca60f1d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:33:12][350287314733907][4904 ms][DEBUG] proc_open done in 4389 ms; code=0; res.len=3152
[2025-08-21 18:33:12][350287314733907][4904 ms][DEBUG] END   runCmdUntilRes#1 in 4390 ms
[2025-08-21 18:33:12][350287314733907][4905 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:37:12][358438735963704][1 ms][INFO] === Request start ===
[2025-08-21 18:37:12][358438735963704][2 ms][DEBUG] START check_frida
[2025-08-21 18:37:12][358438735963704][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:37:13][358438735963704][282 ms][DEBUG] SU: done in 281 ms; outroot         16270     1 2295852  47472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:37:13][358438735963704][282 ms][DEBUG] check_frida: running
[2025-08-21 18:37:13][358438735963704][282 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 18:37:13][358438735963704][282 ms][DEBUG] START check_scloud
[2025-08-21 18:37:13][358438735963704][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:37:13][358438735963704][579 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23702284 121116 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:37:13][358438735963704][579 ms][DEBUG] targetPkg: running
[2025-08-21 18:37:13][358438735963704][579 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 18:37:13][358438735963704][579 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:37:13][358438735963704][580 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NDM4NzM1OTYzNzA0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MEdYN0RCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk1OCJ9'" -e "main()" -q"
[2025-08-21 18:37:13][358438735963704][580 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:37:13][358438735963704][580 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NDM4NzM1OTYzNzA0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MEdYN0RCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk1OCJ9'" -e "main()" -q"
[2025-08-21 18:37:15][358438735963704][3172 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NDM4NzM1OTYzNzA0IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg5MEdYN0RCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk1OCJ9"\r\n
[2025-08-21 18:37:18][358438735963704][5328 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_535fc71e-02e9-42be-9327-1b930098f7c2","id":"QR_535fc71e-02e9-42be-9327-1b930098f7c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:37:18][358438735963704][5328 ms][DEBUG] proc_open done in 4748 ms; code=0; res.len=3152
[2025-08-21 18:37:18][358438735963704][5328 ms][DEBUG] END   runCmdUntilRes#1 in 4749 ms
[2025-08-21 18:37:18][358438735963704][5328 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:37:25][350482800839025][0 ms][INFO] === Request start ===
[2025-08-21 18:37:25][350482800839025][1 ms][DEBUG] START check_frida
[2025-08-21 18:37:25][350482800839025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:37:25][350482800839025][263 ms][DEBUG] SU: done in 261 ms; outroot         16270     1 2312272  47480 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:37:25][350482800839025][263 ms][DEBUG] check_frida: running
[2025-08-21 18:37:25][350482800839025][263 ms][DEBUG] END   check_frida in 262 ms
[2025-08-21 18:37:25][350482800839025][263 ms][DEBUG] START check_scloud
[2025-08-21 18:37:25][350482800839025][263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:37:25][350482800839025][544 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23702316 121676 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:37:25][350482800839025][544 ms][DEBUG] targetPkg: running
[2025-08-21 18:37:25][350482800839025][544 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 18:37:25][350482800839025][544 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:37:25][350482800839025][544 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDgyODAwODM5MDI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgyMDVBRTNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA1NCJ9'" -e "main()" -q"
[2025-08-21 18:37:25][350482800839025][544 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:37:25][350482800839025][544 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDgyODAwODM5MDI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgyMDVBRTNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA1NCJ9'" -e "main()" -q"
[2025-08-21 18:37:28][350482800839025][3137 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDgyODAwODM5MDI1IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFgyMDVBRTNXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA1NCJ9"\r\n
[2025-08-21 18:37:30][350482800839025][5058 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1fb0ea5-4cac-425c-b2c3-a5b1cbc9ed5e","id":"QR_a1fb0ea5-4cac-425c-b2c3-a5b1cbc9ed5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:37:30][350482800839025][5059 ms][DEBUG] proc_open done in 4515 ms; code=0; res.len=3152
[2025-08-21 18:37:30][350482800839025][5059 ms][DEBUG] END   runCmdUntilRes#1 in 4515 ms
[2025-08-21 18:37:30][350482800839025][5059 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:37:58][352177392416806][0 ms][INFO] === Request start ===
[2025-08-21 18:37:58][352177392416806][0 ms][DEBUG] START check_frida
[2025-08-21 18:37:58][352177392416806][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:37:58][352177392416806][266 ms][DEBUG] SU: done in 266 ms; outroot         16270     1 2295852  47448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:37:58][352177392416806][266 ms][DEBUG] check_frida: running
[2025-08-21 18:37:58][352177392416806][266 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 18:37:58][352177392416806][266 ms][DEBUG] START check_scloud
[2025-08-21 18:37:58][352177392416806][266 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:37:58][352177392416806][516 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23702348 122176 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:37:58][352177392416806][516 ms][DEBUG] targetPkg: running
[2025-08-21 18:37:58][352177392416806][516 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:37:58][352177392416806][516 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:37:58][352177392416806][516 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTc3MzkyNDE2ODA2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQzMEFSTktFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjAyIn0='" -e "main()" -q"
[2025-08-21 18:37:58][352177392416806][516 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:37:58][352177392416806][516 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTc3MzkyNDE2ODA2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQzMEFSTktFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjAyIn0='" -e "main()" -q"
[2025-08-21 18:38:01][352177392416806][3125 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMTc3MzkyNDE2ODA2IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQzMEFSTktFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjAyIn0="\r\n
[2025-08-21 18:38:04][352177392416806][6109 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c07159a-8062-46b7-bbaa-8fd2eae7ca17","id":"QR_3c07159a-8062-46b7-bbaa-8fd2eae7ca17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:38:04][352177392416806][6109 ms][DEBUG] proc_open done in 5592 ms; code=0; res.len=3152
[2025-08-21 18:38:04][352177392416806][6109 ms][DEBUG] END   runCmdUntilRes#1 in 5592 ms
[2025-08-21 18:38:04][352177392416806][6109 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:39:07][350025490298430][0 ms][INFO] === Request start ===
[2025-08-21 18:39:07][350025490298430][1 ms][DEBUG] START check_frida
[2025-08-21 18:39:07][350025490298430][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:39:07][350025490298430][285 ms][DEBUG] SU: done in 284 ms; outroot         16270     1 2295852  47504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:39:07][350025490298430][285 ms][DEBUG] check_frida: running
[2025-08-21 18:39:07][350025490298430][285 ms][DEBUG] END   check_frida in 284 ms
[2025-08-21 18:39:07][350025490298430][285 ms][DEBUG] START check_scloud
[2025-08-21 18:39:07][350025490298430][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:39:07][350025490298430][550 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23702380 118044 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:39:07][350025490298430][551 ms][DEBUG] targetPkg: running
[2025-08-21 18:39:07][350025490298430][551 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 18:39:07][350025490298430][551 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:39:07][350025490298430][551 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI1NDkwMjk4NDMwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1Mlc4QkVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTcwMSJ9'" -e "main()" -q"
[2025-08-21 18:39:07][350025490298430][551 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:39:07][350025490298430][551 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI1NDkwMjk4NDMwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1Mlc4QkVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTcwMSJ9'" -e "main()" -q"
[2025-08-21 18:39:10][350025490298430][3143 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDI1NDkwMjk4NDMwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1Mlc4QkVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTcwMSJ9"\r\n
[2025-08-21 18:39:12][350025490298430][5612 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_518f28e1-783f-4448-b000-d24962fe35a7","id":"QR_518f28e1-783f-4448-b000-d24962fe35a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:39:12][350025490298430][5612 ms][DEBUG] proc_open done in 5061 ms; code=0; res.len=3152
[2025-08-21 18:39:12][350025490298430][5612 ms][DEBUG] END   runCmdUntilRes#1 in 5062 ms
[2025-08-21 18:39:12][350025490298430][5612 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:40:37][350547665393498][1 ms][INFO] === Request start ===
[2025-08-21 18:40:37][350547665393498][2 ms][DEBUG] START check_frida
[2025-08-21 18:40:37][350547665393498][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:40:38][350547665393498][282 ms][DEBUG] SU: done in 280 ms; outroot         16270     1 2295852  47560 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:40:38][350547665393498][282 ms][DEBUG] check_frida: running
[2025-08-21 18:40:38][350547665393498][282 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 18:40:38][350547665393498][282 ms][DEBUG] START check_internet
[2025-08-21 18:40:38][350547665393498][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:40:38][350547665393498][782 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.080/200.080/200.080/0.000 ms\n
[2025-08-21 18:40:38][350547665393498][782 ms][DEBUG] check_internet: online
[2025-08-21 18:40:38][350547665393498][782 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 18:40:38][350547665393498][782 ms][DEBUG] START check_scloud
[2025-08-21 18:40:38][350547665393498][782 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:40:38][350547665393498][1032 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23702412 118588 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:40:38][350547665393498][1032 ms][DEBUG] targetPkg: running
[2025-08-21 18:40:38][350547665393498][1032 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:40:38][350547665393498][1032 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:40:38][350547665393498][1032 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ3NjY1MzkzNDk4IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDA0V0VUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzM3In0='" -e "main()" -q"
[2025-08-21 18:40:38][350547665393498][1032 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:40:38][350547665393498][1032 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ3NjY1MzkzNDk4IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDA0V0VUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzM3In0='" -e "main()" -q"
[2025-08-21 18:40:41][350547665393498][3625 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTQ3NjY1MzkzNDk4IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDA0V0VUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzM3In0="\r\n
[2025-08-21 18:40:44][350547665393498][6811 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2e0fe03-efbe-4072-af80-389b753d8e57","id":"QR_b2e0fe03-efbe-4072-af80-389b753d8e57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:40:44][350547665393498][6812 ms][DEBUG] proc_open done in 5779 ms; code=0; res.len=3152
[2025-08-21 18:40:44][350547665393498][6812 ms][DEBUG] END   runCmdUntilRes#1 in 5779 ms
[2025-08-21 18:40:44][350547665393498][6812 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:41:09][352349691872506][0 ms][INFO] === Request start ===
[2025-08-21 18:41:09][352349691872506][1 ms][DEBUG] START check_frida
[2025-08-21 18:41:09][352349691872506][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:41:09][352349691872506][285 ms][DEBUG] SU: done in 284 ms; outroot         16270     1 2295852  47508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:41:09][352349691872506][286 ms][DEBUG] check_frida: running
[2025-08-21 18:41:09][352349691872506][286 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 18:41:09][352349691872506][286 ms][DEBUG] START check_scloud
[2025-08-21 18:41:09][352349691872506][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:41:09][352349691872506][535 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23702444 119148 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:41:09][352349691872506][536 ms][DEBUG] targetPkg: running
[2025-08-21 18:41:09][352349691872506][536 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:41:09][352349691872506][536 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:41:09][352349691872506][536 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzQ5NjkxODcyNTA2IiwibW9kZWwiOiJTTS1HNzgxVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05CMEEzNzVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTQ5In0='" -e "main()" -q"
[2025-08-21 18:41:09][352349691872506][536 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:41:09][352349691872506][536 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzQ5NjkxODcyNTA2IiwibW9kZWwiOiJTTS1HNzgxVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05CMEEzNzVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTQ5In0='" -e "main()" -q"
[2025-08-21 18:41:12][352349691872506][3128 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzQ5NjkxODcyNTA2IiwibW9kZWwiOiJTTS1HNzgxVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05CMEEzNzVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTQ5In0="\r\n
[2025-08-21 18:41:15][352349691872506][6190 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_958cd15a-5044-4ef3-8981-70c36a810ef2","id":"QR_958cd15a-5044-4ef3-8981-70c36a810ef2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:41:15][352349691872506][6190 ms][DEBUG] proc_open done in 5654 ms; code=0; res.len=3152
[2025-08-21 18:41:15][352349691872506][6190 ms][DEBUG] END   runCmdUntilRes#1 in 5654 ms
[2025-08-21 18:41:15][352349691872506][6190 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:41:24][352698478418168][0 ms][INFO] === Request start ===
[2025-08-21 18:41:24][352698478418168][1 ms][DEBUG] START check_frida
[2025-08-21 18:41:24][352698478418168][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:41:24][352698478418168][264 ms][DEBUG] SU: done in 263 ms; outroot         16270     1 2312272  47484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:41:24][352698478418168][264 ms][DEBUG] check_frida: running
[2025-08-21 18:41:24][352698478418168][264 ms][DEBUG] END   check_frida in 263 ms
[2025-08-21 18:41:24][352698478418168][264 ms][DEBUG] START check_scloud
[2025-08-21 18:41:24][352698478418168][264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:41:25][352698478418168][498 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23702476 119740 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:41:25][352698478418168][499 ms][DEBUG] targetPkg: running
[2025-08-21 18:41:25][352698478418168][499 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 18:41:25][352698478418168][499 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:41:25][352698478418168][499 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjk4NDc4NDE4MTY4IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMEFYTTBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI1MyJ9'" -e "main()" -q"
[2025-08-21 18:41:25][352698478418168][499 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:41:25][352698478418168][499 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjk4NDc4NDE4MTY4IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMEFYTTBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI1MyJ9'" -e "main()" -q"
[2025-08-21 18:41:27][352698478418168][3107 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjk4NDc4NDE4MTY4IiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1dDMEFYTTBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI1MyJ9"\r\n
[2025-08-21 18:41:30][352698478418168][5450 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31f22d46-d503-41d8-8809-b769057ff138","id":"QR_31f22d46-d503-41d8-8809-b769057ff138","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:41:30][352698478418168][5450 ms][DEBUG] proc_open done in 4951 ms; code=0; res.len=3152
[2025-08-21 18:41:30][352698478418168][5450 ms][DEBUG] END   runCmdUntilRes#1 in 4951 ms
[2025-08-21 18:41:30][352698478418168][5450 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:42:23][350915063204726][1 ms][INFO] === Request start ===
[2025-08-21 18:42:23][350915063204726][2 ms][DEBUG] START check_frida
[2025-08-21 18:42:23][350915063204726][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:42:24][350915063204726][292 ms][DEBUG] SU: done in 290 ms; outroot         16270     1 2295852  47520 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:42:24][350915063204726][292 ms][DEBUG] check_frida: running
[2025-08-21 18:42:24][350915063204726][292 ms][DEBUG] END   check_frida in 290 ms
[2025-08-21 18:42:24][350915063204726][292 ms][DEBUG] START check_internet
[2025-08-21 18:42:24][350915063204726][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:42:24][350915063204726][948 ms][DEBUG] SU: done in 656 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=358 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 358.365/358.365/358.365/0.000 ms\n
[2025-08-21 18:42:24][350915063204726][948 ms][DEBUG] check_internet: online
[2025-08-21 18:42:24][350915063204726][948 ms][DEBUG] END   check_internet in 656 ms
[2025-08-21 18:42:24][350915063204726][948 ms][DEBUG] START check_scloud
[2025-08-21 18:42:24][350915063204726][948 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:42:25][350915063204726][1245 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23702508 120564 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:42:25][350915063204726][1245 ms][DEBUG] targetPkg: running
[2025-08-21 18:42:25][350915063204726][1245 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 18:42:25][350915063204726][1245 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:42:25][350915063204726][1245 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTE1MDYzMjA0NzI2IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFcyMDFDMkZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzA1In0='" -e "main()" -q"
[2025-08-21 18:42:25][350915063204726][1245 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:42:25][350915063204726][1245 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTE1MDYzMjA0NzI2IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFcyMDFDMkZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzA1In0='" -e "main()" -q"
[2025-08-21 18:42:27][350915063204726][3885 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTE1MDYzMjA0NzI2IiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFcyMDFDMkZZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzA1In0="\r\n
[2025-08-21 18:42:30][350915063204726][7025 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04569296-04d0-4e32-a3d7-91592675942e","id":"QR_04569296-04d0-4e32-a3d7-91592675942e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:42:30][350915063204726][7025 ms][DEBUG] proc_open done in 5780 ms; code=0; res.len=3152
[2025-08-21 18:42:30][350915063204726][7025 ms][DEBUG] END   runCmdUntilRes#1 in 5781 ms
[2025-08-21 18:42:30][350915063204726][7025 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:43:33][350637542201731][1 ms][INFO] === Request start ===
[2025-08-21 18:43:33][350637542201731][2 ms][DEBUG] START check_frida
[2025-08-21 18:43:33][350637542201731][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:43:33][350637542201731][288 ms][DEBUG] SU: done in 286 ms; outroot         16270     1 2311260  47416 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:43:33][350637542201731][288 ms][DEBUG] check_frida: running
[2025-08-21 18:43:33][350637542201731][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 18:43:33][350637542201731][288 ms][DEBUG] START check_scloud
[2025-08-21 18:43:33][350637542201731][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:43:33][350637542201731][601 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23702540 120424 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:43:33][350637542201731][601 ms][DEBUG] targetPkg: running
[2025-08-21 18:43:33][350637542201731][601 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 18:43:33][350637542201731][601 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:43:33][350637542201731][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQyMjAxNzMxIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDVGNFZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDYxNCJ9'" -e "main()" -q"
[2025-08-21 18:43:33][350637542201731][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:43:33][350637542201731][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjM3NTQyMjAxNzMxIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDVGNFZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDYxNCJ9'" -e "main()" -q"
[2025-08-21 18:43:36][350637542201731][3240 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjM3NTQyMjAxNzMxIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDVGNFZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDYxNCJ9"\r\n
[2025-08-21 18:43:38][350637542201731][5427 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b73e8239-26f9-4ee5-a934-cc3ee83c71ea","id":"QR_b73e8239-26f9-4ee5-a934-cc3ee83c71ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:43:38][350637542201731][5428 ms][DEBUG] proc_open done in 4826 ms; code=0; res.len=3152
[2025-08-21 18:43:38][350637542201731][5428 ms][DEBUG] END   runCmdUntilRes#1 in 4826 ms
[2025-08-21 18:43:38][350637542201731][5428 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:50:11][355171970139564][1 ms][INFO] === Request start ===
[2025-08-21 18:50:11][355171970139564][2 ms][DEBUG] START check_frida
[2025-08-21 18:50:11][355171970139564][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:50:11][355171970139564][295 ms][DEBUG] SU: done in 294 ms; outroot         16270     1 2294840  47476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:50:11][355171970139564][295 ms][DEBUG] check_frida: running
[2025-08-21 18:50:11][355171970139564][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 18:50:11][355171970139564][295 ms][DEBUG] START check_internet
[2025-08-21 18:50:11][355171970139564][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:50:12][355171970139564][765 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.384/201.384/201.384/0.000 ms\n
[2025-08-21 18:50:12][355171970139564][765 ms][DEBUG] check_internet: online
[2025-08-21 18:50:12][355171970139564][765 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 18:50:12][355171970139564][765 ms][DEBUG] START check_scloud
[2025-08-21 18:50:12][355171970139564][765 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:50:12][355171970139564][1029 ms][DEBUG] SU: done in 264 ms; outu0_a118      16385  4994 23685088 96604 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:50:12][355171970139564][1029 ms][DEBUG] targetPkg: running
[2025-08-21 18:50:12][355171970139564][1029 ms][DEBUG] END   check_scloud in 264 ms
[2025-08-21 18:50:12][355171970139564][1029 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:50:12][355171970139564][1029 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTcxOTcwMTM5NTY0IiwibW9kZWwiOiJTTS1BNzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJCMEpQTFBSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBQ1IiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDczOSJ9'" -e "main()" -q"
[2025-08-21 18:50:12][355171970139564][1029 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:50:12][355171970139564][1029 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTcxOTcwMTM5NTY0IiwibW9kZWwiOiJTTS1BNzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJCMEpQTFBSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBQ1IiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDczOSJ9'" -e "main()" -q"
[2025-08-21 18:50:15][355171970139564][3622 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MTcxOTcwMTM5NTY0IiwibW9kZWwiOiJTTS1BNzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFJCMEpQTFBSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBQ1IiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDczOSJ9"\r\n
[2025-08-21 18:50:17][355171970139564][6012 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5128c35a-7910-4d93-a03a-ae1a10bda645","id":"QR_5128c35a-7910-4d93-a03a-ae1a10bda645","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:50:17][355171970139564][6013 ms][DEBUG] proc_open done in 4984 ms; code=0; res.len=3152
[2025-08-21 18:50:17][355171970139564][6013 ms][DEBUG] END   runCmdUntilRes#1 in 4984 ms
[2025-08-21 18:50:17][355171970139564][6013 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:51:57][351456831513386][1 ms][INFO] === Request start ===
[2025-08-21 18:51:57][351456831513386][2 ms][DEBUG] START check_frida
[2025-08-21 18:51:57][351456831513386][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:51:57][351456831513386][242 ms][DEBUG] SU: done in 240 ms; outroot         16270     1 2295852  47516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:51:57][351456831513386][242 ms][DEBUG] check_frida: running
[2025-08-21 18:51:57][351456831513386][242 ms][DEBUG] END   check_frida in 240 ms
[2025-08-21 18:51:57][351456831513386][242 ms][DEBUG] START check_scloud
[2025-08-21 18:51:57][351456831513386][242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:51:57][351456831513386][476 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23702604 93180 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:51:57][351456831513386][476 ms][DEBUG] targetPkg: running
[2025-08-21 18:51:57][351456831513386][476 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 18:51:57][351456831513386][476 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:51:57][351456831513386][477 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDU2ODMxNTEzMzg2IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFMyMzVEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzcyIn0='" -e "main()" -q"
[2025-08-21 18:51:57][351456831513386][477 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:51:57][351456831513386][477 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDU2ODMxNTEzMzg2IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFMyMzVEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzcyIn0='" -e "main()" -q"
[2025-08-21 18:52:00][351456831513386][3085 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDU2ODMxNTEzMzg2IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMFMyMzVEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzcyIn0="\r\n
[2025-08-21 18:52:04][351456831513386][6834 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c439fbc-98af-492b-939d-69f12c74f674","id":"QR_7c439fbc-98af-492b-939d-69f12c74f674","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:52:04][351456831513386][6835 ms][DEBUG] proc_open done in 6358 ms; code=0; res.len=3152
[2025-08-21 18:52:04][351456831513386][6835 ms][DEBUG] END   runCmdUntilRes#1 in 6358 ms
[2025-08-21 18:52:04][351456831513386][6835 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:52:22][356019741735484][0 ms][INFO] === Request start ===
[2025-08-21 18:52:22][356019741735484][1 ms][DEBUG] START check_frida
[2025-08-21 18:52:22][356019741735484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:52:22][356019741735484][297 ms][DEBUG] SU: done in 296 ms; outroot         16270     1 2295852  47556 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:52:22][356019741735484][297 ms][DEBUG] check_frida: running
[2025-08-21 18:52:22][356019741735484][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 18:52:22][356019741735484][297 ms][DEBUG] START check_internet
[2025-08-21 18:52:22][356019741735484][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:52:22][356019741735484][766 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.926/201.926/201.926/0.000 ms\n
[2025-08-21 18:52:22][356019741735484][766 ms][DEBUG] check_internet: online
[2025-08-21 18:52:22][356019741735484][766 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 18:52:22][356019741735484][766 ms][DEBUG] START check_scloud
[2025-08-21 18:52:22][356019741735484][766 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:52:23][356019741735484][1017 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23702636 93732 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:52:23][356019741735484][1017 ms][DEBUG] targetPkg: running
[2025-08-21 18:52:23][356019741735484][1017 ms][DEBUG] END   check_scloud in 251 ms
[2025-08-21 18:52:23][356019741735484][1017 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:52:23][356019741735484][1017 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MDE5NzQxNzM1NDg0IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI2M0M4Q1BEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNV0QiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE1MyJ9'" -e "main()" -q"
[2025-08-21 18:52:23][356019741735484][1017 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:52:23][356019741735484][1017 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MDE5NzQxNzM1NDg0IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI2M0M4Q1BEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNV0QiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE1MyJ9'" -e "main()" -q"
[2025-08-21 18:52:25][356019741735484][3608 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MDE5NzQxNzM1NDg0IiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFI2M0M4Q1BEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNV0QiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTE1MyJ9"\r\n
[2025-08-21 18:52:28][356019741735484][6030 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c0f3b4b-8488-4bbf-9b1f-ef15c9da4b10","id":"QR_6c0f3b4b-8488-4bbf-9b1f-ef15c9da4b10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:52:28][356019741735484][6030 ms][DEBUG] proc_open done in 5013 ms; code=0; res.len=3152
[2025-08-21 18:52:28][356019741735484][6030 ms][DEBUG] END   runCmdUntilRes#1 in 5013 ms
[2025-08-21 18:52:28][356019741735484][6030 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:52:35][353289768582480][0 ms][INFO] === Request start ===
[2025-08-21 18:52:35][353289768582480][1 ms][DEBUG] START check_frida
[2025-08-21 18:52:35][353289768582480][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:52:35][353289768582480][301 ms][DEBUG] SU: done in 299 ms; outroot         16270     1 2312272  47508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:52:35][353289768582480][301 ms][DEBUG] check_frida: running
[2025-08-21 18:52:35][353289768582480][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 18:52:35][353289768582480][301 ms][DEBUG] START check_internet
[2025-08-21 18:52:35][353289768582480][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:52:36][353289768582480][582 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.159/178.159/178.159/0.000 ms\n
[2025-08-21 18:52:36][353289768582480][582 ms][DEBUG] check_internet: online
[2025-08-21 18:52:36][353289768582480][582 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 18:52:36][353289768582480][582 ms][DEBUG] START check_scloud
[2025-08-21 18:52:36][353289768582480][582 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:52:36][353289768582480][879 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23702668 94276 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:52:36][353289768582480][879 ms][DEBUG] targetPkg: running
[2025-08-21 18:52:36][353289768582480][879 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 18:52:36][353289768582480][879 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:52:36][353289768582480][879 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjg5NzY4NTgyNDgwIiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzYwQUc1QkEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlNLWiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzU0In0='" -e "main()" -q"
[2025-08-21 18:52:36][353289768582480][879 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:52:36][353289768582480][879 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjg5NzY4NTgyNDgwIiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzYwQUc1QkEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlNLWiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzU0In0='" -e "main()" -q"
[2025-08-21 18:52:38][353289768582480][3487 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjg5NzY4NTgyNDgwIiwibW9kZWwiOiJTTS1YMjA1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzYwQUc1QkEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlNLWiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzU0In0="\r\n
[2025-08-21 18:52:40][353289768582480][5424 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c2231c5-0df4-428a-8961-d7d3211bf3e3","id":"QR_6c2231c5-0df4-428a-8961-d7d3211bf3e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:52:40][353289768582480][5425 ms][DEBUG] proc_open done in 4546 ms; code=0; res.len=3152
[2025-08-21 18:52:40][353289768582480][5425 ms][DEBUG] END   runCmdUntilRes#1 in 4546 ms
[2025-08-21 18:52:40][353289768582480][5425 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:53:06][351642482351107][0 ms][INFO] === Request start ===
[2025-08-21 18:53:06][351642482351107][1 ms][DEBUG] START check_frida
[2025-08-21 18:53:06][351642482351107][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:53:06][351642482351107][258 ms][DEBUG] SU: done in 257 ms; outroot         16270     1 2295852  47468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:53:06][351642482351107][258 ms][DEBUG] check_frida: running
[2025-08-21 18:53:06][351642482351107][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 18:53:06][351642482351107][258 ms][DEBUG] START check_scloud
[2025-08-21 18:53:06][351642482351107][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:53:07][351642482351107][539 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23702700 94820 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:53:07][351642482351107][539 ms][DEBUG] targetPkg: running
[2025-08-21 18:53:07][351642482351107][539 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 18:53:07][351642482351107][540 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:53:07][351642482351107][540 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDgyMzUxMTA3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDJFSjlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM5MyJ9'" -e "main()" -q"
[2025-08-21 18:53:07][351642482351107][540 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:53:07][351642482351107][540 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDgyMzUxMTA3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDJFSjlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM5MyJ9'" -e "main()" -q"
[2025-08-21 18:53:09][351642482351107][3117 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjQyNDgyMzUxMTA3IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg0MDJFSjlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM5MyJ9"\r\n
[2025-08-21 18:53:11][351642482351107][4882 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24054f95-9206-449a-821e-486b6d156b93","id":"QR_24054f95-9206-449a-821e-486b6d156b93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:53:11][351642482351107][4882 ms][DEBUG] proc_open done in 4342 ms; code=0; res.len=3152
[2025-08-21 18:53:11][351642482351107][4882 ms][DEBUG] END   runCmdUntilRes#1 in 4343 ms
[2025-08-21 18:53:11][351642482351107][4883 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:53:36][358558828134317][1 ms][INFO] === Request start ===
[2025-08-21 18:53:36][358558828134317][2 ms][DEBUG] START check_frida
[2025-08-21 18:53:36][358558828134317][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:53:36][358558828134317][280 ms][DEBUG] SU: done in 278 ms; outroot         16270     1 2295852  47520 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:53:36][358558828134317][280 ms][DEBUG] check_frida: running
[2025-08-21 18:53:36][358558828134317][280 ms][DEBUG] END   check_frida in 278 ms
[2025-08-21 18:53:36][358558828134317][280 ms][DEBUG] START check_scloud
[2025-08-21 18:53:36][358558828134317][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:53:37][358558828134317][545 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23702732 95372 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:53:37][358558828134317][545 ms][DEBUG] targetPkg: running
[2025-08-21 18:53:37][358558828134317][546 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 18:53:37][358558828134317][546 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:53:37][358558828134317][546 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTU4ODI4MTM0MzE3IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFIzMDlHWllIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzAyIn0='" -e "main()" -q"
[2025-08-21 18:53:37][358558828134317][546 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:53:37][358558828134317][546 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTU4ODI4MTM0MzE3IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFIzMDlHWllIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzAyIn0='" -e "main()" -q"
[2025-08-21 18:53:39][350274357034435][0 ms][INFO] === Request start ===
[2025-08-21 18:53:39][358558828134317][3107 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NTU4ODI4MTM0MzE3IiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFIzMDlHWllIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzAyIn0="\r\n
[2025-08-21 18:53:44][358558828134317][7653 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4381b69-3cae-448c-b500-439460b860ae","id":"QR_d4381b69-3cae-448c-b500-439460b860ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:53:44][358558828134317][7653 ms][DEBUG] proc_open done in 7107 ms; code=0; res.len=3152
[2025-08-21 18:53:44][358558828134317][7653 ms][DEBUG] END   runCmdUntilRes#1 in 7107 ms
[2025-08-21 18:53:44][358558828134317][7653 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:53:45][350274357034435][6088 ms][DEBUG] START check_frida
[2025-08-21 18:53:45][350274357034435][6088 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:53:45][350274357034435][6338 ms][DEBUG] SU: done in 250 ms; outroot         16270     1 2312272  47536 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:53:45][350274357034435][6338 ms][DEBUG] check_frida: running
[2025-08-21 18:53:45][350274357034435][6338 ms][DEBUG] END   check_frida in 250 ms
[2025-08-21 18:53:45][350274357034435][6338 ms][DEBUG] START check_scloud
[2025-08-21 18:53:45][350274357034435][6338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:53:45][350274357034435][6572 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23702764 95932 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:53:45][350274357034435][6572 ms][DEBUG] targetPkg: running
[2025-08-21 18:53:45][350274357034435][6573 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 18:53:45][350274357034435][6573 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:53:45][350274357034435][6573 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzU3MDM0NDM1IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEhMMUNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTUyIn0='" -e "main()" -q"
[2025-08-21 18:53:45][350274357034435][6573 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:53:45][350274357034435][6573 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzU3MDM0NDM1IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEhMMUNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTUyIn0='" -e "main()" -q"
[2025-08-21 18:53:48][350274357034435][9150 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjc0MzU3MDM0NDM1IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEhMMUNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTUyIn0="\r\n
[2025-08-21 18:53:50][350274357034435][11821 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2c503a5-8be7-4f76-acd6-369a73331fc6","id":"QR_a2c503a5-8be7-4f76-acd6-369a73331fc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:53:50][350274357034435][11821 ms][DEBUG] proc_open done in 5248 ms; code=0; res.len=3152
[2025-08-21 18:53:50][350274357034435][11821 ms][DEBUG] END   runCmdUntilRes#1 in 5248 ms
[2025-08-21 18:53:50][350274357034435][11821 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:53:57][353600817487473][1 ms][INFO] === Request start ===
[2025-08-21 18:53:57][353600817487473][2 ms][DEBUG] START check_frida
[2025-08-21 18:53:57][353600817487473][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:53:57][353600817487473][273 ms][DEBUG] SU: done in 271 ms; outroot         16270     1 2312272  47480 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:53:57][353600817487473][273 ms][DEBUG] check_frida: running
[2025-08-21 18:53:57][353600817487473][273 ms][DEBUG] END   check_frida in 271 ms
[2025-08-21 18:53:57][353600817487473][273 ms][DEBUG] START check_scloud
[2025-08-21 18:53:57][353600817487473][273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:53:58][353600817487473][569 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23702796 92020 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:53:58][353600817487473][569 ms][DEBUG] targetPkg: running
[2025-08-21 18:53:58][353600817487473][569 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 18:53:58][353600817487473][569 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:53:58][353600817487473][570 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODE3NDg3NDczIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFcxMDJHMDVFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDY4In0='" -e "main()" -q"
[2025-08-21 18:53:58][353600817487473][570 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:53:58][353600817487473][570 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODE3NDg3NDczIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFcxMDJHMDVFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDY4In0='" -e "main()" -q"
[2025-08-21 18:54:00][353600817487473][3178 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjAwODE3NDg3NDczIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFcxMDJHMDVFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDY4In0="\r\n
[2025-08-21 18:54:05][353600817487473][7708 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee6a326f-35fd-4628-952a-c0e9a52ed2f8","id":"QR_ee6a326f-35fd-4628-952a-c0e9a52ed2f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:54:05][353600817487473][7709 ms][DEBUG] proc_open done in 7139 ms; code=0; res.len=3152
[2025-08-21 18:54:05][353600817487473][7709 ms][DEBUG] END   runCmdUntilRes#1 in 7139 ms
[2025-08-21 18:54:05][353600817487473][7709 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:54:07][353138604576414][0 ms][INFO] === Request start ===
[2025-08-21 18:54:07][353138604576414][1 ms][DEBUG] START check_frida
[2025-08-21 18:54:07][353138604576414][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:54:07][353138604576414][290 ms][DEBUG] SU: done in 289 ms; outroot         16270     1 2312272  47484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:54:07][353138604576414][290 ms][DEBUG] check_frida: running
[2025-08-21 18:54:07][353138604576414][291 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 18:54:07][353138604576414][291 ms][DEBUG] START check_internet
[2025-08-21 18:54:07][353138604576414][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 18:54:07][353138604576414][587 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.617/175.617/175.617/0.000 ms\n
[2025-08-21 18:54:07][353138604576414][587 ms][DEBUG] check_internet: online
[2025-08-21 18:54:07][353138604576414][587 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 18:54:07][353138604576414][587 ms][DEBUG] START check_scloud
[2025-08-21 18:54:07][353138604576414][588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:54:07][353138604576414][869 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23702828 92572 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:54:07][353138604576414][869 ms][DEBUG] targetPkg: running
[2025-08-21 18:54:07][353138604576414][869 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 18:54:07][353138604576414][869 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:54:07][353138604576414][869 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTM4NjA0NTc2NDE0IiwibW9kZWwiOiJTTS1TOTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMkJDV0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzI4In0='" -e "main()" -q"
[2025-08-21 18:54:07][353138604576414][869 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:54:07][353138604576414][869 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTM4NjA0NTc2NDE0IiwibW9kZWwiOiJTTS1TOTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMkJDV0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzI4In0='" -e "main()" -q"
[2025-08-21 18:54:10][353138604576414][3477 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTM4NjA0NTc2NDE0IiwibW9kZWwiOiJTTS1TOTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMkJDV0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzI4In0="\r\n
[2025-08-21 18:54:14][353138604576414][7570 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc61540b-9c91-47b0-84bd-5505303fe5e2","id":"QR_fc61540b-9c91-47b0-84bd-5505303fe5e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:54:14][353138604576414][7570 ms][DEBUG] proc_open done in 6701 ms; code=0; res.len=3152
[2025-08-21 18:54:14][353138604576414][7571 ms][DEBUG] END   runCmdUntilRes#1 in 6702 ms
[2025-08-21 18:54:14][353138604576414][7571 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:55:10][353248117538874][1 ms][INFO] === Request start ===
[2025-08-21 18:55:10][353248117538874][2 ms][DEBUG] START check_frida
[2025-08-21 18:55:10][353248117538874][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:55:10][353248117538874][254 ms][DEBUG] SU: done in 253 ms; outroot         16270     1 2295852  47472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:55:10][353248117538874][254 ms][DEBUG] check_frida: running
[2025-08-21 18:55:10][353248117538874][255 ms][DEBUG] END   check_frida in 253 ms
[2025-08-21 18:55:10][353248117538874][255 ms][DEBUG] START check_scloud
[2025-08-21 18:55:10][353248117538874][255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:55:11][353248117538874][504 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23702860 93108 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:55:11][353248117538874][505 ms][DEBUG] targetPkg: running
[2025-08-21 18:55:11][353248117538874][505 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 18:55:11][353248117538874][505 ms][DEBUG] rawBody.length=1159
[2025-08-21 18:55:11][353248117538874][505 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjQ4MTE3NTM4ODc0IiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWDcwOEc0RlAiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzg1NjIifQ=='" -e "main()" -q"
[2025-08-21 18:55:11][353248117538874][505 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:55:11][353248117538874][505 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjQ4MTE3NTM4ODc0IiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWDcwOEc0RlAiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzg1NjIifQ=='" -e "main()" -q"
[2025-08-21 18:55:13][353248117538874][3128 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjQ4MTE3NTM4ODc0IiwibW9kZWwiOiJTTS1YMjEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjkyWDcwOEc0RlAiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzg1NjIifQ=="\r\n
[2025-08-21 18:55:17][353248117538874][6472 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc4260eb-7c97-431c-8fa6-7511ed42e2b6","id":"QR_cc4260eb-7c97-431c-8fa6-7511ed42e2b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:55:17][353248117538874][6472 ms][DEBUG] proc_open done in 5967 ms; code=0; res.len=3152
[2025-08-21 18:55:17][353248117538874][6472 ms][DEBUG] END   runCmdUntilRes#1 in 5967 ms
[2025-08-21 18:55:17][353248117538874][6472 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:55:30][353676113135107][0 ms][INFO] === Request start ===
[2025-08-21 18:55:30][353676113135107][1 ms][DEBUG] START check_frida
[2025-08-21 18:55:30][353676113135107][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:55:30][353676113135107][287 ms][DEBUG] SU: done in 286 ms; outroot         16270     1 2295852  47508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:55:30][353676113135107][287 ms][DEBUG] check_frida: running
[2025-08-21 18:55:30][353676113135107][287 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 18:55:30][353676113135107][287 ms][DEBUG] START check_scloud
[2025-08-21 18:55:30][353676113135107][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:55:31][353676113135107][584 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23702892 93660 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:55:31][353676113135107][584 ms][DEBUG] targetPkg: running
[2025-08-21 18:55:31][353676113135107][584 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 18:55:31][353676113135107][584 ms][DEBUG] rawBody.length=1160
[2025-08-21 18:55:31][353676113135107][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjc2MTEzMTM1MTA3IiwibW9kZWwiOiJTTS1ONzcwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE4yMDZMNVpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzM1In0='" -e "main()" -q"
[2025-08-21 18:55:31][353676113135107][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:55:31][353676113135107][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjc2MTEzMTM1MTA3IiwibW9kZWwiOiJTTS1ONzcwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE4yMDZMNVpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzM1In0='" -e "main()" -q"
[2025-08-21 18:55:33][353676113135107][3192 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjc2MTEzMTM1MTA3IiwibW9kZWwiOiJTTS1ONzcwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE4yMDZMNVpMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzM1In0="\r\n
[2025-08-21 18:55:38][353676113135107][7722 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3cc87ca5-6a8c-484d-979f-3b5d8943bbe3","id":"QR_3cc87ca5-6a8c-484d-979f-3b5d8943bbe3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:55:38][353676113135107][7722 ms][DEBUG] proc_open done in 7138 ms; code=0; res.len=3152
[2025-08-21 18:55:38][353676113135107][7722 ms][DEBUG] END   runCmdUntilRes#1 in 7139 ms
[2025-08-21 18:55:38][353676113135107][7723 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:59:07][350857485307069][1 ms][INFO] === Request start ===
[2025-08-21 18:59:07][350857485307069][2 ms][DEBUG] START check_frida
[2025-08-21 18:59:07][350857485307069][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:59:08][350857485307069][242 ms][DEBUG] SU: done in 240 ms; outroot         16270     1 2295852  47484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:59:08][350857485307069][242 ms][DEBUG] check_frida: running
[2025-08-21 18:59:08][350857485307069][242 ms][DEBUG] END   check_frida in 240 ms
[2025-08-21 18:59:08][350857485307069][242 ms][DEBUG] START check_scloud
[2025-08-21 18:59:08][350857485307069][242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:59:08][350857485307069][476 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23702924 94408 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:59:08][350857485307069][476 ms][DEBUG] targetPkg: running
[2025-08-21 18:59:08][350857485307069][476 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 18:59:08][350857485307069][476 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:59:08][350857485307069][476 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODU3NDg1MzA3MDY5IiwibW9kZWwiOiJTTS1BMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MFo3WFNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY2NiJ9'" -e "main()" -q"
[2025-08-21 18:59:08][350857485307069][476 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:59:08][350857485307069][476 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODU3NDg1MzA3MDY5IiwibW9kZWwiOiJTTS1BMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MFo3WFNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY2NiJ9'" -e "main()" -q"
[2025-08-21 18:59:11][350857485307069][3116 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODU3NDg1MzA3MDY5IiwibW9kZWwiOiJTTS1BMzI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MFo3WFNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTY2NiJ9"\r\n
[2025-08-21 18:59:13][350857485307069][5350 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4447d1fc-4cf5-45ca-9c6f-5aef8b636464","id":"QR_4447d1fc-4cf5-45ca-9c6f-5aef8b636464","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:59:13][350857485307069][5350 ms][DEBUG] proc_open done in 4874 ms; code=0; res.len=3152
[2025-08-21 18:59:13][350857485307069][5350 ms][DEBUG] END   runCmdUntilRes#1 in 4874 ms
[2025-08-21 18:59:13][350857485307069][5351 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 18:59:52][357435844779071][0 ms][INFO] === Request start ===
[2025-08-21 18:59:52][357435844779071][1 ms][DEBUG] START check_frida
[2025-08-21 18:59:52][357435844779071][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 18:59:52][357435844779071][295 ms][DEBUG] SU: done in 294 ms; outroot         16270     1 2295852  47532 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 18:59:52][357435844779071][295 ms][DEBUG] check_frida: running
[2025-08-21 18:59:52][357435844779071][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 18:59:52][357435844779071][295 ms][DEBUG] START check_scloud
[2025-08-21 18:59:52][357435844779071][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 18:59:53][357435844779071][592 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23702956 95084 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 18:59:53][357435844779071][592 ms][DEBUG] targetPkg: running
[2025-08-21 18:59:53][357435844779071][592 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 18:59:53][357435844779071][592 ms][DEBUG] rawBody.length=1161
[2025-08-21 18:59:53][357435844779071][593 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0Nzc5MDcxIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MFZaVDFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxMyJ9'" -e "main()" -q"
[2025-08-21 18:59:53][357435844779071][593 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 18:59:53][357435844779071][593 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0Nzc5MDcxIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MFZaVDFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxMyJ9'" -e "main()" -q"
[2025-08-21 18:59:55][357435844779071][3169 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDM1ODQ0Nzc5MDcxIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MFZaVDFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIxMyJ9"\r\n
[2025-08-21 18:59:57][357435844779071][4966 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9cd6bb5-bd81-458e-9d73-2c2c0e6c3486","id":"QR_c9cd6bb5-bd81-458e-9d73-2c2c0e6c3486","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 18:59:57][357435844779071][4966 ms][DEBUG] proc_open done in 4373 ms; code=0; res.len=3152
[2025-08-21 18:59:57][357435844779071][4966 ms][DEBUG] END   runCmdUntilRes#1 in 4373 ms
[2025-08-21 18:59:57][357435844779071][4966 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:00:51][351521285956504][0 ms][INFO] === Request start ===
[2025-08-21 19:00:51][351521285956504][1 ms][DEBUG] START check_frida
[2025-08-21 19:00:51][351521285956504][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:00:52][351521285956504][295 ms][DEBUG] SU: done in 294 ms; outroot         16270     1 2295852  47544 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:00:52][351521285956504][295 ms][DEBUG] check_frida: running
[2025-08-21 19:00:52][351521285956504][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 19:00:52][351521285956504][295 ms][DEBUG] START check_internet
[2025-08-21 19:00:52][351521285956504][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:00:52][351521285956504][716 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.995/198.995/198.995/0.000 ms\n
[2025-08-21 19:00:52][351521285956504][716 ms][DEBUG] check_internet: online
[2025-08-21 19:00:52][351521285956504][716 ms][DEBUG] END   check_internet in 421 ms
[2025-08-21 19:00:52][351521285956504][716 ms][DEBUG] START check_scloud
[2025-08-21 19:00:52][351521285956504][716 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:00:52][351521285956504][981 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23702988 95840 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:00:52][351521285956504][981 ms][DEBUG] targetPkg: running
[2025-08-21 19:00:52][351521285956504][981 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 19:00:52][351521285956504][981 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:00:52][351521285956504][982 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg1OTU2NTA0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1czMU5IQjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTE4NCJ9'" -e "main()" -q"
[2025-08-21 19:00:52][351521285956504][982 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:00:52][351521285956504][982 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTIxMjg1OTU2NTA0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1czMU5IQjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTE4NCJ9'" -e "main()" -q"
[2025-08-21 19:00:55][351521285956504][3590 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTIxMjg1OTU2NTA0IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1czMU5IQjlYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTE4NCJ9"\r\n
[2025-08-21 19:00:57][351521285956504][5839 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_721632d4-85db-44f5-8993-9fc43589602d","id":"QR_721632d4-85db-44f5-8993-9fc43589602d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:00:57][351521285956504][5840 ms][DEBUG] proc_open done in 4858 ms; code=0; res.len=3152
[2025-08-21 19:00:57][351521285956504][5840 ms][DEBUG] END   runCmdUntilRes#1 in 4858 ms
[2025-08-21 19:00:57][351521285956504][5840 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:01:41][350287319347760][1 ms][INFO] === Request start ===
[2025-08-21 19:01:41][350287319347760][2 ms][DEBUG] START check_frida
[2025-08-21 19:01:41][350287319347760][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:01:41][350287319347760][333 ms][DEBUG] SU: done in 331 ms; outroot         16270     1 2296864  47440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:01:41][350287319347760][333 ms][DEBUG] check_frida: running
[2025-08-21 19:01:41][350287319347760][333 ms][DEBUG] END   check_frida in 331 ms
[2025-08-21 19:01:41][350287319347760][333 ms][DEBUG] START check_scloud
[2025-08-21 19:01:41][350287319347760][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:01:42][350287319347760][567 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23703020 96008 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:01:42][350287319347760][567 ms][DEBUG] targetPkg: running
[2025-08-21 19:01:42][350287319347760][567 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 19:01:42][350287319347760][567 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:01:42][350287319347760][567 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE5MzQ3NzYwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMERWR1pWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk3OSJ9'" -e "main()" -q"
[2025-08-21 19:01:42][350287319347760][567 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:01:42][350287319347760][567 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE5MzQ3NzYwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMERWR1pWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk3OSJ9'" -e "main()" -q"
[2025-08-21 19:01:44][350287319347760][3129 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjg3MzE5MzQ3NzYwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFgyMERWR1pWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjk3OSJ9"\r\n
[2025-08-21 19:01:53][350287319347760][11517 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5031b86b-7e64-40f2-91f9-f5ae6dc918b2","id":"QR_5031b86b-7e64-40f2-91f9-f5ae6dc918b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:01:53][350287319347760][11518 ms][DEBUG] proc_open done in 10950 ms; code=0; res.len=3152
[2025-08-21 19:01:53][350287319347760][11518 ms][DEBUG] END   runCmdUntilRes#1 in 10950 ms
[2025-08-21 19:01:53][350287319347760][11518 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:02:32][351506556608116][0 ms][INFO] === Request start ===
[2025-08-21 19:02:32][351506556608116][1 ms][DEBUG] START check_frida
[2025-08-21 19:02:32][351506556608116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:02:32][351506556608116][304 ms][DEBUG] SU: done in 303 ms; outroot         16270     1 2295852  47492 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:02:32][351506556608116][304 ms][DEBUG] check_frida: running
[2025-08-21 19:02:32][351506556608116][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 19:02:32][351506556608116][304 ms][DEBUG] START check_internet
[2025-08-21 19:02:32][351506556608116][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:02:33][351506556608116][773 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.226/200.226/200.226/0.000 ms\n
[2025-08-21 19:02:33][351506556608116][773 ms][DEBUG] check_internet: online
[2025-08-21 19:02:33][351506556608116][773 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 19:02:33][351506556608116][773 ms][DEBUG] START check_scloud
[2025-08-21 19:02:33][351506556608116][773 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:02:33][351506556608116][1038 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23703052 91396 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:02:33][351506556608116][1038 ms][DEBUG] targetPkg: running
[2025-08-21 19:02:33][351506556608116][1039 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 19:02:33][351506556608116][1039 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:02:33][351506556608116][1039 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTA2NTU2NjA4MTE2IiwibW9kZWwiOiJTTS1YMTE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTQ2MmEyZWMyMWVmZTMwZGFlYyIsImdyb3VwIjoiZjk5ZWYxY2ItMTU1MS00M2FkLWI2OWQtYTg3NmJhMjM5NmM1IiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZWDkyNVpURUYiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTQzIn0='" -e "main()" -q"
[2025-08-21 19:02:33][351506556608116][1039 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:02:33][351506556608116][1039 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTA2NTU2NjA4MTE2IiwibW9kZWwiOiJTTS1YMTE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTQ2MmEyZWMyMWVmZTMwZGFlYyIsImdyb3VwIjoiZjk5ZWYxY2ItMTU1MS00M2FkLWI2OWQtYTg3NmJhMjM5NmM1IiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZWDkyNVpURUYiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTQzIn0='" -e "main()" -q"
[2025-08-21 19:02:36][351506556608116][3647 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTA2NTU2NjA4MTE2IiwibW9kZWwiOiJTTS1YMTE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTQ2MmEyZWMyMWVmZTMwZGFlYyIsImdyb3VwIjoiZjk5ZWYxY2ItMTU1MS00M2FkLWI2OWQtYTg3NmJhMjM5NmM1IiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZWDkyNVpURUYiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0OTQzIn0="\r\n
[2025-08-21 19:02:37][351506556608116][5459 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f171277-469d-41a3-b68c-7adee1b2744f","id":"QR_8f171277-469d-41a3-b68c-7adee1b2744f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:02:37][351506556608116][5459 ms][DEBUG] proc_open done in 4420 ms; code=0; res.len=3152
[2025-08-21 19:02:37][351506556608116][5459 ms][DEBUG] END   runCmdUntilRes#1 in 4420 ms
[2025-08-21 19:02:37][351506556608116][5459 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:02:54][352429893217203][0 ms][INFO] === Request start ===
[2025-08-21 19:02:54][352429893217203][1 ms][DEBUG] START check_frida
[2025-08-21 19:02:54][352429893217203][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:02:54][352429893217203][324 ms][DEBUG] SU: done in 323 ms; outroot         16270     1 2295852  47444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:02:54][352429893217203][324 ms][DEBUG] check_frida: running
[2025-08-21 19:02:54][352429893217203][324 ms][DEBUG] END   check_frida in 323 ms
[2025-08-21 19:02:54][352429893217203][324 ms][DEBUG] START check_internet
[2025-08-21 19:02:54][352429893217203][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:02:54][352429893217203][652 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.587/214.587/214.587/0.000 ms\n
[2025-08-21 19:02:54][352429893217203][652 ms][DEBUG] check_internet: online
[2025-08-21 19:02:54][352429893217203][652 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 19:02:54][352429893217203][652 ms][DEBUG] START check_scloud
[2025-08-21 19:02:54][352429893217203][652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:02:55][352429893217203][917 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23703084 92024 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:02:55][352429893217203][917 ms][DEBUG] targetPkg: running
[2025-08-21 19:02:55][352429893217203][918 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 19:02:55][352429893217203][918 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:02:55][352429893217203][918 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDI5ODkzMjE3MjAzIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q5MDAxRjVYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzQ1In0='" -e "main()" -q"
[2025-08-21 19:02:55][352429893217203][918 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:02:55][352429893217203][918 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDI5ODkzMjE3MjAzIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q5MDAxRjVYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzQ1In0='" -e "main()" -q"
[2025-08-21 19:02:57][352429893217203][3510 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDI5ODkzMjE3MjAzIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q5MDAxRjVYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzQ1In0="\r\n
[2025-08-21 19:03:01][352429893217203][6884 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a34deb51-f071-47fe-8b41-bc9dcd469724","id":"QR_a34deb51-f071-47fe-8b41-bc9dcd469724","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:03:01][352429893217203][6885 ms][DEBUG] proc_open done in 5967 ms; code=0; res.len=3152
[2025-08-21 19:03:01][352429893217203][6885 ms][DEBUG] END   runCmdUntilRes#1 in 5967 ms
[2025-08-21 19:03:01][352429893217203][6885 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:03:23][352257980187595][1 ms][INFO] === Request start ===
[2025-08-21 19:03:23][352257980187595][1 ms][DEBUG] START check_frida
[2025-08-21 19:03:23][352257980187595][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:03:23][352257980187595][249 ms][DEBUG] SU: done in 248 ms; outroot         16270     1 2295852  47484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:03:23][352257980187595][249 ms][DEBUG] check_frida: running
[2025-08-21 19:03:23][352257980187595][249 ms][DEBUG] END   check_frida in 248 ms
[2025-08-21 19:03:23][352257980187595][249 ms][DEBUG] START check_scloud
[2025-08-21 19:03:23][352257980187595][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:03:24][352257980187595][484 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23703116 92636 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:03:24][352257980187595][484 ms][DEBUG] targetPkg: running
[2025-08-21 19:03:24][352257980187595][484 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 19:03:24][352257980187595][484 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:03:24][352257980187595][484 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzgwIn0='" -e "main()" -q"
[2025-08-21 19:03:24][352257980187595][484 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:03:24][352257980187595][484 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzgwIn0='" -e "main()" -q"
[2025-08-21 19:03:26][352257980187595][3092 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzgwIn0="\r\n
[2025-08-21 19:03:36][352257980187595][12494 ms][DEBUG] proc_open done in 12010 ms (timeout); code=1; out.len=0 err.len=11
[2025-08-21 19:03:36][352257980187595][12494 ms][DEBUG] END   runCmdUntilRes#1 in 12010 ms
[2025-08-21 19:03:36][352257980187595][12495 ms][ERROR] NO RESULT; code=124 out.len=0 err.len=11
[2025-08-21 19:03:38][][0 ms][DEBUG] START check_boot_completed
[2025-08-21 19:03:38][][1 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-21 19:03:38][][45 ms][DEBUG] ADB: done in 45 ms; out
[2025-08-21 19:03:38][][45 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-21 19:03:38][][139 ms][DEBUG] SU: done in 94 ms; out
[2025-08-21 19:03:38][][139 ms][DEBUG] END   check_boot_completed in 139 ms
[2025-08-21 19:03:38][352257980187595][139 ms][INFO] === Request start ===
[2025-08-21 19:03:38][352257980187595][140 ms][DEBUG] START check_frida
[2025-08-21 19:03:38][352257980187595][140 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:03:38][352257980187595][467 ms][DEBUG] SU: done in 327 ms; outroot         16270     1 2312272  43516 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:03:38][352257980187595][467 ms][DEBUG] check_frida: running
[2025-08-21 19:03:38][352257980187595][467 ms][DEBUG] END   check_frida in 327 ms
[2025-08-21 19:03:38][352257980187595][467 ms][DEBUG] START check_scloud
[2025-08-21 19:03:38][352257980187595][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:03:38][352257980187595][733 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23703148 98268 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:03:38][352257980187595][733 ms][DEBUG] targetPkg: running
[2025-08-21 19:03:38][352257980187595][733 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 19:03:38][352257980187595][733 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:03:38][352257980187595][733 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzgwIn0='" -e "main()" -q"
[2025-08-21 19:03:38][352257980187595][733 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:03:38][352257980187595][733 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzgwIn0='" -e "main()" -q"
[2025-08-21 19:03:41][352257980187595][3357 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjU3OTgwMTg3NTk1IiwibW9kZWwiOiJTTS1NMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g0MEtLUExWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6Ik1FQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzgwIn0="\r\n
[2025-08-21 19:03:43][352257980187595][5341 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_32330a65-091c-4b08-aea7-2e1fdbf7a6f7","id":"QR_32330a65-091c-4b08-aea7-2e1fdbf7a6f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:03:43][352257980187595][5341 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=3152
[2025-08-21 19:03:43][352257980187595][5342 ms][DEBUG] END   runCmdUntilRes#1 in 4609 ms
[2025-08-21 19:03:43][352257980187595][5342 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:04:18][353325478035672][1 ms][INFO] === Request start ===
[2025-08-21 19:04:18][353325478035672][2 ms][DEBUG] START check_frida
[2025-08-21 19:04:18][353325478035672][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:04:18][353325478035672][303 ms][DEBUG] SU: done in 301 ms; outroot         16270     1 2295852  41160 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:04:18][353325478035672][303 ms][DEBUG] check_frida: running
[2025-08-21 19:04:18][353325478035672][303 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 19:04:18][353325478035672][303 ms][DEBUG] START check_internet
[2025-08-21 19:04:18][353325478035672][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:04:18][353325478035672][599 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.623/170.623/170.623/0.000 ms\n
[2025-08-21 19:04:18][353325478035672][599 ms][DEBUG] check_internet: online
[2025-08-21 19:04:18][353325478035672][599 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 19:04:18][353325478035672][599 ms][DEBUG] START check_scloud
[2025-08-21 19:04:18][353325478035672][599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:04:19][353325478035672][865 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23670832 98152 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:04:19][353325478035672][865 ms][DEBUG] targetPkg: running
[2025-08-21 19:04:19][353325478035672][865 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 19:04:19][353325478035672][865 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:04:19][353325478035672][865 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzI1NDc4MDM1NjcyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q5MDVMQ0ZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY0NyJ9'" -e "main()" -q"
[2025-08-21 19:04:19][353325478035672][865 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:04:19][353325478035672][866 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzI1NDc4MDM1NjcyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q5MDVMQ0ZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY0NyJ9'" -e "main()" -q"
[2025-08-21 19:04:21][353325478035672][3630 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzI1NDc4MDM1NjcyIiwibW9kZWwiOiJTTS1TOTAxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q5MDVMQ0ZOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODY0NyJ9"\r\n
[2025-08-21 19:04:24][353325478035672][6036 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_805ea535-5af9-4e8b-b586-d92f2c627066","id":"QR_805ea535-5af9-4e8b-b586-d92f2c627066","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:04:24][353325478035672][6036 ms][DEBUG] proc_open done in 5170 ms; code=0; res.len=3152
[2025-08-21 19:04:24][353325478035672][6036 ms][DEBUG] END   runCmdUntilRes#1 in 5170 ms
[2025-08-21 19:04:24][353325478035672][6036 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:04:49][352334110234645][1 ms][INFO] === Request start ===
[2025-08-21 19:04:49][352334110234645][2 ms][DEBUG] START check_frida
[2025-08-21 19:04:49][352334110234645][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:04:49][352334110234645][324 ms][DEBUG] SU: done in 323 ms; outroot         16270     1 2295852  37760 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:04:49][352334110234645][324 ms][DEBUG] check_frida: running
[2025-08-21 19:04:49][352334110234645][325 ms][DEBUG] END   check_frida in 323 ms
[2025-08-21 19:04:49][352334110234645][325 ms][DEBUG] START check_internet
[2025-08-21 19:04:49][352334110234645][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:04:50][352334110234645][621 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.305/190.305/190.305/0.000 ms\n
[2025-08-21 19:04:50][352334110234645][621 ms][DEBUG] check_internet: online
[2025-08-21 19:04:50][352334110234645][621 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 19:04:50][352334110234645][621 ms][DEBUG] START check_scloud
[2025-08-21 19:04:50][352334110234645][621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:04:50][352334110234645][933 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23670864 98092 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:04:50][352334110234645][933 ms][DEBUG] targetPkg: running
[2025-08-21 19:04:50][352334110234645][934 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 19:04:50][352334110234645][934 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:04:50][352334110234645][934 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzM0MTEwMjM0NjQ1IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE4xMDY5VEFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjE5In0='" -e "main()" -q"
[2025-08-21 19:04:50][352334110234645][934 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:04:50][352334110234645][934 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzM0MTEwMjM0NjQ1IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE4xMDY5VEFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjE5In0='" -e "main()" -q"
[2025-08-21 19:04:53][352334110234645][3542 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzM0MTEwMjM0NjQ1IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE4xMDY5VEFIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjE5In0="\r\n
[2025-08-21 19:04:55][352334110234645][6245 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4caf82a3-65c6-4cd2-8ede-0e96deb1fd35","id":"QR_4caf82a3-65c6-4cd2-8ede-0e96deb1fd35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:04:55][352334110234645][6245 ms][DEBUG] proc_open done in 5311 ms; code=0; res.len=3152
[2025-08-21 19:04:55][352334110234645][6245 ms][DEBUG] END   runCmdUntilRes#1 in 5311 ms
[2025-08-21 19:04:55][352334110234645][6245 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:06:31][356344111548915][0 ms][INFO] === Request start ===
[2025-08-21 19:06:31][356344111548915][1 ms][DEBUG] START check_frida
[2025-08-21 19:06:31][356344111548915][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:06:31][356344111548915][313 ms][DEBUG] SU: done in 311 ms; outroot         16270     1 2295852  36540 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:06:31][356344111548915][313 ms][DEBUG] check_frida: running
[2025-08-21 19:06:31][356344111548915][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 19:06:31][356344111548915][313 ms][DEBUG] START check_internet
[2025-08-21 19:06:31][356344111548915][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:06:31][356344111548915][875 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.394/202.394/202.394/0.000 ms\n
[2025-08-21 19:06:31][356344111548915][875 ms][DEBUG] check_internet: online
[2025-08-21 19:06:31][356344111548915][875 ms][DEBUG] END   check_internet in 562 ms
[2025-08-21 19:06:31][356344111548915][875 ms][DEBUG] START check_scloud
[2025-08-21 19:06:31][356344111548915][875 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:06:32][356344111548915][1140 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23670896 98124 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:06:32][356344111548915][1141 ms][DEBUG] targetPkg: running
[2025-08-21 19:06:32][356344111548915][1141 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 19:06:32][356344111548915][1141 ms][DEBUG] rawBody.length=1159
[2025-08-21 19:06:32][356344111548915][1141 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzQ0MTExNTQ4OTE1IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzkwRUJIVFIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiTVhPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzI5NDcifQ=='" -e "main()" -q"
[2025-08-21 19:06:32][356344111548915][1141 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:06:32][356344111548915][1141 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzQ0MTExNTQ4OTE1IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzkwRUJIVFIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiTVhPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzI5NDcifQ=='" -e "main()" -q"
[2025-08-21 19:06:34][356344111548915][3780 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MzQ0MTExNTQ4OTE1IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzkwRUJIVFIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiTVhPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzUiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzI5NDcifQ=="\r\n
[2025-08-21 19:06:39][356344111548915][8326 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9275f115-a260-4f03-b4b8-6fc8299128ea","id":"QR_9275f115-a260-4f03-b4b8-6fc8299128ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:06:39][356344111548915][8326 ms][DEBUG] proc_open done in 7185 ms; code=0; res.len=3152
[2025-08-21 19:06:39][356344111548915][8326 ms][DEBUG] END   runCmdUntilRes#1 in 7185 ms
[2025-08-21 19:06:39][356344111548915][8326 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:06:47][352590527093169][0 ms][INFO] === Request start ===
[2025-08-21 19:06:47][352590527093169][1 ms][DEBUG] START check_frida
[2025-08-21 19:06:47][352590527093169][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:06:48][352590527093169][327 ms][DEBUG] SU: done in 326 ms; outroot         16270     1 2312272  36344 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:06:48][352590527093169][327 ms][DEBUG] check_frida: running
[2025-08-21 19:06:48][352590527093169][327 ms][DEBUG] END   check_frida in 326 ms
[2025-08-21 19:06:48][352590527093169][327 ms][DEBUG] START check_internet
[2025-08-21 19:06:48][352590527093169][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:06:48][352590527093169][655 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.460/208.460/208.460/0.000 ms\n
[2025-08-21 19:06:48][352590527093169][655 ms][DEBUG] check_internet: online
[2025-08-21 19:06:48][352590527093169][655 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 19:06:48][352590527093169][655 ms][DEBUG] START check_scloud
[2025-08-21 19:06:48][352590527093169][655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:06:48][352590527093169][936 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23670928 97384 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:06:48][352590527093169][936 ms][DEBUG] targetPkg: running
[2025-08-21 19:06:48][352590527093169][936 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 19:06:48][352590527093169][936 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:06:48][352590527093169][936 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTkwNTI3MDkzMTY5IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNjU3In0='" -e "main()" -q"
[2025-08-21 19:06:48][352590527093169][936 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:06:48][352590527093169][936 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTkwNTI3MDkzMTY5IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNjU3In0='" -e "main()" -q"
[2025-08-21 19:06:51][352590527093169][3561 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTkwNTI3MDkzMTY5IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MFk4VDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNjU3In0="\r\n
[2025-08-21 19:06:54][352590527093169][6419 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4959704-8be3-4f15-9138-76218fa80722","id":"QR_b4959704-8be3-4f15-9138-76218fa80722","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:06:54][352590527093169][6419 ms][DEBUG] proc_open done in 5483 ms; code=0; res.len=3152
[2025-08-21 19:06:54][352590527093169][6419 ms][DEBUG] END   runCmdUntilRes#1 in 5483 ms
[2025-08-21 19:06:54][352590527093169][6419 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:07:07][352623179511665][1 ms][INFO] === Request start ===
[2025-08-21 19:07:07][352623179511665][2 ms][DEBUG] START check_frida
[2025-08-21 19:07:07][352623179511665][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:07:08][352623179511665][322 ms][DEBUG] SU: done in 320 ms; outroot         16270     1 2295852  35824 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:07:08][352623179511665][322 ms][DEBUG] check_frida: running
[2025-08-21 19:07:08][352623179511665][322 ms][DEBUG] END   check_frida in 321 ms
[2025-08-21 19:07:08][352623179511665][322 ms][DEBUG] START check_scloud
[2025-08-21 19:07:08][352623179511665][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:07:08][352623179511665][587 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23670960 97952 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:07:08][352623179511665][588 ms][DEBUG] targetPkg: running
[2025-08-21 19:07:08][352623179511665][588 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 19:07:08][352623179511665][588 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:07:08][352623179511665][588 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjIzMTc5NTExNjY1IiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMEo0TkxIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMzOSJ9'" -e "main()" -q"
[2025-08-21 19:07:08][352623179511665][588 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:07:08][352623179511665][588 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjIzMTc5NTExNjY1IiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMEo0TkxIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMzOSJ9'" -e "main()" -q"
[2025-08-21 19:07:11][352623179511665][3212 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjIzMTc5NTExNjY1IiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kyMEo0TkxIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzMzOSJ9"\r\n
[2025-08-21 19:07:13][352623179511665][5477 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd947bbc-da3d-4351-9f80-884e5753bea4","id":"QR_bd947bbc-da3d-4351-9f80-884e5753bea4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:07:13][352623179511665][5477 ms][DEBUG] proc_open done in 4889 ms; code=0; res.len=3152
[2025-08-21 19:07:13][352623179511665][5477 ms][DEBUG] END   runCmdUntilRes#1 in 4889 ms
[2025-08-21 19:07:13][352623179511665][5477 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:07:22][350318401103280][0 ms][INFO] === Request start ===
[2025-08-21 19:07:22][350318401103280][1 ms][DEBUG] START check_frida
[2025-08-21 19:07:22][350318401103280][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:07:22][350318401103280][303 ms][DEBUG] SU: done in 302 ms; outroot         16270     1 2312272  35832 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:07:22][350318401103280][303 ms][DEBUG] check_frida: running
[2025-08-21 19:07:22][350318401103280][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 19:07:22][350318401103280][303 ms][DEBUG] START check_scloud
[2025-08-21 19:07:22][350318401103280][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:07:22][350318401103280][600 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23670992 97304 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:07:22][350318401103280][600 ms][DEBUG] targetPkg: running
[2025-08-21 19:07:22][350318401103280][600 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 19:07:22][350318401103280][600 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:07:22][350318401103280][600 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzE4NDAxMTAzMjgwIiwibW9kZWwiOiJTTS1TMTU2VkwiLCJwcm9maWxlX0lEIjoiNjg3OTcwZjNkNmNmODU1ZjlkZDM5M2JmIiwiZ3JvdXAiOiIzOTY4ZTkyMS04MjBlLTRjYTEtYTU3OS0yOWU1OTk4ZWU3YTUiLCJ0eXBlIjoiS01FIiwicmVnIjoidXMiLCJkZXZpY2VTZXJpYWxOdW1iZXIiOiJSNUNYMTFEMTlLVCIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InN1cEBndXAuMzNtYWlsLmNvbSIsImNhcnJpZXIiOiJURk4iLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY0MiJ9'" -e "main()" -q"
[2025-08-21 19:07:22][350318401103280][600 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:07:22][350318401103280][600 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzE4NDAxMTAzMjgwIiwibW9kZWwiOiJTTS1TMTU2VkwiLCJwcm9maWxlX0lEIjoiNjg3OTcwZjNkNmNmODU1ZjlkZDM5M2JmIiwiZ3JvdXAiOiIzOTY4ZTkyMS04MjBlLTRjYTEtYTU3OS0yOWU1OTk4ZWU3YTUiLCJ0eXBlIjoiS01FIiwicmVnIjoidXMiLCJkZXZpY2VTZXJpYWxOdW1iZXIiOiJSNUNYMTFEMTlLVCIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InN1cEBndXAuMzNtYWlsLmNvbSIsImNhcnJpZXIiOiJURk4iLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY0MiJ9'" -e "main()" -q"
[2025-08-21 19:07:25][350318401103280][3225 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzE4NDAxMTAzMjgwIiwibW9kZWwiOiJTTS1TMTU2VkwiLCJwcm9maWxlX0lEIjoiNjg3OTcwZjNkNmNmODU1ZjlkZDM5M2JmIiwiZ3JvdXAiOiIzOTY4ZTkyMS04MjBlLTRjYTEtYTU3OS0yOWU1OTk4ZWU3YTUiLCJ0eXBlIjoiS01FIiwicmVnIjoidXMiLCJkZXZpY2VTZXJpYWxOdW1iZXIiOiJSNUNYMTFEMTlLVCIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InN1cEBndXAuMzNtYWlsLmNvbSIsImNhcnJpZXIiOiJURk4iLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY0MiJ9"\r\n
[2025-08-21 19:07:28][350318401103280][6286 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d41cb33d-323f-4ed0-ab5e-afd8823119e5","id":"QR_d41cb33d-323f-4ed0-ab5e-afd8823119e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:07:28][350318401103280][6286 ms][DEBUG] proc_open done in 5686 ms; code=0; res.len=3152
[2025-08-21 19:07:28][350318401103280][6286 ms][DEBUG] END   runCmdUntilRes#1 in 5686 ms
[2025-08-21 19:07:28][350318401103280][6286 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:07:39][355084250790545][0 ms][INFO] === Request start ===
[2025-08-21 19:07:39][355084250790545][1 ms][DEBUG] START check_frida
[2025-08-21 19:07:39][355084250790545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:07:39][355084250790545][322 ms][DEBUG] SU: done in 321 ms; outroot         16270     1 2312272  35824 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:07:39][355084250790545][322 ms][DEBUG] check_frida: running
[2025-08-21 19:07:39][355084250790545][322 ms][DEBUG] END   check_frida in 321 ms
[2025-08-21 19:07:39][355084250790545][322 ms][DEBUG] START check_scloud
[2025-08-21 19:07:39][355084250790545][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:07:39][355084250790545][572 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23671024 97888 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:07:39][355084250790545][572 ms][DEBUG] targetPkg: running
[2025-08-21 19:07:39][355084250790545][572 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:07:39][355084250790545][572 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:07:39][355084250790545][572 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDg0MjUwNzkwNTQ1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFk0MDBUOVhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU3MiJ9'" -e "main()" -q"
[2025-08-21 19:07:39][355084250790545][573 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:07:39][355084250790545][573 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDg0MjUwNzkwNTQ1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFk0MDBUOVhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU3MiJ9'" -e "main()" -q"
[2025-08-21 19:07:42][355084250790545][3196 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDg0MjUwNzkwNTQ1IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFk0MDBUOVhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU3MiJ9"\r\n
[2025-08-21 19:07:44][355084250790545][5196 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_017f7ed0-e51b-40cf-ab19-d8a8f91c66c2","id":"QR_017f7ed0-e51b-40cf-ab19-d8a8f91c66c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:07:44][355084250790545][5196 ms][DEBUG] proc_open done in 4623 ms; code=0; res.len=3152
[2025-08-21 19:07:44][355084250790545][5196 ms][DEBUG] END   runCmdUntilRes#1 in 4623 ms
[2025-08-21 19:07:44][355084250790545][5196 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:08:06][353520955595103][0 ms][INFO] === Request start ===
[2025-08-21 19:08:06][353520955595103][1 ms][DEBUG] START check_frida
[2025-08-21 19:08:06][353520955595103][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:08:07][353520955595103][315 ms][DEBUG] SU: done in 314 ms; outroot         16270     1 2295852  35856 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:08:07][353520955595103][315 ms][DEBUG] check_frida: running
[2025-08-21 19:08:07][353520955595103][315 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 19:08:07][353520955595103][315 ms][DEBUG] START check_internet
[2025-08-21 19:08:07][353520955595103][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:08:07][353520955595103][643 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.573/204.573/204.573/0.000 ms\n
[2025-08-21 19:08:07][353520955595103][643 ms][DEBUG] check_internet: online
[2025-08-21 19:08:07][353520955595103][644 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 19:08:07][353520955595103][644 ms][DEBUG] START check_scloud
[2025-08-21 19:08:07][353520955595103][644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:08:07][353520955595103][893 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23671056 97532 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:08:07][353520955595103][893 ms][DEBUG] targetPkg: running
[2025-08-21 19:08:07][353520955595103][893 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:08:07][353520955595103][893 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:08:07][353520955595103][894 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTIwOTU1NTk1MTAzIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMUQ5NjJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE5MyJ9'" -e "main()" -q"
[2025-08-21 19:08:07][353520955595103][894 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:08:07][353520955595103][894 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTIwOTU1NTk1MTAzIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMUQ5NjJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE5MyJ9'" -e "main()" -q"
[2025-08-21 19:08:10][353520955595103][3502 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNTIwOTU1NTk1MTAzIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMUQ5NjJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE5MyJ9"\r\n
[2025-08-21 19:08:12][353520955595103][5736 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a86014b6-d98f-4086-81c7-88c9ef06e0a2","id":"QR_a86014b6-d98f-4086-81c7-88c9ef06e0a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:08:12][353520955595103][5736 ms][DEBUG] proc_open done in 4842 ms; code=0; res.len=3152
[2025-08-21 19:08:12][353520955595103][5736 ms][DEBUG] END   runCmdUntilRes#1 in 4842 ms
[2025-08-21 19:08:12][353520955595103][5736 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:08:42][351537275976625][0 ms][INFO] === Request start ===
[2025-08-21 19:08:42][351537275976625][1 ms][DEBUG] START check_frida
[2025-08-21 19:08:42][351537275976625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:08:42][351537275976625][258 ms][DEBUG] SU: done in 256 ms; outroot         16270     1 2295852  35864 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:08:42][351537275976625][258 ms][DEBUG] check_frida: running
[2025-08-21 19:08:42][351537275976625][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 19:08:42][351537275976625][258 ms][DEBUG] START check_internet
[2025-08-21 19:08:42][351537275976625][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:08:42][351537275976625][523 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=155 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 155.410/155.410/155.410/0.000 ms\n
[2025-08-21 19:08:42][351537275976625][523 ms][DEBUG] check_internet: online
[2025-08-21 19:08:42][351537275976625][523 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 19:08:42][351537275976625][523 ms][DEBUG] START check_scloud
[2025-08-21 19:08:42][351537275976625][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:08:42][351537275976625][789 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23671216 97192 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:08:42][351537275976625][789 ms][DEBUG] targetPkg: running
[2025-08-21 19:08:42][351537275976625][789 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 19:08:42][351537275976625][789 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:08:42][351537275976625][789 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc1OTc2NjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEFGNlhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MDM2In0='" -e "main()" -q"
[2025-08-21 19:08:42][351537275976625][789 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:08:42][351537275976625][789 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTM3Mjc1OTc2NjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEFGNlhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MDM2In0='" -e "main()" -q"
[2025-08-21 19:08:45][351537275976625][3428 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTM3Mjc1OTc2NjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1g0MEFGNlhLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MDM2In0="\r\n
[2025-08-21 19:08:48][351537275976625][6303 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22610b5a-5d58-456f-81e0-ae9f3005971f","id":"QR_22610b5a-5d58-456f-81e0-ae9f3005971f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:08:48][351537275976625][6303 ms][DEBUG] proc_open done in 5514 ms; code=0; res.len=3152
[2025-08-21 19:08:48][351537275976625][6303 ms][DEBUG] END   runCmdUntilRes#1 in 5514 ms
[2025-08-21 19:08:48][351537275976625][6304 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:10:10][351642481185050][1 ms][INFO] === Request start ===
[2025-08-21 19:10:10][351642481185050][2 ms][DEBUG] START check_frida
[2025-08-21 19:10:10][351642481185050][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:10:10][351642481185050][307 ms][DEBUG] SU: done in 305 ms; outroot         16270     1 2294840  33268 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:10:10][351642481185050][307 ms][DEBUG] check_frida: running
[2025-08-21 19:10:10][351642481185050][307 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 19:10:10][351642481185050][307 ms][DEBUG] START check_internet
[2025-08-21 19:10:10][351642481185050][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:10:10][351642481185050][635 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.358/214.358/214.358/0.000 ms\n
[2025-08-21 19:10:10][351642481185050][635 ms][DEBUG] check_internet: online
[2025-08-21 19:10:10][351642481185050][635 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 19:10:10][351642481185050][635 ms][DEBUG] START check_scloud
[2025-08-21 19:10:10][351642481185050][635 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:10:10][351642481185050][932 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23671248 97812 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:10:10][351642481185050][932 ms][DEBUG] targetPkg: running
[2025-08-21 19:10:10][351642481185050][932 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 19:10:10][351642481185050][932 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:10:10][351642481185050][932 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDgxMTg1MDUwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMEc3UkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMwNyJ9'" -e "main()" -q"
[2025-08-21 19:10:10][351642481185050][932 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:10:10][351642481185050][932 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjQyNDgxMTg1MDUwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMEc3UkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMwNyJ9'" -e "main()" -q"
[2025-08-21 19:10:13][351642481185050][3587 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjQyNDgxMTg1MDUwIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgzMEc3UkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzMwNyJ9"\r\n
[2025-08-21 19:10:15][351642481185050][5837 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac8649d5-9b21-48ab-b9f8-2bc0d0e1a09b","id":"QR_ac8649d5-9b21-48ab-b9f8-2bc0d0e1a09b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:10:15][351642481185050][5837 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 19:10:15][351642481185050][5837 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 19:10:15][351642481185050][5837 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:10:26][350545461976110][0 ms][INFO] === Request start ===
[2025-08-21 19:10:26][350545461976110][1 ms][DEBUG] START check_frida
[2025-08-21 19:10:26][350545461976110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:10:27][350545461976110][309 ms][DEBUG] SU: done in 308 ms; outroot         16270     1 2312272  31384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:10:27][350545461976110][309 ms][DEBUG] check_frida: running
[2025-08-21 19:10:27][350545461976110][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 19:10:27][350545461976110][309 ms][DEBUG] START check_internet
[2025-08-21 19:10:27][350545461976110][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:10:27][350545461976110][606 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.954/181.954/181.954/0.000 ms\n
[2025-08-21 19:10:27][350545461976110][606 ms][DEBUG] check_internet: online
[2025-08-21 19:10:27][350545461976110][606 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 19:10:27][350545461976110][606 ms][DEBUG] START check_scloud
[2025-08-21 19:10:27][350545461976110][606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:10:27][350545461976110][871 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23671280 98396 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:10:27][350545461976110][871 ms][DEBUG] targetPkg: running
[2025-08-21 19:10:27][350545461976110][871 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 19:10:27][350545461976110][871 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:10:27][350545461976110][871 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYxOTc2MTEwIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzkwRUJIVFIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1YTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Nzg4In0='" -e "main()" -q"
[2025-08-21 19:10:27][350545461976110][872 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:10:27][350545461976110][872 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYxOTc2MTEwIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzkwRUJIVFIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1YTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Nzg4In0='" -e "main()" -q"
[2025-08-21 19:10:30][350545461976110][3495 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTQ1NDYxOTc2MTEwIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzkwRUJIVFIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6Ik1YTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Nzg4In0="\r\n
[2025-08-21 19:10:32][350545461976110][5636 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11a48929-8d49-4ad5-ad50-21b63f8e9b0a","id":"QR_11a48929-8d49-4ad5-ad50-21b63f8e9b0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:10:32][350545461976110][5636 ms][DEBUG] proc_open done in 4764 ms; code=0; res.len=3152
[2025-08-21 19:10:32][350545461976110][5636 ms][DEBUG] END   runCmdUntilRes#1 in 4764 ms
[2025-08-21 19:10:32][350545461976110][5636 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:12:08][351393982744264][0 ms][INFO] === Request start ===
[2025-08-21 19:12:08][351393982744264][1 ms][DEBUG] START check_frida
[2025-08-21 19:12:08][351393982744264][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:12:08][351393982744264][323 ms][DEBUG] SU: done in 321 ms; outroot         16270     1 2295852  31384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:12:08][351393982744264][323 ms][DEBUG] check_frida: running
[2025-08-21 19:12:08][351393982744264][323 ms][DEBUG] END   check_frida in 322 ms
[2025-08-21 19:12:08][351393982744264][323 ms][DEBUG] START check_internet
[2025-08-21 19:12:08][351393982744264][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:12:09][351393982744264][822 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.606/202.606/202.606/0.000 ms\n
[2025-08-21 19:12:09][351393982744264][822 ms][DEBUG] check_internet: online
[2025-08-21 19:12:09][351393982744264][822 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 19:12:09][351393982744264][823 ms][DEBUG] START check_scloud
[2025-08-21 19:12:09][351393982744264][823 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:12:09][351393982744264][1119 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23671312 98056 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:12:09][351393982744264][1119 ms][DEBUG] targetPkg: running
[2025-08-21 19:12:09][351393982744264][1120 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 19:12:09][351393982744264][1120 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:12:09][351393982744264][1120 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzkzOTgyNzQ0MjY0IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q0MFBXTkJEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTkwNCJ9'" -e "main()" -q"
[2025-08-21 19:12:09][351393982744264][1120 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:12:09][351393982744264][1120 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzkzOTgyNzQ0MjY0IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q0MFBXTkJEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTkwNCJ9'" -e "main()" -q"
[2025-08-21 19:12:12][351393982744264][3759 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzkzOTgyNzQ0MjY0IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q0MFBXTkJEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTkwNCJ9"\r\n
[2025-08-21 19:12:14][351393982744264][5993 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c13332d-610d-4137-a584-89b7ab067446","id":"QR_9c13332d-610d-4137-a584-89b7ab067446","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:12:14][351393982744264][5993 ms][DEBUG] proc_open done in 4873 ms; code=0; res.len=3152
[2025-08-21 19:12:14][351393982744264][5993 ms][DEBUG] END   runCmdUntilRes#1 in 4873 ms
[2025-08-21 19:12:14][351393982744264][5993 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:12:15][350938280210300][1 ms][INFO] === Request start ===
[2025-08-21 19:12:15][350938280210300][1 ms][DEBUG] START check_frida
[2025-08-21 19:12:15][350938280210300][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:12:15][350938280210300][280 ms][DEBUG] SU: done in 279 ms; outroot         16270     1 2312272  31368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:12:15][350938280210300][280 ms][DEBUG] check_frida: running
[2025-08-21 19:12:15][350938280210300][280 ms][DEBUG] END   check_frida in 279 ms
[2025-08-21 19:12:15][350938280210300][280 ms][DEBUG] START check_internet
[2025-08-21 19:12:15][350938280210300][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:12:15][350938280210300][546 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.340/144.340/144.340/0.000 ms\n
[2025-08-21 19:12:15][350938280210300][546 ms][DEBUG] check_internet: online
[2025-08-21 19:12:15][350938280210300][546 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 19:12:15][350938280210300][546 ms][DEBUG] START check_scloud
[2025-08-21 19:12:15][350938280210300][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:12:16][350938280210300][859 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23671344 97308 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:12:16][350938280210300][859 ms][DEBUG] targetPkg: running
[2025-08-21 19:12:16][350938280210300][859 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 19:12:16][350938280210300][859 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:12:16][350938280210300][859 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4MjgwMjEwMzAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMFAzMTNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU4NSJ9'" -e "main()" -q"
[2025-08-21 19:12:16][350938280210300][859 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:12:16][350938280210300][859 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4MjgwMjEwMzAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMFAzMTNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU4NSJ9'" -e "main()" -q"
[2025-08-21 19:12:18][350938280210300][3483 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4MjgwMjEwMzAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMFAzMTNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU4NSJ9"\r\n
[2025-08-21 19:12:20][350938280210300][5201 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0df6807b-0821-4950-b3b6-e7c7e46ffec9","id":"QR_0df6807b-0821-4950-b3b6-e7c7e46ffec9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:12:20][350938280210300][5201 ms][DEBUG] proc_open done in 4342 ms; code=0; res.len=3152
[2025-08-21 19:12:20][350938280210300][5201 ms][DEBUG] END   runCmdUntilRes#1 in 4342 ms
[2025-08-21 19:12:20][350938280210300][5201 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:12:20][351554740240545][1 ms][INFO] === Request start ===
[2025-08-21 19:12:20][351554740240545][1 ms][DEBUG] START check_frida
[2025-08-21 19:12:20][351554740240545][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:12:21][351554740240545][286 ms][DEBUG] SU: done in 285 ms; outroot         16270     1 2312272  31376 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:12:21][351554740240545][286 ms][DEBUG] check_frida: running
[2025-08-21 19:12:21][351554740240545][286 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 19:12:21][351554740240545][286 ms][DEBUG] START check_internet
[2025-08-21 19:12:21][351554740240545][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:12:21][351554740240545][552 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.720/136.720/136.720/0.000 ms\n
[2025-08-21 19:12:21][351554740240545][552 ms][DEBUG] check_internet: online
[2025-08-21 19:12:21][351554740240545][552 ms][DEBUG] END   check_internet in 266 ms
[2025-08-21 19:12:21][351554740240545][552 ms][DEBUG] START check_scloud
[2025-08-21 19:12:21][351554740240545][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:12:21][351554740240545][834 ms][DEBUG] SU: done in 282 ms; outu0_a118      16385  4994 23671376 97964 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:12:21][351554740240545][834 ms][DEBUG] targetPkg: running
[2025-08-21 19:12:21][351554740240545][835 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-21 19:12:21][351554740240545][835 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:12:21][351554740240545][835 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTU0NzQwMjQwNTQ1IiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QxMDRQUUZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIzNSJ9'" -e "main()" -q"
[2025-08-21 19:12:21][351554740240545][835 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:12:21][351554740240545][835 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNTU0NzQwMjQwNTQ1IiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QxMDRQUUZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIzNSJ9'" -e "main()" -q"
[2025-08-21 19:12:24][351554740240545][3473 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNTU0NzQwMjQwNTQ1IiwibW9kZWwiOiJTTS1BMzI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1QxMDRQUUZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjIzNSJ9"\r\n
[2025-08-21 19:12:25][351554740240545][5035 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdac552b-b890-4c31-a71c-b263676e1436","id":"QR_bdac552b-b890-4c31-a71c-b263676e1436","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:12:25][351554740240545][5035 ms][DEBUG] proc_open done in 4200 ms; code=0; res.len=3152
[2025-08-21 19:12:25][351554740240545][5036 ms][DEBUG] END   runCmdUntilRes#1 in 4201 ms
[2025-08-21 19:12:25][351554740240545][5036 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:13:09][352501917320716][1 ms][INFO] === Request start ===
[2025-08-21 19:13:09][352501917320716][2 ms][DEBUG] START check_frida
[2025-08-21 19:13:09][352501917320716][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:13:09][352501917320716][306 ms][DEBUG] SU: done in 305 ms; outroot         16270     1 2295852  31400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:13:09][352501917320716][306 ms][DEBUG] check_frida: running
[2025-08-21 19:13:09][352501917320716][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 19:13:09][352501917320716][306 ms][DEBUG] START check_scloud
[2025-08-21 19:13:09][352501917320716][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:13:10][352501917320716][556 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23671408 98536 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:13:10][352501917320716][556 ms][DEBUG] targetPkg: running
[2025-08-21 19:13:10][352501917320716][556 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:13:10][352501917320716][556 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:13:10][352501917320716][556 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTAxOTE3MzIwNzE2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MEpWODFOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzExNiJ9'" -e "main()" -q"
[2025-08-21 19:13:10][352501917320716][557 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:13:10][352501917320716][557 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTAxOTE3MzIwNzE2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MEpWODFOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzExNiJ9'" -e "main()" -q"
[2025-08-21 19:13:12][352501917320716][3180 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTAxOTE3MzIwNzE2IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MEpWODFOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzExNiJ9"\r\n
[2025-08-21 19:13:14][352501917320716][5336 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02c44fca-e7f7-4236-b6d4-0d4aeff0d9b8","id":"QR_02c44fca-e7f7-4236-b6d4-0d4aeff0d9b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:13:14][352501917320716][5336 ms][DEBUG] proc_open done in 4780 ms; code=0; res.len=3152
[2025-08-21 19:13:14][352501917320716][5336 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-21 19:13:14][352501917320716][5336 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:14:10][350751179875970][0 ms][INFO] === Request start ===
[2025-08-21 19:14:10][350751179875970][1 ms][DEBUG] START check_frida
[2025-08-21 19:14:10][350751179875970][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:14:11][350751179875970][269 ms][DEBUG] SU: done in 268 ms; outroot         16270     1 2311260  31368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:14:11][350751179875970][269 ms][DEBUG] check_frida: running
[2025-08-21 19:14:11][350751179875970][269 ms][DEBUG] END   check_frida in 268 ms
[2025-08-21 19:14:11][350751179875970][269 ms][DEBUG] START check_internet
[2025-08-21 19:14:11][350751179875970][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:14:11][350751179875970][597 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.352/228.352/228.352/0.000 ms\n
[2025-08-21 19:14:11][350751179875970][597 ms][DEBUG] check_internet: online
[2025-08-21 19:14:11][350751179875970][597 ms][DEBUG] END   check_internet in 329 ms
[2025-08-21 19:14:11][350751179875970][597 ms][DEBUG] START check_scloud
[2025-08-21 19:14:11][350751179875970][597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:14:11][350751179875970][878 ms][DEBUG] SU: done in 280 ms; outu0_a118      16385  4994 23671440 96740 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:14:11][350751179875970][878 ms][DEBUG] targetPkg: running
[2025-08-21 19:14:11][350751179875970][878 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 19:14:11][350751179875970][878 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:14:11][350751179875970][878 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzUxMTc5ODc1OTcwIiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJCMzgyU1FaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjAyNSJ9'" -e "main()" -q"
[2025-08-21 19:14:11][350751179875970][878 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:14:11][350751179875970][878 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzUxMTc5ODc1OTcwIiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJCMzgyU1FaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjAyNSJ9'" -e "main()" -q"
[2025-08-21 19:14:14][350751179875970][3549 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzUxMTc5ODc1OTcwIiwibW9kZWwiOiJTTS1BNTI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJCMzgyU1FaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjAyNSJ9"\r\n
[2025-08-21 19:14:16][350751179875970][5689 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91d46485-88fb-4df6-a208-e74d4018ba1d","id":"QR_91d46485-88fb-4df6-a208-e74d4018ba1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:14:16][350751179875970][5689 ms][DEBUG] proc_open done in 4811 ms; code=0; res.len=3152
[2025-08-21 19:14:16][350751179875970][5689 ms][DEBUG] END   runCmdUntilRes#1 in 4811 ms
[2025-08-21 19:14:16][350751179875970][5689 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:14:22][350498050991357][0 ms][INFO] === Request start ===
[2025-08-21 19:14:22][350498050991357][0 ms][DEBUG] START check_frida
[2025-08-21 19:14:22][350498050991357][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:14:22][350498050991357][281 ms][DEBUG] SU: done in 281 ms; outroot         16270     1 2312272  27388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:14:22][350498050991357][281 ms][DEBUG] check_frida: running
[2025-08-21 19:14:22][350498050991357][281 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 19:14:22][350498050991357][281 ms][DEBUG] START check_internet
[2025-08-21 19:14:22][350498050991357][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:14:23][350498050991357][562 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=176 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 176.928/176.928/176.928/0.000 ms\n
[2025-08-21 19:14:23][350498050991357][562 ms][DEBUG] check_internet: online
[2025-08-21 19:14:23][350498050991357][562 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 19:14:23][350498050991357][562 ms][DEBUG] START check_scloud
[2025-08-21 19:14:23][350498050991357][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:14:23][350498050991357][797 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23671472 95092 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:14:23][350498050991357][797 ms][DEBUG] targetPkg: running
[2025-08-21 19:14:23][350498050991357][797 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 19:14:23][350498050991357][797 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:14:23][350498050991357][797 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDUwOTkxMzU3IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RCMTRDQkxEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTkzMyJ9'" -e "main()" -q"
[2025-08-21 19:14:23][350498050991357][797 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:14:23][350498050991357][797 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDUwOTkxMzU3IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RCMTRDQkxEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTkzMyJ9'" -e "main()" -q"
[2025-08-21 19:14:26][350498050991357][3390 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDk4MDUwOTkxMzU3IiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RCMTRDQkxEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTkzMyJ9"\r\n
[2025-08-21 19:14:27][350498050991357][5358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52cc32aa-7e99-4e52-99b1-39c44c703dde","id":"QR_52cc32aa-7e99-4e52-99b1-39c44c703dde","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:14:27][350498050991357][5359 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-21 19:14:27][350498050991357][5359 ms][DEBUG] END   runCmdUntilRes#1 in 4561 ms
[2025-08-21 19:14:27][350498050991357][5359 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:14:34][357066605110055][0 ms][INFO] === Request start ===
[2025-08-21 19:14:34][357066605110055][1 ms][DEBUG] START check_frida
[2025-08-21 19:14:34][357066605110055][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:14:34][357066605110055][318 ms][DEBUG] SU: done in 317 ms; outroot         16270     1 2312272  27372 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:14:34][357066605110055][318 ms][DEBUG] check_frida: running
[2025-08-21 19:14:34][357066605110055][318 ms][DEBUG] END   check_frida in 317 ms
[2025-08-21 19:14:34][357066605110055][318 ms][DEBUG] START check_internet
[2025-08-21 19:14:34][357066605110055][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:14:34][357066605110055][662 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.024/237.024/237.024/0.000 ms\n
[2025-08-21 19:14:34][357066605110055][662 ms][DEBUG] check_internet: online
[2025-08-21 19:14:34][357066605110055][662 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 19:14:34][357066605110055][662 ms][DEBUG] START check_scloud
[2025-08-21 19:14:34][357066605110055][662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:14:35][357066605110055][974 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23671504 95668 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:14:35][357066605110055][974 ms][DEBUG] targetPkg: running
[2025-08-21 19:14:35][357066605110055][974 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 19:14:35][357066605110055][974 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:14:35][357066605110055][974 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDY2NjA1MTEwMDU1IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMjdNOEhEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUzNSJ9'" -e "main()" -q"
[2025-08-21 19:14:35][357066605110055][974 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:14:35][357066605110055][974 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDY2NjA1MTEwMDU1IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMjdNOEhEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUzNSJ9'" -e "main()" -q"
[2025-08-21 19:14:37][357066605110055][3583 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MDY2NjA1MTEwMDU1IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMjdNOEhEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUzNSJ9"\r\n
[2025-08-21 19:14:39][357066605110055][5410 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a6c633d-283d-470f-83fd-22fa7992f9a0","id":"QR_0a6c633d-283d-470f-83fd-22fa7992f9a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:14:39][357066605110055][5411 ms][DEBUG] proc_open done in 4436 ms; code=0; res.len=3152
[2025-08-21 19:14:39][357066605110055][5411 ms][DEBUG] END   runCmdUntilRes#1 in 4436 ms
[2025-08-21 19:14:39][357066605110055][5411 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:14:58][354747953097282][0 ms][INFO] === Request start ===
[2025-08-21 19:14:58][354747953097282][1 ms][DEBUG] START check_frida
[2025-08-21 19:14:58][354747953097282][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:14:59][354747953097282][254 ms][DEBUG] SU: done in 253 ms; outroot         16270     1 2295852  27372 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:14:59][354747953097282][254 ms][DEBUG] check_frida: running
[2025-08-21 19:14:59][354747953097282][254 ms][DEBUG] END   check_frida in 253 ms
[2025-08-21 19:14:59][354747953097282][254 ms][DEBUG] START check_internet
[2025-08-21 19:14:59][354747953097282][254 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:14:59][354747953097282][550 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.376/172.376/172.376/0.000 ms\n
[2025-08-21 19:14:59][354747953097282][550 ms][DEBUG] check_internet: online
[2025-08-21 19:14:59][354747953097282][551 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 19:14:59][354747953097282][551 ms][DEBUG] START check_scloud
[2025-08-21 19:14:59][354747953097282][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:14:59][354747953097282][816 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23671536 96356 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:14:59][354747953097282][816 ms][DEBUG] targetPkg: running
[2025-08-21 19:14:59][354747953097282][816 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 19:14:59][354747953097282][816 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:14:59][354747953097282][816 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUzMDk3MjgyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDMxMUJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM2NCJ9'" -e "main()" -q"
[2025-08-21 19:14:59][354747953097282][816 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:14:59][354747953097282][816 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUzMDk3MjgyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDMxMUJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM2NCJ9'" -e "main()" -q"
[2025-08-21 19:15:02][354747953097282][3440 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTUzMDk3MjgyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDMxMUJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM2NCJ9"\r\n
[2025-08-21 19:15:04][354747953097282][5283 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2dfa91b0-83ad-45c5-a16e-e80f798d795b","id":"QR_2dfa91b0-83ad-45c5-a16e-e80f798d795b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:15:04][354747953097282][5284 ms][DEBUG] proc_open done in 4467 ms; code=0; res.len=3152
[2025-08-21 19:15:04][354747953097282][5284 ms][DEBUG] END   runCmdUntilRes#1 in 4467 ms
[2025-08-21 19:15:04][354747953097282][5284 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:15:08][351381560363102][0 ms][INFO] === Request start ===
[2025-08-21 19:15:08][351381560363102][1 ms][DEBUG] START check_frida
[2025-08-21 19:15:08][351381560363102][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:15:09][351381560363102][303 ms][DEBUG] SU: done in 302 ms; outroot         16270     1 2312272  27388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:15:09][351381560363102][303 ms][DEBUG] check_frida: running
[2025-08-21 19:15:09][351381560363102][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 19:15:09][351381560363102][303 ms][DEBUG] START check_scloud
[2025-08-21 19:15:09][351381560363102][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:15:09][351381560363102][537 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23671568 95988 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:15:09][351381560363102][537 ms][DEBUG] targetPkg: running
[2025-08-21 19:15:09][351381560363102][537 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 19:15:09][351381560363102][537 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:15:09][351381560363102][537 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzgxNTYwMzYzMTAyIiwibW9kZWwiOiJTTS1GOTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q4ME4yMVhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDQyIn0='" -e "main()" -q"
[2025-08-21 19:15:09][351381560363102][538 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:15:09][351381560363102][538 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzgxNTYwMzYzMTAyIiwibW9kZWwiOiJTTS1GOTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q4ME4yMVhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDQyIn0='" -e "main()" -q"
[2025-08-21 19:15:11][351381560363102][3161 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzgxNTYwMzYzMTAyIiwibW9kZWwiOiJTTS1GOTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q4ME4yMVhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDQyIn0="\r\n
[2025-08-21 19:15:15][351381560363102][6317 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c680876-ac6c-4be4-9d3f-9697b8ee0629","id":"QR_0c680876-ac6c-4be4-9d3f-9697b8ee0629","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:15:15][351381560363102][6318 ms][DEBUG] proc_open done in 5780 ms; code=0; res.len=3152
[2025-08-21 19:15:15][351381560363102][6318 ms][DEBUG] END   runCmdUntilRes#1 in 5780 ms
[2025-08-21 19:15:15][351381560363102][6318 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:16:25][354775290435816][1 ms][INFO] === Request start ===
[2025-08-21 19:16:25][354775290435816][2 ms][DEBUG] START check_frida
[2025-08-21 19:16:25][354775290435816][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:16:25][354775290435816][287 ms][DEBUG] SU: done in 286 ms; outroot         16270     1 2294840  27320 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:16:25][354775290435816][287 ms][DEBUG] check_frida: running
[2025-08-21 19:16:25][354775290435816][288 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 19:16:25][354775290435816][288 ms][DEBUG] START check_internet
[2025-08-21 19:16:25][354775290435816][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:16:26][354775290435816][647 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.662/245.662/245.662/0.000 ms\n
[2025-08-21 19:16:26][354775290435816][647 ms][DEBUG] check_internet: online
[2025-08-21 19:16:26][354775290435816][647 ms][DEBUG] END   check_internet in 360 ms
[2025-08-21 19:16:26][354775290435816][647 ms][DEBUG] START check_scloud
[2025-08-21 19:16:26][354775290435816][647 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:16:26][354775290435816][897 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23671600 96528 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:16:26][354775290435816][897 ms][DEBUG] targetPkg: running
[2025-08-21 19:16:26][354775290435816][897 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:16:26][354775290435816][897 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:16:26][354775290435816][897 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0Nzc1MjkwNDM1ODE2IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMjhHRFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDYxIn0='" -e "main()" -q"
[2025-08-21 19:16:26][354775290435816][897 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:16:26][354775290435816][897 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0Nzc1MjkwNDM1ODE2IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMjhHRFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDYxIn0='" -e "main()" -q"
[2025-08-21 19:16:29][354775290435816][3552 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0Nzc1MjkwNDM1ODE2IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMjhHRFpNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDYxIn0="\r\n
[2025-08-21 19:16:33][354775290435816][8098 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_56f0ea11-7b65-4bee-a311-434ced8b5f07","id":"QR_56f0ea11-7b65-4bee-a311-434ced8b5f07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:16:33][354775290435816][8098 ms][DEBUG] proc_open done in 7201 ms; code=0; res.len=3152
[2025-08-21 19:16:33][354775290435816][8098 ms][DEBUG] END   runCmdUntilRes#1 in 7201 ms
[2025-08-21 19:16:33][354775290435816][8098 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:19:07][355084250386252][1 ms][INFO] === Request start ===
[2025-08-21 19:19:07][355084250386252][2 ms][DEBUG] START check_frida
[2025-08-21 19:19:07][355084250386252][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:19:07][355084250386252][258 ms][DEBUG] SU: done in 256 ms; outroot         16270     1 2295852  27388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:19:07][355084250386252][258 ms][DEBUG] check_frida: running
[2025-08-21 19:19:07][355084250386252][258 ms][DEBUG] END   check_frida in 256 ms
[2025-08-21 19:19:07][355084250386252][258 ms][DEBUG] START check_scloud
[2025-08-21 19:19:07][355084250386252][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:19:07][355084250386252][507 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23671632 95760 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:19:07][355084250386252][508 ms][DEBUG] targetPkg: running
[2025-08-21 19:19:07][355084250386252][508 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:19:07][355084250386252][508 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:19:07][355084250386252][508 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDg0MjUwMzg2MjUyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFkyMDJONDdLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc3MyJ9'" -e "main()" -q"
[2025-08-21 19:19:07][355084250386252][508 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:19:07][355084250386252][508 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDg0MjUwMzg2MjUyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFkyMDJONDdLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc3MyJ9'" -e "main()" -q"
[2025-08-21 19:19:10][355084250386252][3132 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDg0MjUwMzg2MjUyIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFkyMDJONDdLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc3MyJ9"\r\n
[2025-08-21 19:19:12][355084250386252][5303 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72845476-c48f-4131-95e2-e0985fd08b2e","id":"QR_72845476-c48f-4131-95e2-e0985fd08b2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:19:12][355084250386252][5303 ms][DEBUG] proc_open done in 4795 ms; code=0; res.len=3152
[2025-08-21 19:19:12][355084250386252][5303 ms][DEBUG] END   runCmdUntilRes#1 in 4795 ms
[2025-08-21 19:19:12][355084250386252][5303 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:19:44][357334341663484][0 ms][INFO] === Request start ===
[2025-08-21 19:19:44][357334341663484][1 ms][DEBUG] START check_frida
[2025-08-21 19:19:44][357334341663484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:19:44][357334341663484][302 ms][DEBUG] SU: done in 301 ms; outroot         16270     1 2295852  27368 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:19:44][357334341663484][303 ms][DEBUG] check_frida: running
[2025-08-21 19:19:44][357334341663484][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 19:19:44][357334341663484][303 ms][DEBUG] START check_scloud
[2025-08-21 19:19:44][357334341663484][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:19:44][357334341663484][553 ms][DEBUG] SU: done in 251 ms; outu0_a118      16385  4994 23671664 96320 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:19:44][357334341663484][553 ms][DEBUG] targetPkg: running
[2025-08-21 19:19:44][357334341663484][553 ms][DEBUG] END   check_scloud in 251 ms
[2025-08-21 19:19:44][357334341663484][554 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:19:44][357334341663484][554 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzM0MzQxNjYzNDg0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MlI3MjFXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTk0NSJ9'" -e "main()" -q"
[2025-08-21 19:19:44][357334341663484][554 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:19:44][357334341663484][554 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzM0MzQxNjYzNDg0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MlI3MjFXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTk0NSJ9'" -e "main()" -q"
[2025-08-21 19:19:47][357334341663484][3176 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MzM0MzQxNjYzNDg0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MlI3MjFXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTk0NSJ9"\r\n
[2025-08-21 19:19:49][357334341663484][5081 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f416e12f-c532-4d7c-a9e0-6dc02f0139cd","id":"QR_f416e12f-c532-4d7c-a9e0-6dc02f0139cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:19:49][357334341663484][5082 ms][DEBUG] proc_open done in 4528 ms; code=0; res.len=3152
[2025-08-21 19:19:49][357334341663484][5082 ms][DEBUG] END   runCmdUntilRes#1 in 4528 ms
[2025-08-21 19:19:49][357334341663484][5082 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:21:08][354882174523137][1 ms][INFO] === Request start ===
[2025-08-21 19:21:08][354882174523137][2 ms][DEBUG] START check_frida
[2025-08-21 19:21:08][354882174523137][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:21:09][354882174523137][289 ms][DEBUG] SU: done in 287 ms; outroot         16270     1 2295852  27388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:21:09][354882174523137][289 ms][DEBUG] check_frida: running
[2025-08-21 19:21:09][354882174523137][289 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 19:21:09][354882174523137][289 ms][DEBUG] START check_scloud
[2025-08-21 19:21:09][354882174523137][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:21:09][354882174523137][523 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23671696 95828 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:21:09][354882174523137][524 ms][DEBUG] targetPkg: running
[2025-08-21 19:21:09][354882174523137][524 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 19:21:09][354882174523137][524 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:21:09][354882174523137][524 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0ODgyMTc0NTIzMTM3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQzMFY0N1dBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE2OCJ9'" -e "main()" -q"
[2025-08-21 19:21:09][354882174523137][524 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:21:09][354882174523137][524 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0ODgyMTc0NTIzMTM3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQzMFY0N1dBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE2OCJ9'" -e "main()" -q"
[2025-08-21 19:21:11][354882174523137][3148 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0ODgyMTc0NTIzMTM3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFQzMFY0N1dBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjE2OCJ9"\r\n
[2025-08-21 19:21:14][354882174523137][5303 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9a4e551-b323-44ea-bacf-c2152663b794","id":"QR_b9a4e551-b323-44ea-bacf-c2152663b794","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:21:14][354882174523137][5304 ms][DEBUG] proc_open done in 4779 ms; code=0; res.len=3152
[2025-08-21 19:21:14][354882174523137][5304 ms][DEBUG] END   runCmdUntilRes#1 in 4779 ms
[2025-08-21 19:21:14][354882174523137][5304 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:21:29][357799157584240][0 ms][INFO] === Request start ===
[2025-08-21 19:21:29][357799157584240][1 ms][DEBUG] START check_frida
[2025-08-21 19:21:29][357799157584240][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:21:30][357799157584240][319 ms][DEBUG] SU: done in 318 ms; outroot         16270     1 2311260  27380 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:21:30][357799157584240][319 ms][DEBUG] check_frida: running
[2025-08-21 19:21:30][357799157584240][320 ms][DEBUG] END   check_frida in 319 ms
[2025-08-21 19:21:30][357799157584240][320 ms][DEBUG] START check_scloud
[2025-08-21 19:21:30][357799157584240][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:21:30][357799157584240][601 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23671728 96268 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:21:30][357799157584240][601 ms][DEBUG] targetPkg: running
[2025-08-21 19:21:30][357799157584240][601 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 19:21:30][357799157584240][601 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:21:30][357799157584240][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzk5MTU3NTg0MjQwIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c1MDRSOTZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDc1In0='" -e "main()" -q"
[2025-08-21 19:21:30][357799157584240][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:21:30][357799157584240][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzk5MTU3NTg0MjQwIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c1MDRSOTZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDc1In0='" -e "main()" -q"
[2025-08-21 19:21:33][357799157584240][3240 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Nzk5MTU3NTg0MjQwIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c1MDRSOTZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDc1In0="\r\n
[2025-08-21 19:21:36][357799157584240][6740 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58320226-864d-4e70-a235-22fd3a039146","id":"QR_58320226-864d-4e70-a235-22fd3a039146","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:21:36][357799157584240][6740 ms][DEBUG] proc_open done in 6139 ms; code=0; res.len=3152
[2025-08-21 19:21:36][357799157584240][6740 ms][DEBUG] END   runCmdUntilRes#1 in 6139 ms
[2025-08-21 19:21:36][357799157584240][6740 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:21:59][353117557785883][1 ms][INFO] === Request start ===
[2025-08-21 19:21:59][353117557785883][2 ms][DEBUG] START check_frida
[2025-08-21 19:21:59][353117557785883][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:22:00][353117557785883][310 ms][DEBUG] SU: done in 308 ms; outroot         16270     1 2295852  25908 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:22:00][353117557785883][310 ms][DEBUG] check_frida: running
[2025-08-21 19:22:00][353117557785883][310 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 19:22:00][353117557785883][310 ms][DEBUG] START check_internet
[2025-08-21 19:22:00][353117557785883][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:22:00][353117557785883][825 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.012/202.012/202.012/0.000 ms\n
[2025-08-21 19:22:00][353117557785883][825 ms][DEBUG] check_internet: online
[2025-08-21 19:22:00][353117557785883][825 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 19:22:00][353117557785883][825 ms][DEBUG] START check_scloud
[2025-08-21 19:22:00][353117557785883][825 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:22:00][353117557785883][1091 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23671760 91220 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:22:00][353117557785883][1091 ms][DEBUG] targetPkg: running
[2025-08-21 19:22:00][353117557785883][1091 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 19:22:00][353117557785883][1091 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:22:00][353117557785883][1091 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTE3NTU3Nzg1ODgzIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cyMVFTMjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUzOCJ9'" -e "main()" -q"
[2025-08-21 19:22:00][353117557785883][1091 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:22:00][353117557785883][1091 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTE3NTU3Nzg1ODgzIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cyMVFTMjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUzOCJ9'" -e "main()" -q"
[2025-08-21 19:22:03][353117557785883][3715 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTE3NTU3Nzg1ODgzIiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cyMVFTMjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODUzOCJ9"\r\n
[2025-08-21 19:22:05][353117557785883][5777 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41f3bff1-1e7d-4b4b-bbf5-bce1fa005e30","id":"QR_41f3bff1-1e7d-4b4b-bbf5-bce1fa005e30","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:22:05][353117557785883][5777 ms][DEBUG] proc_open done in 4686 ms; code=0; res.len=3152
[2025-08-21 19:22:05][353117557785883][5777 ms][DEBUG] END   runCmdUntilRes#1 in 4686 ms
[2025-08-21 19:22:05][353117557785883][5777 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:23:06][353313362465684][0 ms][INFO] === Request start ===
[2025-08-21 19:23:06][353313362465684][1 ms][DEBUG] START check_frida
[2025-08-21 19:23:06][353313362465684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:23:06][353313362465684][320 ms][DEBUG] SU: done in 319 ms; outroot         16270     1 2295852  23184 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:23:06][353313362465684][320 ms][DEBUG] check_frida: running
[2025-08-21 19:23:06][353313362465684][320 ms][DEBUG] END   check_frida in 319 ms
[2025-08-21 19:23:06][353313362465684][320 ms][DEBUG] START check_scloud
[2025-08-21 19:23:06][353313362465684][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:23:07][353313362465684][632 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23671792 91644 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:23:07][353313362465684][632 ms][DEBUG] targetPkg: running
[2025-08-21 19:23:07][353313362465684][632 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 19:23:07][353313362465684][632 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:23:07][353313362465684][633 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzY4MiJ9'" -e "main()" -q"
[2025-08-21 19:23:07][353313362465684][633 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:23:07][353313362465684][633 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzY4MiJ9'" -e "main()" -q"
[2025-08-21 19:23:07][358141432765014][1 ms][INFO] === Request start ===
[2025-08-21 19:23:09][353313362465684][3272 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzEzMzYyNDY1Njg0IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEpNWDdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVE0iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzY4MiJ9"\r\n
[2025-08-21 19:23:11][353313362465684][5490 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7eaff3e-3a3b-4949-be07-2bc8a73c2c0c","id":"QR_e7eaff3e-3a3b-4949-be07-2bc8a73c2c0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:23:11][353313362465684][5491 ms][DEBUG] proc_open done in 4858 ms; code=0; res.len=3152
[2025-08-21 19:23:11][353313362465684][5491 ms][DEBUG] END   runCmdUntilRes#1 in 4859 ms
[2025-08-21 19:23:11][353313362465684][5491 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:23:12][358141432765014][5078 ms][DEBUG] START check_frida
[2025-08-21 19:23:12][358141432765014][5078 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:23:13][358141432765014][5390 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2312272  23188 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:23:13][358141432765014][5390 ms][DEBUG] check_frida: running
[2025-08-21 19:23:13][358141432765014][5390 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 19:23:13][358141432765014][5391 ms][DEBUG] START check_scloud
[2025-08-21 19:23:13][358141432765014][5391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:23:13][358141432765014][5640 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23671824 91276 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:23:13][358141432765014][5640 ms][DEBUG] targetPkg: running
[2025-08-21 19:23:13][358141432765014][5640 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:23:13][358141432765014][5640 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:23:13][358141432765014][5641 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTQxNDMyNzY1MDE0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkzME1DWlpCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUwNSJ9'" -e "main()" -q"
[2025-08-21 19:23:13][358141432765014][5641 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:23:13][358141432765014][5641 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTQxNDMyNzY1MDE0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkzME1DWlpCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUwNSJ9'" -e "main()" -q"
[2025-08-21 19:23:15][358141432765014][8249 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MTQxNDMyNzY1MDE0IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkzME1DWlpCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzUwNSJ9"\r\n
[2025-08-21 19:23:17][358141432765014][10077 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7bd1ed2-0105-4433-9cb9-24743554a081","id":"QR_b7bd1ed2-0105-4433-9cb9-24743554a081","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:23:17][358141432765014][10077 ms][DEBUG] proc_open done in 4436 ms; code=0; res.len=3152
[2025-08-21 19:23:17][358141432765014][10077 ms][DEBUG] END   runCmdUntilRes#1 in 4437 ms
[2025-08-21 19:23:17][358141432765014][10077 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:24:12][354994113677625][0 ms][INFO] === Request start ===
[2025-08-21 19:24:12][354994113677625][1 ms][DEBUG] START check_frida
[2025-08-21 19:24:12][354994113677625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:24:13][354994113677625][313 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2295852  23164 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:24:13][354994113677625][313 ms][DEBUG] check_frida: running
[2025-08-21 19:24:13][354994113677625][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 19:24:13][354994113677625][313 ms][DEBUG] START check_internet
[2025-08-21 19:24:13][354994113677625][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:24:13][354994113677625][642 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=217 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 217.147/217.147/217.147/0.000 ms\n
[2025-08-21 19:24:13][354994113677625][642 ms][DEBUG] check_internet: online
[2025-08-21 19:24:13][354994113677625][642 ms][DEBUG] END   check_internet in 329 ms
[2025-08-21 19:24:13][354994113677625][642 ms][DEBUG] START check_scloud
[2025-08-21 19:24:13][354994113677625][642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:24:13][354994113677625][922 ms][DEBUG] SU: done in 280 ms; outu0_a118      16385  4994 23671856 91816 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:24:13][354994113677625][922 ms][DEBUG] targetPkg: running
[2025-08-21 19:24:13][354994113677625][922 ms][DEBUG] END   check_scloud in 280 ms
[2025-08-21 19:24:13][354994113677625][922 ms][DEBUG] rawBody.length=1159
[2025-08-21 19:24:13][354994113677625][922 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTk0MTEzNjc3NjI1IiwibW9kZWwiOiJTTS1YOTAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVDUwOVRQQ0QiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFDIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzI1OTkifQ=='" -e "main()" -q"
[2025-08-21 19:24:13][354994113677625][923 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:24:13][354994113677625][923 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTk0MTEzNjc3NjI1IiwibW9kZWwiOiJTTS1YOTAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVDUwOVRQQ0QiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFDIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzI1OTkifQ=='" -e "main()" -q"
[2025-08-21 19:24:16][354994113677625][3578 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTk0MTEzNjc3NjI1IiwibW9kZWwiOiJTTS1YOTAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVDUwOVRQQ0QiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFDIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzI1OTkifQ=="\r\n
[2025-08-21 19:24:19][354994113677625][6108 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4733a75-2a4a-4abe-9404-0bdd1db70a50","id":"QR_a4733a75-2a4a-4abe-9404-0bdd1db70a50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:24:19][354994113677625][6108 ms][DEBUG] proc_open done in 5186 ms; code=0; res.len=3152
[2025-08-21 19:24:19][354994113677625][6108 ms][DEBUG] END   runCmdUntilRes#1 in 5186 ms
[2025-08-21 19:24:19][354994113677625][6108 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:24:51][352432794771385][1 ms][INFO] === Request start ===
[2025-08-21 19:24:51][352432794771385][2 ms][DEBUG] START check_frida
[2025-08-21 19:24:51][352432794771385][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:24:51][352432794771385][307 ms][DEBUG] SU: done in 305 ms; outroot         16270     1 2295852  23176 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:24:51][352432794771385][307 ms][DEBUG] check_frida: running
[2025-08-21 19:24:51][352432794771385][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 19:24:51][352432794771385][307 ms][DEBUG] START check_internet
[2025-08-21 19:24:51][352432794771385][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:24:51][352432794771385][619 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.999/190.999/190.999/0.000 ms\n
[2025-08-21 19:24:51][352432794771385][619 ms][DEBUG] check_internet: online
[2025-08-21 19:24:51][352432794771385][619 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 19:24:51][352432794771385][620 ms][DEBUG] START check_scloud
[2025-08-21 19:24:51][352432794771385][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:24:51][352432794771385][869 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677008 91848 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:24:51][352432794771385][869 ms][DEBUG] targetPkg: running
[2025-08-21 19:24:51][352432794771385][869 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:24:51][352432794771385][869 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:24:51][352432794771385][870 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDMyNzk0NzcxMzg1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMjhOWVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU3NyJ9'" -e "main()" -q"
[2025-08-21 19:24:51][352432794771385][870 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:24:51][352432794771385][870 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDMyNzk0NzcxMzg1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMjhOWVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU3NyJ9'" -e "main()" -q"
[2025-08-21 19:24:54][352432794771385][3540 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDMyNzk0NzcxMzg1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMjhOWVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjU3NyJ9"\r\n
[2025-08-21 19:24:56][352432794771385][5634 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25dbd3b9-c133-41df-b620-0f9419fcf84e","id":"QR_25dbd3b9-c133-41df-b620-0f9419fcf84e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:24:56][352432794771385][5634 ms][DEBUG] proc_open done in 4765 ms; code=0; res.len=3152
[2025-08-21 19:24:56][352432794771385][5634 ms][DEBUG] END   runCmdUntilRes#1 in 4765 ms
[2025-08-21 19:24:56][352432794771385][5634 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:25:11][350896383143572][1 ms][INFO] === Request start ===
[2025-08-21 19:25:11][350896383143572][2 ms][DEBUG] START check_frida
[2025-08-21 19:25:11][350896383143572][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:25:11][350896383143572][308 ms][DEBUG] SU: done in 307 ms; outroot         16270     1 2295852  23204 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:25:11][350896383143572][309 ms][DEBUG] check_frida: running
[2025-08-21 19:25:11][350896383143572][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 19:25:11][350896383143572][309 ms][DEBUG] START check_scloud
[2025-08-21 19:25:11][350896383143572][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:25:12][350896383143572][558 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677040 92424 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:25:12][350896383143572][559 ms][DEBUG] targetPkg: running
[2025-08-21 19:25:12][350896383143572][559 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:25:12][350896383143572][559 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:25:12][350896383143572][559 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzcwIn0='" -e "main()" -q"
[2025-08-21 19:25:12][350896383143572][559 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:25:12][350896383143572][559 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzcwIn0='" -e "main()" -q"
[2025-08-21 19:25:14][350896383143572][3229 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NzcwIn0="\r\n
[2025-08-21 19:25:18][350896383143572][6838 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-21 19:25:18][350896383143572][6838 ms][DEBUG] proc_open done in 6279 ms; code=0; res.len=115
[2025-08-21 19:25:18][350896383143572][6838 ms][DEBUG] END   runCmdUntilRes#1 in 6279 ms
[2025-08-21 19:25:18][350896383143572][6838 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-21 19:25:18][][0 ms][INFO] === Request start ===
[2025-08-21 19:25:18][][1 ms][DEBUG] START check_frida
[2025-08-21 19:25:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:25:19][][307 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2312272  23196 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:25:19][][308 ms][DEBUG] check_frida: running
[2025-08-21 19:25:19][][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 19:25:19][][308 ms][DEBUG] START check_scloud
[2025-08-21 19:25:19][][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:25:19][][604 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23677072 92024 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:25:19][][604 ms][DEBUG] targetPkg: running
[2025-08-21 19:25:19][][604 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 19:25:19][][604 ms][DEBUG] rawBody.length=1130
[2025-08-21 19:25:19][][605 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDIyIn0='" -e "main()" -q"
[2025-08-21 19:25:19][][605 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:25:19][][605 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDIyIn0='" -e "main()" -q"
[2025-08-21 19:25:22][][3244 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDIyIn0="\r\n
[2025-08-21 19:25:25][][6306 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 19:25:25][][6306 ms][DEBUG] proc_open done in 5701 ms; code=0; res.len=107
[2025-08-21 19:25:25][][6306 ms][DEBUG] END   runCmdUntilRes#1 in 5701 ms
[2025-08-21 19:25:25][][6306 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 19:25:25][][0 ms][INFO] === Request start ===
[2025-08-21 19:25:25][][1 ms][DEBUG] START check_frida
[2025-08-21 19:25:25][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:25:25][][301 ms][DEBUG] SU: done in 300 ms; outroot         16270     1 2312272  23204 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:25:25][][301 ms][DEBUG] check_frida: running
[2025-08-21 19:25:25][][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 19:25:25][][301 ms][DEBUG] START check_scloud
[2025-08-21 19:25:25][][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:25:25][][551 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677104 92552 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:25:25][][551 ms][DEBUG] targetPkg: running
[2025-08-21 19:25:25][][551 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:25:25][][551 ms][DEBUG] rawBody.length=1130
[2025-08-21 19:25:25][][551 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTEwIn0='" -e "main()" -q"
[2025-08-21 19:25:25][][551 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:25:25][][552 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTEwIn0='" -e "main()" -q"
[2025-08-21 19:25:28][][3191 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTEwIn0="\r\n
[2025-08-21 19:25:31][][6518 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 19:25:31][][6518 ms][DEBUG] proc_open done in 5967 ms; code=0; res.len=107
[2025-08-21 19:25:31][][6518 ms][DEBUG] END   runCmdUntilRes#1 in 5967 ms
[2025-08-21 19:25:31][][6518 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 19:25:32][350896383143572][0 ms][INFO] === Request start ===
[2025-08-21 19:25:32][350896383143572][1 ms][DEBUG] START check_frida
[2025-08-21 19:25:32][350896383143572][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:25:33][350896383143572][316 ms][DEBUG] SU: done in 315 ms; outroot         16270     1 2312272  23184 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:25:33][350896383143572][316 ms][DEBUG] check_frida: running
[2025-08-21 19:25:33][350896383143572][316 ms][DEBUG] END   check_frida in 315 ms
[2025-08-21 19:25:33][350896383143572][316 ms][DEBUG] START check_scloud
[2025-08-21 19:25:33][350896383143572][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:25:33][350896383143572][566 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677136 91292 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:25:33][350896383143572][566 ms][DEBUG] targetPkg: running
[2025-08-21 19:25:33][350896383143572][566 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:25:33][350896383143572][566 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:25:33][350896383143572][567 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA2NCJ9'" -e "main()" -q"
[2025-08-21 19:25:33][350896383143572][567 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:25:33][350896383143572][567 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA2NCJ9'" -e "main()" -q"
[2025-08-21 19:25:36][350896383143572][3206 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA2NCJ9"\r\n
[2025-08-21 19:25:37][350896383143572][5018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab50fc38-ac84-4f72-9583-94095e2f39f0","id":"QR_ab50fc38-ac84-4f72-9583-94095e2f39f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:25:37][350896383143572][5018 ms][DEBUG] proc_open done in 4452 ms; code=0; res.len=3152
[2025-08-21 19:25:37][350896383143572][5018 ms][DEBUG] END   runCmdUntilRes#1 in 4452 ms
[2025-08-21 19:25:37][350896383143572][5018 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:25:45][352682502408247][0 ms][INFO] === Request start ===
[2025-08-21 19:25:45][352682502408247][1 ms][DEBUG] START check_frida
[2025-08-21 19:25:45][352682502408247][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:25:45][352682502408247][299 ms][DEBUG] SU: done in 298 ms; outroot         16270     1 2312272  23168 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:25:45][352682502408247][300 ms][DEBUG] check_frida: running
[2025-08-21 19:25:45][352682502408247][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 19:25:45][352682502408247][300 ms][DEBUG] START check_scloud
[2025-08-21 19:25:45][352682502408247][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:25:46][352682502408247][612 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23677168 91872 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:25:46][352682502408247][612 ms][DEBUG] targetPkg: running
[2025-08-21 19:25:46][352682502408247][612 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 19:25:46][352682502408247][612 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:25:46][352682502408247][612 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjgyNTAyNDA4MjQ3IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE44Mkg5UFZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzI3In0='" -e "main()" -q"
[2025-08-21 19:25:46][352682502408247][612 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:25:46][352682502408247][612 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjgyNTAyNDA4MjQ3IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE44Mkg5UFZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzI3In0='" -e "main()" -q"
[2025-08-21 19:25:48][352682502408247][3252 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjgyNTAyNDA4MjQ3IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE44Mkg5UFZXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzI3In0="\r\n
[2025-08-21 19:25:51][352682502408247][5688 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0d39a74-96bf-4887-8904-370649d13b04","id":"QR_e0d39a74-96bf-4887-8904-370649d13b04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:25:51][352682502408247][5689 ms][DEBUG] proc_open done in 5077 ms; code=0; res.len=3152
[2025-08-21 19:25:51][352682502408247][5689 ms][DEBUG] END   runCmdUntilRes#1 in 5077 ms
[2025-08-21 19:25:51][352682502408247][5689 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:26:07][350896384414519][1 ms][INFO] === Request start ===
[2025-08-21 19:26:07][350896384414519][2 ms][DEBUG] START check_frida
[2025-08-21 19:26:07][350896384414519][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:26:07][356185419983316][0 ms][INFO] === Request start ===
[2025-08-21 19:26:07][350896384414519][306 ms][DEBUG] SU: done in 304 ms; outroot         16270     1 2295852  23172 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:26:07][350896384414519][306 ms][DEBUG] check_frida: running
[2025-08-21 19:26:07][350896384414519][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 19:26:07][350896384414519][306 ms][DEBUG] START check_internet
[2025-08-21 19:26:07][350896384414519][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:26:07][350896384414519][618 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.916/192.916/192.916/0.000 ms\n
[2025-08-21 19:26:07][350896384414519][619 ms][DEBUG] check_internet: online
[2025-08-21 19:26:07][350896384414519][619 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 19:26:07][350896384414519][619 ms][DEBUG] START check_scloud
[2025-08-21 19:26:07][350896384414519][619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:26:08][350896384414519][868 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677200 91444 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:26:08][350896384414519][869 ms][DEBUG] targetPkg: running
[2025-08-21 19:26:08][350896384414519][869 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:26:08][350896384414519][869 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:26:08][350896384414519][869 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2Mzg0NDE0NTE5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMEsxRUxIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Mzk3In0='" -e "main()" -q"
[2025-08-21 19:26:08][350896384414519][869 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:26:08][350896384414519][869 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2Mzg0NDE0NTE5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMEsxRUxIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Mzk3In0='" -e "main()" -q"
[2025-08-21 19:26:10][350896384414519][3508 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2Mzg0NDE0NTE5IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMEsxRUxIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4Mzk3In0="\r\n
[2025-08-21 19:26:13][350896384414519][6133 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f88ae407-df1d-49e7-a4bb-5b7fe8ff30ed","id":"QR_f88ae407-df1d-49e7-a4bb-5b7fe8ff30ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:26:13][350896384414519][6133 ms][DEBUG] proc_open done in 5264 ms; code=0; res.len=3152
[2025-08-21 19:26:13][350896384414519][6133 ms][DEBUG] END   runCmdUntilRes#1 in 5264 ms
[2025-08-21 19:26:13][350896384414519][6134 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:26:13][356185419983316][6084 ms][DEBUG] START check_frida
[2025-08-21 19:26:13][356185419983316][6084 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:26:13][356185419983316][6381 ms][DEBUG] SU: done in 297 ms; outroot         16270     1 2312272  23196 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:26:13][356185419983316][6381 ms][DEBUG] check_frida: running
[2025-08-21 19:26:13][356185419983316][6381 ms][DEBUG] END   check_frida in 297 ms
[2025-08-21 19:26:13][356185419983316][6381 ms][DEBUG] START check_internet
[2025-08-21 19:26:13][356185419983316][6381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:26:14][356185419983316][6615 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=129 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 129.712/129.712/129.712/0.000 ms\n
[2025-08-21 19:26:14][356185419983316][6615 ms][DEBUG] check_internet: online
[2025-08-21 19:26:14][356185419983316][6616 ms][DEBUG] END   check_internet in 234 ms
[2025-08-21 19:26:14][356185419983316][6616 ms][DEBUG] START check_scloud
[2025-08-21 19:26:14][356185419983316][6616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:26:14][356185419983316][6865 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677232 91996 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:26:14][356185419983316][6865 ms][DEBUG] targetPkg: running
[2025-08-21 19:26:14][356185419983316][6865 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:26:14][356185419983316][6865 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:26:14][356185419983316][6866 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MTg1NDE5OTgzMzE2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDJORDZFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE0OCJ9'" -e "main()" -q"
[2025-08-21 19:26:14][356185419983316][6866 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:26:14][356185419983316][6866 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MTg1NDE5OTgzMzE2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDJORDZFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE0OCJ9'" -e "main()" -q"
[2025-08-21 19:26:17][356185419983316][9489 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MTg1NDE5OTgzMzE2IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJSOFQ4MDJORDZFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYTUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE0OCJ9"\r\n
[2025-08-21 19:26:19][356185419983316][11942 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08ac18f1-96ad-46d2-aa62-70997f4970b9","id":"QR_08ac18f1-96ad-46d2-aa62-70997f4970b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:26:19][356185419983316][11942 ms][DEBUG] proc_open done in 5076 ms; code=0; res.len=3152
[2025-08-21 19:26:19][356185419983316][11942 ms][DEBUG] END   runCmdUntilRes#1 in 5076 ms
[2025-08-21 19:26:19][356185419983316][11942 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:27:12][351782251288955][0 ms][INFO] === Request start ===
[2025-08-21 19:27:12][351782251288955][0 ms][DEBUG] START check_frida
[2025-08-21 19:27:12][351782251288955][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:27:12][351782251288955][294 ms][DEBUG] SU: done in 294 ms; outroot         16270     1 2295852  23172 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:27:12][351782251288955][295 ms][DEBUG] check_frida: running
[2025-08-21 19:27:12][351782251288955][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 19:27:12][351782251288955][295 ms][DEBUG] START check_scloud
[2025-08-21 19:27:12][351782251288955][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:27:13][351782251288955][591 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23677264 91116 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:27:13][351782251288955][591 ms][DEBUG] targetPkg: running
[2025-08-21 19:27:13][351782251288955][591 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 19:27:13][351782251288955][591 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:27:13][351782251288955][591 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzgyMjUxMjg4OTU1IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEg0VENQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTg0In0='" -e "main()" -q"
[2025-08-21 19:27:13][351782251288955][591 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:27:13][351782251288955][591 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzgyMjUxMjg4OTU1IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEg0VENQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTg0In0='" -e "main()" -q"
[2025-08-21 19:27:15][351782251288955][3231 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzgyMjUxMjg4OTU1IiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kyMEg0VENQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTg0In0="\r\n
[2025-08-21 19:27:20][351782251288955][7465 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63b74fec-3ec4-4b6d-b70f-5848e53f30da","id":"QR_63b74fec-3ec4-4b6d-b70f-5848e53f30da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:27:20][351782251288955][7465 ms][DEBUG] proc_open done in 6873 ms; code=0; res.len=3152
[2025-08-21 19:27:20][351782251288955][7465 ms][DEBUG] END   runCmdUntilRes#1 in 6873 ms
[2025-08-21 19:27:20][351782251288955][7465 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:28:02][352842930429492][0 ms][INFO] === Request start ===
[2025-08-21 19:28:02][352842930429492][1 ms][DEBUG] START check_frida
[2025-08-21 19:28:02][352842930429492][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:28:02][352842930429492][326 ms][DEBUG] SU: done in 325 ms; outroot         16270     1 2295852  23176 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:28:02][352842930429492][326 ms][DEBUG] check_frida: running
[2025-08-21 19:28:02][352842930429492][326 ms][DEBUG] END   check_frida in 325 ms
[2025-08-21 19:28:02][352842930429492][326 ms][DEBUG] START check_internet
[2025-08-21 19:28:02][352842930429492][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:28:02][352842930429492][842 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.892/200.892/200.892/0.000 ms\n
[2025-08-21 19:28:02][352842930429492][842 ms][DEBUG] check_internet: online
[2025-08-21 19:28:02][352842930429492][842 ms][DEBUG] END   check_internet in 516 ms
[2025-08-21 19:28:02][352842930429492][842 ms][DEBUG] START check_scloud
[2025-08-21 19:28:02][352842930429492][842 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:28:03][352842930429492][1123 ms][DEBUG] SU: done in 280 ms; outu0_a118      16385  4994 23677296 91680 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:28:03][352842930429492][1123 ms][DEBUG] targetPkg: running
[2025-08-21 19:28:03][352842930429492][1123 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 19:28:03][352842930429492][1123 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:28:03][352842930429492][1123 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODQyOTMwNDI5NDkyIiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MFFQQlBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM1MiJ9'" -e "main()" -q"
[2025-08-21 19:28:03][352842930429492][1123 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:28:03][352842930429492][1123 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODQyOTMwNDI5NDkyIiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MFFQQlBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM1MiJ9'" -e "main()" -q"
[2025-08-21 19:28:05][352842930429492][3778 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyODQyOTMwNDI5NDkyIiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MFFQQlBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM1MiJ9"\r\n
[2025-08-21 19:28:08][352842930429492][5949 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cac00d19-6911-45fc-93ab-71df8ef39519","id":"QR_cac00d19-6911-45fc-93ab-71df8ef39519","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:28:08][352842930429492][5949 ms][DEBUG] proc_open done in 4826 ms; code=0; res.len=3152
[2025-08-21 19:28:08][352842930429492][5950 ms][DEBUG] END   runCmdUntilRes#1 in 4827 ms
[2025-08-21 19:28:08][352842930429492][5950 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:28:58][351088108570292][0 ms][INFO] === Request start ===
[2025-08-21 19:28:58][351088108570292][1 ms][DEBUG] START check_frida
[2025-08-21 19:28:58][351088108570292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:28:58][351088108570292][304 ms][DEBUG] SU: done in 303 ms; outroot         16270     1 2295852  23192 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:28:58][351088108570292][304 ms][DEBUG] check_frida: running
[2025-08-21 19:28:58][351088108570292][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-21 19:28:58][351088108570292][304 ms][DEBUG] START check_internet
[2025-08-21 19:28:58][351088108570292][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:28:59][351088108570292][679 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.736/259.736/259.736/0.000 ms\n
[2025-08-21 19:28:59][351088108570292][679 ms][DEBUG] check_internet: online
[2025-08-21 19:28:59][351088108570292][679 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 19:28:59][351088108570292][680 ms][DEBUG] START check_scloud
[2025-08-21 19:28:59][351088108570292][680 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:28:59][351088108570292][960 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23677328 91524 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:28:59][351088108570292][960 ms][DEBUG] targetPkg: running
[2025-08-21 19:28:59][351088108570292][961 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 19:28:59][351088108570292][961 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:28:59][351088108570292][961 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDg4MTA4NTcwMjkyIiwibW9kZWwiOiJTTS1BNzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQxMDg0NUhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjQyIn0='" -e "main()" -q"
[2025-08-21 19:28:59][351088108570292][961 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:28:59][351088108570292][961 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDg4MTA4NTcwMjkyIiwibW9kZWwiOiJTTS1BNzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQxMDg0NUhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjQyIn0='" -e "main()" -q"
[2025-08-21 19:29:02][351088108570292][3616 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDg4MTA4NTcwMjkyIiwibW9kZWwiOiJTTS1BNzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQxMDg0NUhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjQyIn0="\r\n
[2025-08-21 19:29:05][351088108570292][6787 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9189b6f4-408c-4c24-bcef-b44018cc7064","id":"QR_9189b6f4-408c-4c24-bcef-b44018cc7064","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:29:05][351088108570292][6787 ms][DEBUG] proc_open done in 5826 ms; code=0; res.len=3152
[2025-08-21 19:29:05][351088108570292][6787 ms][DEBUG] END   runCmdUntilRes#1 in 5826 ms
[2025-08-21 19:29:05][351088108570292][6787 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:29:31][353204339825771][1 ms][INFO] === Request start ===
[2025-08-21 19:29:31][353204339825771][2 ms][DEBUG] START check_frida
[2025-08-21 19:29:31][353204339825771][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:29:31][353204339825771][314 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2295852  23204 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:29:31][353204339825771][314 ms][DEBUG] check_frida: running
[2025-08-21 19:29:31][353204339825771][314 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 19:29:31][353204339825771][314 ms][DEBUG] START check_scloud
[2025-08-21 19:29:31][353204339825771][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:29:31][353204339825771][548 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23677360 92072 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:29:31][353204339825771][548 ms][DEBUG] targetPkg: running
[2025-08-21 19:29:31][353204339825771][548 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 19:29:31][353204339825771][548 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:29:31][353204339825771][548 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjA0MzM5ODI1NzcxIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MThFWENGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDUyMSJ9'" -e "main()" -q"
[2025-08-21 19:29:31][353204339825771][548 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:29:31][353204339825771][548 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjA0MzM5ODI1NzcxIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MThFWENGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDUyMSJ9'" -e "main()" -q"
[2025-08-21 19:29:34][353204339825771][3219 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjA0MzM5ODI1NzcxIiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MThFWENGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDUyMSJ9"\r\n
[2025-08-21 19:29:36][353204339825771][5453 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8cf71566-1200-4550-aa45-c868bf46f45f","id":"QR_8cf71566-1200-4550-aa45-c868bf46f45f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:29:36][353204339825771][5453 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 19:29:36][353204339825771][5454 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 19:29:36][353204339825771][5454 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:30:52][357799150707921][1 ms][INFO] === Request start ===
[2025-08-21 19:30:52][357799150707921][1 ms][DEBUG] START check_frida
[2025-08-21 19:30:52][357799150707921][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:30:52][357799150707921][317 ms][DEBUG] SU: done in 315 ms; outroot         16270     1 2295852  23212 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:30:52][357799150707921][317 ms][DEBUG] check_frida: running
[2025-08-21 19:30:52][357799150707921][317 ms][DEBUG] END   check_frida in 316 ms
[2025-08-21 19:30:52][357799150707921][317 ms][DEBUG] START check_internet
[2025-08-21 19:30:52][357799150707921][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:30:52][357799150707921][582 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=166 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 166.505/166.505/166.505/0.000 ms\n
[2025-08-21 19:30:52][357799150707921][582 ms][DEBUG] check_internet: online
[2025-08-21 19:30:52][357799150707921][582 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 19:30:52][357799150707921][582 ms][DEBUG] START check_scloud
[2025-08-21 19:30:52][357799150707921][582 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:30:53][357799150707921][848 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23677392 91568 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:30:53][357799150707921][848 ms][DEBUG] targetPkg: running
[2025-08-21 19:30:53][357799150707921][848 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 19:30:53][357799150707921][848 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:30:53][357799150707921][848 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzk5MTUwNzA3OTIxIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c0MDJSWkFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDEyIn0='" -e "main()" -q"
[2025-08-21 19:30:53][357799150707921][848 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:30:53][357799150707921][848 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzk5MTUwNzA3OTIxIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c0MDJSWkFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDEyIn0='" -e "main()" -q"
[2025-08-21 19:30:55][357799150707921][3472 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Nzk5MTUwNzA3OTIxIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1c0MDJSWkFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDEyIn0="\r\n
[2025-08-21 19:31:01][357799150707921][9580 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9148a0de-3dec-4b57-b1f1-a7eb67d7b877","id":"QR_9148a0de-3dec-4b57-b1f1-a7eb67d7b877","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:31:01][357799150707921][9580 ms][DEBUG] proc_open done in 8732 ms; code=0; res.len=3152
[2025-08-21 19:31:01][357799150707921][9580 ms][DEBUG] END   runCmdUntilRes#1 in 8732 ms
[2025-08-21 19:31:01][357799150707921][9580 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:31:04][352648380345983][0 ms][INFO] === Request start ===
[2025-08-21 19:31:04][352648380345983][1 ms][DEBUG] START check_frida
[2025-08-21 19:31:04][352648380345983][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:31:04][352648380345983][300 ms][DEBUG] SU: done in 298 ms; outroot         16270     1 2312272  23216 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:31:04][352648380345983][300 ms][DEBUG] check_frida: running
[2025-08-21 19:31:04][352648380345983][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-21 19:31:04][352648380345983][300 ms][DEBUG] START check_scloud
[2025-08-21 19:31:04][352648380345983][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:31:05][352648380345983][534 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23677424 92124 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:31:05][352648380345983][534 ms][DEBUG] targetPkg: running
[2025-08-21 19:31:05][352648380345983][534 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 19:31:05][352648380345983][534 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:31:05][352648380345983][534 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjQ4MzgwMzQ1OTgzIiwibW9kZWwiOiJTTS1GNzY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k3MEc3VFFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjYwOCJ9'" -e "main()" -q"
[2025-08-21 19:31:05][352648380345983][535 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:31:05][352648380345983][535 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjQ4MzgwMzQ1OTgzIiwibW9kZWwiOiJTTS1GNzY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k3MEc3VFFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjYwOCJ9'" -e "main()" -q"
[2025-08-21 19:31:07][352648380345983][3205 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjQ4MzgwMzQ1OTgzIiwibW9kZWwiOiJTTS1GNzY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k3MEc3VFFBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjYwOCJ9"\r\n
[2025-08-21 19:31:09][352648380345983][5252 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d863c92b-8b6a-4844-8e46-6dd3b1497ba9","id":"QR_d863c92b-8b6a-4844-8e46-6dd3b1497ba9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:31:09][352648380345983][5252 ms][DEBUG] proc_open done in 4717 ms; code=0; res.len=3152
[2025-08-21 19:31:09][352648380345983][5252 ms][DEBUG] END   runCmdUntilRes#1 in 4717 ms
[2025-08-21 19:31:09][352648380345983][5252 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:32:09][352682501177504][1 ms][INFO] === Request start ===
[2025-08-21 19:32:09][352682501177504][2 ms][DEBUG] START check_frida
[2025-08-21 19:32:09][352682501177504][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:32:09][352682501177504][310 ms][DEBUG] SU: done in 308 ms; outroot         16270     1 2295852  23188 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:32:09][352682501177504][310 ms][DEBUG] check_frida: running
[2025-08-21 19:32:09][352682501177504][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 19:32:09][352682501177504][310 ms][DEBUG] START check_internet
[2025-08-21 19:32:09][352682501177504][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:32:10][352682501177504][857 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.219/200.219/200.219/0.000 ms\n
[2025-08-21 19:32:10][352682501177504][857 ms][DEBUG] check_internet: online
[2025-08-21 19:32:10][352682501177504][857 ms][DEBUG] END   check_internet in 547 ms
[2025-08-21 19:32:10][352682501177504][857 ms][DEBUG] START check_scloud
[2025-08-21 19:32:10][352682501177504][857 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:32:10][352682501177504][1122 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23677456 92676 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:32:10][352682501177504][1122 ms][DEBUG] targetPkg: running
[2025-08-21 19:32:10][352682501177504][1122 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 19:32:10][352682501177504][1122 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:32:10][352682501177504][1123 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjgyNTAxMTc3NTA0IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE43NUNCVzJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNSUQiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQ2MCJ9'" -e "main()" -q"
[2025-08-21 19:32:10][352682501177504][1123 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:32:10][352682501177504][1123 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjgyNTAxMTc3NTA0IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE43NUNCVzJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNSUQiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQ2MCJ9'" -e "main()" -q"
[2025-08-21 19:32:12][352682501177504][3793 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjgyNTAxMTc3NTA0IiwibW9kZWwiOiJTTS1OOTg1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE43NUNCVzJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNSUQiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQ2MCJ9"\r\n
[2025-08-21 19:32:15][352682501177504][6355 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6336db92-46df-4243-b175-0926d4ecca9f","id":"QR_6336db92-46df-4243-b175-0926d4ecca9f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:32:15][352682501177504][6355 ms][DEBUG] proc_open done in 5233 ms; code=0; res.len=3152
[2025-08-21 19:32:15][352682501177504][6355 ms][DEBUG] END   runCmdUntilRes#1 in 5233 ms
[2025-08-21 19:32:15][352682501177504][6355 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:33:07][354747953759881][0 ms][INFO] === Request start ===
[2025-08-21 19:33:07][354747953759881][1 ms][DEBUG] START check_frida
[2025-08-21 19:33:07][354747953759881][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:33:07][354747953759881][301 ms][DEBUG] SU: done in 300 ms; outroot         16270     1 2295852  23184 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:33:07][354747953759881][301 ms][DEBUG] check_frida: running
[2025-08-21 19:33:07][354747953759881][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 19:33:07][354747953759881][302 ms][DEBUG] START check_scloud
[2025-08-21 19:33:07][354747953759881][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:33:07][354747953759881][551 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677488 92136 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:33:07][354747953759881][551 ms][DEBUG] targetPkg: running
[2025-08-21 19:33:07][354747953759881][551 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:33:07][354747953759881][552 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:33:07][354747953759881][552 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUzNzU5ODgxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDVXVFNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA2NyJ9'" -e "main()" -q"
[2025-08-21 19:33:07][354747953759881][552 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:33:07][354747953759881][552 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUzNzU5ODgxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDVXVFNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA2NyJ9'" -e "main()" -q"
[2025-08-21 19:33:10][354747953759881][3207 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTUzNzU5ODgxIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDVXVFNWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzA2NyJ9"\r\n
[2025-08-21 19:33:12][354747953759881][5081 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d0bf66e-0c7f-4831-bb45-04e0b686cb6c","id":"QR_7d0bf66e-0c7f-4831-bb45-04e0b686cb6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:33:12][354747953759881][5081 ms][DEBUG] proc_open done in 4529 ms; code=0; res.len=3152
[2025-08-21 19:33:12][354747953759881][5081 ms][DEBUG] END   runCmdUntilRes#1 in 4530 ms
[2025-08-21 19:33:12][354747953759881][5082 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:34:11][355820493300901][1 ms][INFO] === Request start ===
[2025-08-21 19:34:11][355820493300901][2 ms][DEBUG] START check_frida
[2025-08-21 19:34:11][355820493300901][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:34:12][355820493300901][304 ms][DEBUG] SU: done in 302 ms; outroot         16270     1 2295852  23184 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:34:12][355820493300901][304 ms][DEBUG] check_frida: running
[2025-08-21 19:34:12][355820493300901][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 19:34:12][355820493300901][304 ms][DEBUG] START check_internet
[2025-08-21 19:34:12][355820493300901][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:34:12][355820493300901][600 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.552/193.552/193.552/0.000 ms\n
[2025-08-21 19:34:12][355820493300901][600 ms][DEBUG] check_internet: online
[2025-08-21 19:34:12][355820493300901][600 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 19:34:12][355820493300901][600 ms][DEBUG] START check_scloud
[2025-08-21 19:34:12][355820493300901][600 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:34:12][355820493300901][850 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677520 91124 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:34:12][355820493300901][850 ms][DEBUG] targetPkg: running
[2025-08-21 19:34:12][355820493300901][850 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:34:12][355820493300901][850 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:34:12][355820493300901][850 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODIwNDkzMzAwOTAxIiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDMwSE0wUFgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlhBUiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzk2In0='" -e "main()" -q"
[2025-08-21 19:34:12][355820493300901][850 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:34:12][355820493300901][850 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1ODIwNDkzMzAwOTAxIiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDMwSE0wUFgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlhBUiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzk2In0='" -e "main()" -q"
[2025-08-21 19:34:15][355820493300901][3506 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1ODIwNDkzMzAwOTAxIiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDMwSE0wUFgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlhBUiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzk2In0="\r\n
[2025-08-21 19:34:17][355820493300901][5693 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5813236-6a83-480a-908e-e374cd40c434","id":"QR_c5813236-6a83-480a-908e-e374cd40c434","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:34:17][355820493300901][5693 ms][DEBUG] proc_open done in 4843 ms; code=0; res.len=3152
[2025-08-21 19:34:17][355820493300901][5693 ms][DEBUG] END   runCmdUntilRes#1 in 4843 ms
[2025-08-21 19:34:17][355820493300901][5693 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:35:08][352971688985999][1 ms][INFO] === Request start ===
[2025-08-21 19:35:08][352971688985999][2 ms][DEBUG] START check_frida
[2025-08-21 19:35:08][352971688985999][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:35:09][352971688985999][315 ms][DEBUG] SU: done in 313 ms; outroot         16270     1 2295852  23176 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:35:09][352971688985999][315 ms][DEBUG] check_frida: running
[2025-08-21 19:35:09][352971688985999][315 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 19:35:09][352971688985999][315 ms][DEBUG] START check_scloud
[2025-08-21 19:35:09][352971688985999][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:35:09][352971688985999][549 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23677552 91732 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:35:09][352971688985999][549 ms][DEBUG] targetPkg: running
[2025-08-21 19:35:09][352971688985999][550 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 19:35:09][352971688985999][550 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:35:09][352971688985999][550 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTcxNjg4OTg1OTk5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMVExV0RaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNPTSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzczIn0='" -e "main()" -q"
[2025-08-21 19:35:09][352971688985999][550 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:35:09][352971688985999][550 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTcxNjg4OTg1OTk5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMVExV0RaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNPTSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzczIn0='" -e "main()" -q"
[2025-08-21 19:35:11][352971688985999][3158 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTcxNjg4OTg1OTk5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMVExV0RaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNPTSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzczIn0="\r\n
[2025-08-21 19:35:17][352971688985999][8485 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e626b80-5b6a-4620-af79-1c099a174d2d","id":"QR_0e626b80-5b6a-4620-af79-1c099a174d2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:35:17][352971688985999][8486 ms][DEBUG] proc_open done in 7936 ms; code=0; res.len=3152
[2025-08-21 19:35:17][352971688985999][8486 ms][DEBUG] END   runCmdUntilRes#1 in 7936 ms
[2025-08-21 19:35:17][352971688985999][8486 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:35:26][350274352425281][0 ms][INFO] === Request start ===
[2025-08-21 19:35:26][350274352425281][1 ms][DEBUG] START check_frida
[2025-08-21 19:35:26][350274352425281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:35:27][350274352425281][307 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2295852  23192 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:35:27][350274352425281][307 ms][DEBUG] check_frida: running
[2025-08-21 19:35:27][350274352425281][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 19:35:27][350274352425281][307 ms][DEBUG] START check_scloud
[2025-08-21 19:35:27][350274352425281][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:35:27][350274352425281][540 ms][DEBUG] SU: done in 233 ms; outu0_a118      16385  4994 23677584 92324 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:35:27][350274352425281][540 ms][DEBUG] targetPkg: running
[2025-08-21 19:35:27][350274352425281][541 ms][DEBUG] END   check_scloud in 233 ms
[2025-08-21 19:35:27][350274352425281][541 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:35:27][350274352425281][541 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzUyNDI1MjgxIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI5MEFMQVlQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTU5In0='" -e "main()" -q"
[2025-08-21 19:35:27][350274352425281][541 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:35:27][350274352425281][541 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzUyNDI1MjgxIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI5MEFMQVlQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTU5In0='" -e "main()" -q"
[2025-08-21 19:35:29][350274352425281][3180 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjc0MzUyNDI1MjgxIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI5MEFMQVlQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTU5In0="\r\n
[2025-08-21 19:35:33][350274352425281][6976 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88b0c148-e71d-4684-b8fa-27c43deed850","id":"QR_88b0c148-e71d-4684-b8fa-27c43deed850","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:35:33][350274352425281][6977 ms][DEBUG] proc_open done in 6436 ms; code=0; res.len=3152
[2025-08-21 19:35:33][350274352425281][6977 ms][DEBUG] END   runCmdUntilRes#1 in 6436 ms
[2025-08-21 19:35:33][350274352425281][6977 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:37:10][352177394171151][1 ms][INFO] === Request start ===
[2025-08-21 19:37:10][352177394171151][2 ms][DEBUG] START check_frida
[2025-08-21 19:37:10][352177394171151][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:37:10][352177394171151][307 ms][DEBUG] SU: done in 305 ms; outroot         16270     1 2295852  23188 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:37:10][352177394171151][307 ms][DEBUG] check_frida: running
[2025-08-21 19:37:10][352177394171151][307 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 19:37:10][352177394171151][307 ms][DEBUG] START check_scloud
[2025-08-21 19:37:10][352177394171151][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:37:11][352177394171151][557 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677616 91868 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:37:11][352177394171151][557 ms][DEBUG] targetPkg: running
[2025-08-21 19:37:11][352177394171151][557 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:37:11][352177394171151][557 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:37:11][352177394171151][557 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTc3Mzk0MTcxMTUxIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ0MEZTMUJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzODMxIn0='" -e "main()" -q"
[2025-08-21 19:37:11][352177394171151][557 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:37:11][352177394171151][557 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTc3Mzk0MTcxMTUxIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ0MEZTMUJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzODMxIn0='" -e "main()" -q"
[2025-08-21 19:37:13][352177394171151][3212 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMTc3Mzk0MTcxMTUxIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ0MEZTMUJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzODMxIn0="\r\n
[2025-08-21 19:37:17][352177394171151][7227 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdcb5f55-fd63-4876-aea7-2d354917c934","id":"QR_cdcb5f55-fd63-4876-aea7-2d354917c934","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:37:17][352177394171151][7228 ms][DEBUG] proc_open done in 6670 ms; code=0; res.len=3152
[2025-08-21 19:37:17][352177394171151][7228 ms][DEBUG] END   runCmdUntilRes#1 in 6671 ms
[2025-08-21 19:37:17][352177394171151][7228 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:38:07][352773718015783][1 ms][INFO] === Request start ===
[2025-08-21 19:38:07][352773718015783][2 ms][DEBUG] START check_frida
[2025-08-21 19:38:07][352773718015783][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:38:08][352773718015783][308 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2295852  19152 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:38:08][352773718015783][308 ms][DEBUG] check_frida: running
[2025-08-21 19:38:08][352773718015783][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 19:38:08][352773718015783][308 ms][DEBUG] START check_internet
[2025-08-21 19:38:08][352773718015783][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:38:08][352773718015783][776 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.271/201.271/201.271/0.000 ms\n
[2025-08-21 19:38:08][352773718015783][776 ms][DEBUG] check_internet: online
[2025-08-21 19:38:08][352773718015783][776 ms][DEBUG] END   check_internet in 467 ms
[2025-08-21 19:38:08][352773718015783][776 ms][DEBUG] START check_scloud
[2025-08-21 19:38:08][352773718015783][776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:38:08][352773718015783][1041 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23677648 89924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:38:08][352773718015783][1041 ms][DEBUG] targetPkg: running
[2025-08-21 19:38:08][352773718015783][1041 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 19:38:08][352773718015783][1041 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:38:08][352773718015783][1041 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzczNzE4MDE1NzgzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMTQ4VkpQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk2OSJ9'" -e "main()" -q"
[2025-08-21 19:38:08][352773718015783][1041 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:38:08][352773718015783][1041 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzczNzE4MDE1NzgzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMTQ4VkpQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk2OSJ9'" -e "main()" -q"
[2025-08-21 19:38:11][352773718015783][3728 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzczNzE4MDE1NzgzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMTQ4VkpQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjk2OSJ9"\r\n
[2025-08-21 19:38:13][352773718015783][6008 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c3229ab-b27d-4952-8fb3-5c397ffa3250","id":"QR_3c3229ab-b27d-4952-8fb3-5c397ffa3250","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:38:13][352773718015783][6009 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 19:38:13][352773718015783][6009 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-21 19:38:13][352773718015783][6009 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:39:07][351786691281496][0 ms][INFO] === Request start ===
[2025-08-21 19:39:07][351786691281496][1 ms][DEBUG] START check_frida
[2025-08-21 19:39:07][351786691281496][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:39:08][351786691281496][323 ms][DEBUG] SU: done in 322 ms; outroot         16270     1 2295852  19136 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:39:08][351786691281496][323 ms][DEBUG] check_frida: running
[2025-08-21 19:39:08][351786691281496][323 ms][DEBUG] END   check_frida in 322 ms
[2025-08-21 19:39:08][351786691281496][323 ms][DEBUG] START check_scloud
[2025-08-21 19:39:08][351786691281496][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:39:08][351786691281496][573 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677680 90616 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:39:08][351786691281496][573 ms][DEBUG] targetPkg: running
[2025-08-21 19:39:08][351786691281496][573 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:39:08][351786691281496][573 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:39:08][351786691281496][573 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzg2NjkxMjgxNDk2IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMEdIMUNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkzNiJ9'" -e "main()" -q"
[2025-08-21 19:39:08][351786691281496][573 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:39:08][351786691281496][573 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzg2NjkxMjgxNDk2IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMEdIMUNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkzNiJ9'" -e "main()" -q"
[2025-08-21 19:39:11][351786691281496][3197 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzg2NjkxMjgxNDk2IiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFRBMEdIMUNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODkzNiJ9"\r\n
[2025-08-21 19:39:13][351786691281496][5368 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_caea70df-3aa1-4979-8a41-40700e5dc462","id":"QR_caea70df-3aa1-4979-8a41-40700e5dc462","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:39:13][351786691281496][5368 ms][DEBUG] proc_open done in 4795 ms; code=0; res.len=3152
[2025-08-21 19:39:13][351786691281496][5368 ms][DEBUG] END   runCmdUntilRes#1 in 4795 ms
[2025-08-21 19:39:13][351786691281496][5368 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:39:19][359104250796841][1 ms][INFO] === Request start ===
[2025-08-21 19:39:19][359104250796841][2 ms][DEBUG] START check_frida
[2025-08-21 19:39:19][359104250796841][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:39:19][359104250796841][307 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2312272  19192 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:39:19][359104250796841][307 ms][DEBUG] check_frida: running
[2025-08-21 19:39:19][359104250796841][308 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 19:39:19][359104250796841][308 ms][DEBUG] START check_scloud
[2025-08-21 19:39:19][359104250796841][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:39:20][359104250796841][557 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677712 91208 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:39:20][359104250796841][557 ms][DEBUG] targetPkg: running
[2025-08-21 19:39:20][359104250796841][557 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:39:20][359104250796841][558 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:39:20][359104250796841][558 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTA0MjUwNzk2ODQxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MDRFWlRLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzMwIn0='" -e "main()" -q"
[2025-08-21 19:39:20][359104250796841][558 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:39:20][359104250796841][558 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTA0MjUwNzk2ODQxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MDRFWlRLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzMwIn0='" -e "main()" -q"
[2025-08-21 19:39:22][359104250796841][3197 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTA0MjUwNzk2ODQxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg4MDRFWlRLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MzMwIn0="\r\n
[2025-08-21 19:39:27][359104250796841][8212 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_520f8f42-b9a7-405d-b8c0-c6503489080e","id":"QR_520f8f42-b9a7-405d-b8c0-c6503489080e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:39:27][359104250796841][8212 ms][DEBUG] proc_open done in 7654 ms; code=0; res.len=3152
[2025-08-21 19:39:27][359104250796841][8212 ms][DEBUG] END   runCmdUntilRes#1 in 7654 ms
[2025-08-21 19:39:27][359104250796841][8212 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:39:36][355545134177752][0 ms][INFO] === Request start ===
[2025-08-21 19:39:36][355545134177752][1 ms][DEBUG] START check_frida
[2025-08-21 19:39:36][355545134177752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:39:36][355545134177752][288 ms][DEBUG] SU: done in 286 ms; outroot         16270     1 2312272  19200 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:39:36][355545134177752][288 ms][DEBUG] check_frida: running
[2025-08-21 19:39:36][355545134177752][288 ms][DEBUG] END   check_frida in 287 ms
[2025-08-21 19:39:36][355545134177752][288 ms][DEBUG] START check_scloud
[2025-08-21 19:39:36][355545134177752][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:39:37][355545134177752][600 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23677744 90788 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:39:37][355545134177752][600 ms][DEBUG] targetPkg: running
[2025-08-21 19:39:37][355545134177752][600 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 19:39:37][355545134177752][600 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:39:37][355545134177752][600 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NTQ1MTM0MTc3NzUyIiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gxMDhEWDVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJHRkkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY0NiJ9'" -e "main()" -q"
[2025-08-21 19:39:37][355545134177752][600 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:39:37][355545134177752][600 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NTQ1MTM0MTc3NzUyIiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gxMDhEWDVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJHRkkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY0NiJ9'" -e "main()" -q"
[2025-08-21 19:39:39][355545134177752][3224 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NTQ1MTM0MTc3NzUyIiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gxMDhEWDVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJHRkkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY0NiJ9"\r\n
[2025-08-21 19:39:41][355545134177752][5286 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8582027-d765-4de0-bd79-b2ea22e545b8","id":"QR_c8582027-d765-4de0-bd79-b2ea22e545b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:39:41][355545134177752][5287 ms][DEBUG] proc_open done in 4686 ms; code=0; res.len=3152
[2025-08-21 19:39:41][355545134177752][5287 ms][DEBUG] END   runCmdUntilRes#1 in 4687 ms
[2025-08-21 19:39:41][355545134177752][5287 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:42:09][350987614757544][1 ms][INFO] === Request start ===
[2025-08-21 19:42:09][350987614757544][2 ms][DEBUG] START check_frida
[2025-08-21 19:42:09][350987614757544][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:42:09][350987614757544][323 ms][DEBUG] SU: done in 321 ms; outroot         16270     1 2296864  12336 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:42:09][350987614757544][323 ms][DEBUG] check_frida: running
[2025-08-21 19:42:09][350987614757544][323 ms][DEBUG] END   check_frida in 321 ms
[2025-08-21 19:42:09][350987614757544][323 ms][DEBUG] START check_internet
[2025-08-21 19:42:09][350987614757544][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:42:09][350987614757544][776 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.309/203.309/203.309/0.000 ms\n
[2025-08-21 19:42:09][350987614757544][776 ms][DEBUG] check_internet: online
[2025-08-21 19:42:09][350987614757544][776 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 19:42:09][350987614757544][776 ms][DEBUG] START check_scloud
[2025-08-21 19:42:09][350987614757544][776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:42:10][350987614757544][1042 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23677776 83696 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:42:10][350987614757544][1042 ms][DEBUG] targetPkg: running
[2025-08-21 19:42:10][350987614757544][1042 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 19:42:10][350987614757544][1042 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:42:10][350987614757544][1042 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjE0NzU3NTQ0IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3ME02QjBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODMyOCJ9'" -e "main()" -q"
[2025-08-21 19:42:10][350987614757544][1042 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:42:10][350987614757544][1042 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTg3NjE0NzU3NTQ0IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3ME02QjBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODMyOCJ9'" -e "main()" -q"
[2025-08-21 19:42:13][350987614757544][3963 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTg3NjE0NzU3NTQ0IiwibW9kZWwiOiJTTS1FMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3ME02QjBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODMyOCJ9"\r\n
[2025-08-21 19:42:15][350987614757544][6243 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87db779c-0386-4418-a555-ed14affe19c0","id":"QR_87db779c-0386-4418-a555-ed14affe19c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:42:15][350987614757544][6244 ms][DEBUG] proc_open done in 5202 ms; code=0; res.len=3152
[2025-08-21 19:42:15][350987614757544][6244 ms][DEBUG] END   runCmdUntilRes#1 in 5202 ms
[2025-08-21 19:42:15][350987614757544][6244 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:42:22][354916447317081][1 ms][INFO] === Request start ===
[2025-08-21 19:42:22][354916447317081][2 ms][DEBUG] START check_frida
[2025-08-21 19:42:22][354916447317081][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:42:22][354916447317081][312 ms][DEBUG] SU: done in 310 ms; outroot         16270     1 2312272  10528 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:42:22][354916447317081][312 ms][DEBUG] check_frida: running
[2025-08-21 19:42:22][354916447317081][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 19:42:22][354916447317081][312 ms][DEBUG] START check_internet
[2025-08-21 19:42:22][354916447317081][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:42:22][354916447317081][703 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.244/266.244/266.244/0.000 ms\n
[2025-08-21 19:42:22][354916447317081][703 ms][DEBUG] check_internet: online
[2025-08-21 19:42:22][354916447317081][703 ms][DEBUG] END   check_internet in 390 ms
[2025-08-21 19:42:22][354916447317081][703 ms][DEBUG] START check_scloud
[2025-08-21 19:42:22][354916447317081][703 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:42:23][354916447317081][953 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677808 84216 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:42:23][354916447317081][953 ms][DEBUG] targetPkg: running
[2025-08-21 19:42:23][354916447317081][953 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:42:23][354916447317081][953 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:42:23][354916447317081][953 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQ3MzE3MDgxIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDRURFFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDg2NyJ9'" -e "main()" -q"
[2025-08-21 19:42:23][354916447317081][953 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:42:23][354916447317081][953 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTE2NDQ3MzE3MDgxIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDRURFFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDg2NyJ9'" -e "main()" -q"
[2025-08-21 19:42:25][354916447317081][3592 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTE2NDQ3MzE3MDgxIiwibW9kZWwiOiJTTS1BMjQ1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc2MDRURFFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDg2NyJ9"\r\n
[2025-08-21 19:42:27][354916447317081][5420 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6cfea245-312c-4ee2-b5f7-0b312b0b34f7","id":"QR_6cfea245-312c-4ee2-b5f7-0b312b0b34f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:42:27][354916447317081][5421 ms][DEBUG] proc_open done in 4467 ms; code=0; res.len=3152
[2025-08-21 19:42:27][354916447317081][5421 ms][DEBUG] END   runCmdUntilRes#1 in 4468 ms
[2025-08-21 19:42:27][354916447317081][5421 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:46:01][355346632425664][1 ms][INFO] === Request start ===
[2025-08-21 19:46:01][355346632425664][2 ms][DEBUG] START check_frida
[2025-08-21 19:46:01][355346632425664][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:46:01][355346632425664][295 ms][DEBUG] SU: done in 294 ms; outroot         16270     1 2295852  10332 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:46:01][355346632425664][295 ms][DEBUG] check_frida: running
[2025-08-21 19:46:01][355346632425664][296 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 19:46:01][355346632425664][296 ms][DEBUG] START check_internet
[2025-08-21 19:46:01][355346632425664][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:46:01][355346632425664][639 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.512/251.512/251.512/0.000 ms\n
[2025-08-21 19:46:01][355346632425664][639 ms][DEBUG] check_internet: online
[2025-08-21 19:46:01][355346632425664][639 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 19:46:01][355346632425664][639 ms][DEBUG] START check_scloud
[2025-08-21 19:46:01][355346632425664][639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:46:02][355346632425664][905 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23677840 82192 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:46:02][355346632425664][905 ms][DEBUG] targetPkg: running
[2025-08-21 19:46:02][355346632425664][905 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 19:46:02][355346632425664][905 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:46:02][355346632425664][905 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQ2NjMyNDI1NjY0IiwibW9kZWwiOiJTTS1YNTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlgzMEpEUE1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTE5In0='" -e "main()" -q"
[2025-08-21 19:46:02][355346632425664][905 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:46:02][355346632425664][905 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzQ2NjMyNDI1NjY0IiwibW9kZWwiOiJTTS1YNTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlgzMEpEUE1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTE5In0='" -e "main()" -q"
[2025-08-21 19:46:04][355346632425664][3529 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MzQ2NjMyNDI1NjY0IiwibW9kZWwiOiJTTS1YNTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlgzMEpEUE1CIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1OTE5In0="\r\n
[2025-08-21 19:46:08][355346632425664][6981 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8bec9737-0e1b-44ab-86d5-9f134e3bb584","id":"QR_8bec9737-0e1b-44ab-86d5-9f134e3bb584","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:46:08][355346632425664][6981 ms][DEBUG] proc_open done in 6076 ms; code=0; res.len=3152
[2025-08-21 19:46:08][355346632425664][6982 ms][DEBUG] END   runCmdUntilRes#1 in 6077 ms
[2025-08-21 19:46:08][355346632425664][6982 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:46:23][351347130765902][0 ms][INFO] === Request start ===
[2025-08-21 19:46:23][351347130765902][1 ms][DEBUG] START check_frida
[2025-08-21 19:46:23][351347130765902][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:46:23][351347130765902][309 ms][DEBUG] SU: done in 307 ms; outroot         16270     1 2295852   8740 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:46:23][351347130765902][309 ms][DEBUG] check_frida: running
[2025-08-21 19:46:23][351347130765902][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 19:46:23][351347130765902][309 ms][DEBUG] START check_internet
[2025-08-21 19:46:23][351347130765902][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:46:24][351347130765902][778 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.418/200.418/200.418/0.000 ms\n
[2025-08-21 19:46:24][351347130765902][778 ms][DEBUG] check_internet: online
[2025-08-21 19:46:24][351347130765902][778 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 19:46:24][351347130765902][778 ms][DEBUG] START check_scloud
[2025-08-21 19:46:24][351347130765902][778 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:46:24][351347130765902][1027 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23677872 82592 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:46:24][351347130765902][1027 ms][DEBUG] targetPkg: running
[2025-08-21 19:46:24][351347130765902][1027 ms][DEBUG] END   check_scloud in 249 ms
[2025-08-21 19:46:24][351347130765902][1027 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:46:24][351347130765902][1027 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzQ3MTMwNzY1OTAyIiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlJBMDRaMTFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NjM5In0='" -e "main()" -q"
[2025-08-21 19:46:24][351347130765902][1027 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:46:24][351347130765902][1027 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzQ3MTMwNzY1OTAyIiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlJBMDRaMTFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NjM5In0='" -e "main()" -q"
[2025-08-21 19:46:27][351347130765902][3667 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzQ3MTMwNzY1OTAyIiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlJBMDRaMTFYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NjM5In0="\r\n
[2025-08-21 19:46:30][351347131236846][1 ms][INFO] === Request start ===
[2025-08-21 19:46:31][351347130765902][8447 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22b89a2d-63a0-46bf-aafb-226539a36c72","id":"QR_22b89a2d-63a0-46bf-aafb-226539a36c72","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:46:31][351347130765902][8447 ms][DEBUG] proc_open done in 7420 ms; code=0; res.len=3152
[2025-08-21 19:46:31][351347130765902][8447 ms][DEBUG] END   runCmdUntilRes#1 in 7420 ms
[2025-08-21 19:46:31][351347130765902][8448 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:46:32][351347131236846][2025 ms][DEBUG] START check_frida
[2025-08-21 19:46:32][351347131236846][2025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:46:33][351347131236846][2337 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2312272   8744 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:46:33][351347131236846][2337 ms][DEBUG] check_frida: running
[2025-08-21 19:46:33][351347131236846][2337 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 19:46:33][351347131236846][2337 ms][DEBUG] START check_internet
[2025-08-21 19:46:33][351347131236846][2337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:46:33][351347131236846][2665 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.451/218.451/218.451/0.000 ms\n
[2025-08-21 19:46:33][351347131236846][2665 ms][DEBUG] check_internet: online
[2025-08-21 19:46:33][351347131236846][2665 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 19:46:33][351347131236846][2665 ms][DEBUG] START check_scloud
[2025-08-21 19:46:33][351347131236846][2665 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:46:33][351347131236846][2962 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23677904 82072 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:46:33][351347131236846][2962 ms][DEBUG] targetPkg: running
[2025-08-21 19:46:33][351347131236846][2962 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 19:46:33][351347131236846][2962 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:46:33][351347131236846][2962 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzQ3MTMxMjM2ODQ2IiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlQ0MEMyVE5XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTk0In0='" -e "main()" -q"
[2025-08-21 19:46:33][351347131236846][2962 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:46:33][351347131236846][2962 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMzQ3MTMxMjM2ODQ2IiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlQ0MEMyVE5XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTk0In0='" -e "main()" -q"
[2025-08-21 19:46:36][351347131236846][5586 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMzQ3MTMxMjM2ODQ2IiwibW9kZWwiOiJTTS1UNzM4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1MlQ0MEMyVE5XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTk0In0="\r\n
[2025-08-21 19:46:39][351347131236846][8273 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49b5cb1d-6216-4158-b8a3-a1d2f2041939","id":"QR_49b5cb1d-6216-4158-b8a3-a1d2f2041939","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:46:39][351347131236846][8273 ms][DEBUG] proc_open done in 5311 ms; code=0; res.len=3152
[2025-08-21 19:46:39][351347131236846][8273 ms][DEBUG] END   runCmdUntilRes#1 in 5311 ms
[2025-08-21 19:46:39][351347131236846][8273 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:47:48][351494692347396][0 ms][INFO] === Request start ===
[2025-08-21 19:47:48][351494692347396][1 ms][DEBUG] START check_frida
[2025-08-21 19:47:48][351494692347396][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:47:48][351494692347396][313 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2295852   8756 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:47:48][351494692347396][313 ms][DEBUG] check_frida: running
[2025-08-21 19:47:48][351494692347396][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 19:47:48][351494692347396][313 ms][DEBUG] START check_scloud
[2025-08-21 19:47:48][351494692347396][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:47:48][351494692347396][563 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23677936 82620 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:47:48][351494692347396][563 ms][DEBUG] targetPkg: running
[2025-08-21 19:47:48][351494692347396][563 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:47:48][351494692347396][563 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:47:48][351494692347396][563 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDk0NjkyMzQ3Mzk2IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMDJNRFRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE4NSJ9'" -e "main()" -q"
[2025-08-21 19:47:48][351494692347396][563 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:47:48][351494692347396][563 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDk0NjkyMzQ3Mzk2IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMDJNRFRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE4NSJ9'" -e "main()" -q"
[2025-08-21 19:47:51][351494692347396][3249 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDk0NjkyMzQ3Mzk2IiwibW9kZWwiOiJTTS1BMzM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMDJNRFRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTE4NSJ9"\r\n
[2025-08-21 19:47:53][351494692347396][5530 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0908da1-d404-4a5e-b843-fab1ad9947dd","id":"QR_f0908da1-d404-4a5e-b843-fab1ad9947dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:47:53][351494692347396][5531 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-21 19:47:53][351494692347396][5531 ms][DEBUG] END   runCmdUntilRes#1 in 4968 ms
[2025-08-21 19:47:53][351494692347396][5531 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:48:12][350545461411720][1 ms][INFO] === Request start ===
[2025-08-21 19:48:12][350545461411720][2 ms][DEBUG] START check_frida
[2025-08-21 19:48:12][350545461411720][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:48:12][350545461411720][307 ms][DEBUG] SU: done in 305 ms; outroot         16270     1 2295852   8768 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:48:12][350545461411720][307 ms][DEBUG] check_frida: running
[2025-08-21 19:48:12][350545461411720][307 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 19:48:12][350545461411720][307 ms][DEBUG] START check_internet
[2025-08-21 19:48:12][350545461411720][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:48:12][350545461411720][665 ms][DEBUG] SU: done in 357 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.894/238.894/238.894/0.000 ms\n
[2025-08-21 19:48:12][350545461411720][665 ms][DEBUG] check_internet: online
[2025-08-21 19:48:12][350545461411720][665 ms][DEBUG] END   check_internet in 358 ms
[2025-08-21 19:48:12][350545461411720][665 ms][DEBUG] START check_scloud
[2025-08-21 19:48:12][350545461411720][665 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:48:13][350545461411720][963 ms][DEBUG] SU: done in 298 ms; outu0_a118      16385  4994 23677968 83184 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:48:13][350545461411720][963 ms][DEBUG] targetPkg: running
[2025-08-21 19:48:13][350545461411720][964 ms][DEBUG] END   check_scloud in 299 ms
[2025-08-21 19:48:13][350545461411720][964 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:48:13][350545461411720][964 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYxNDExNzIwIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzUwOFdMOEgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDMxIn0='" -e "main()" -q"
[2025-08-21 19:48:13][350545461411720][964 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:48:13][350545461411720][964 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ1NDYxNDExNzIwIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzUwOFdMOEgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDMxIn0='" -e "main()" -q"
[2025-08-21 19:48:15][350545461411720][3570 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTQ1NDYxNDExNzIwIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzUwOFdMOEgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NDMxIn0="\r\n
[2025-08-21 19:48:17][350545461411720][5351 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92690d28-d4cf-40ef-8059-82fdd54bedbd","id":"QR_92690d28-d4cf-40ef-8059-82fdd54bedbd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:48:17][350545461411720][5351 ms][DEBUG] proc_open done in 4387 ms; code=0; res.len=3152
[2025-08-21 19:48:17][350545461411720][5351 ms][DEBUG] END   runCmdUntilRes#1 in 4387 ms
[2025-08-21 19:48:17][350545461411720][5351 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:49:11][356258105368959][1 ms][INFO] === Request start ===
[2025-08-21 19:49:11][356258105368959][2 ms][DEBUG] START check_frida
[2025-08-21 19:49:11][356258105368959][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:49:12][356258105368959][307 ms][DEBUG] SU: done in 305 ms; outroot         16270     1 2295852   8748 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:49:12][356258105368959][307 ms][DEBUG] check_frida: running
[2025-08-21 19:49:12][356258105368959][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 19:49:12][356258105368959][307 ms][DEBUG] START check_scloud
[2025-08-21 19:49:12][356258105368959][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:49:12][356258105368959][573 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23678000 82740 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:49:12][356258105368959][573 ms][DEBUG] targetPkg: running
[2025-08-21 19:49:12][356258105368959][573 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 19:49:12][356258105368959][573 ms][DEBUG] rawBody.length=1159
[2025-08-21 19:49:12][356258105368959][573 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MjU4MTA1MzY4OTU5IiwibW9kZWwiOiJTTS1UNTE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTjUwMDc0TU4iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzI2NzYifQ=='" -e "main()" -q"
[2025-08-21 19:49:12][356258105368959][573 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:49:12][356258105368959][573 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MjU4MTA1MzY4OTU5IiwibW9kZWwiOiJTTS1UNTE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTjUwMDc0TU4iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzI2NzYifQ=='" -e "main()" -q"
[2025-08-21 19:49:15][356258105368959][3197 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MjU4MTA1MzY4OTU5IiwibW9kZWwiOiJTTS1UNTE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTjUwMDc0TU4iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzI2NzYifQ=="\r\n
[2025-08-21 19:49:18][356258105368959][6743 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed4893b7-3502-40da-ae9f-76f9bec5bb05","id":"QR_ed4893b7-3502-40da-ae9f-76f9bec5bb05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:49:18][356258105368959][6743 ms][DEBUG] proc_open done in 6170 ms; code=0; res.len=3152
[2025-08-21 19:49:18][356258105368959][6743 ms][DEBUG] END   runCmdUntilRes#1 in 6170 ms
[2025-08-21 19:49:18][356258105368959][6743 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:53:08][352208779836835][1 ms][INFO] === Request start ===
[2025-08-21 19:53:08][352208779836835][2 ms][DEBUG] START check_frida
[2025-08-21 19:53:08][352208779836835][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:53:08][352208779836835][296 ms][DEBUG] SU: done in 295 ms; outroot         16270     1 2295852   8756 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:53:08][352208779836835][296 ms][DEBUG] check_frida: running
[2025-08-21 19:53:08][352208779836835][297 ms][DEBUG] END   check_frida in 295 ms
[2025-08-21 19:53:08][352208779836835][297 ms][DEBUG] START check_scloud
[2025-08-21 19:53:08][352208779836835][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:53:09][352208779836835][546 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23678032 82416 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:53:09][352208779836835][547 ms][DEBUG] targetPkg: running
[2025-08-21 19:53:09][352208779836835][547 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:53:09][352208779836835][547 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:53:09][352208779836835][547 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjA4Nzc5ODM2ODM1IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1M0Y2SkNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ4NiJ9'" -e "main()" -q"
[2025-08-21 19:53:09][352208779836835][547 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:53:09][352208779836835][547 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjA4Nzc5ODM2ODM1IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1M0Y2SkNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ4NiJ9'" -e "main()" -q"
[2025-08-21 19:53:11][352208779836835][3171 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjA4Nzc5ODM2ODM1IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1M0Y2SkNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQ4NiJ9"\r\n
[2025-08-21 19:53:14][352208779836835][5389 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90572f5d-5a3c-4180-bbd8-3aefa5e6a6d7","id":"QR_90572f5d-5a3c-4180-bbd8-3aefa5e6a6d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:53:14][352208779836835][5389 ms][DEBUG] proc_open done in 4842 ms; code=0; res.len=3152
[2025-08-21 19:53:14][352208779836835][5389 ms][DEBUG] END   runCmdUntilRes#1 in 4842 ms
[2025-08-21 19:53:14][352208779836835][5389 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:56:09][353520955574843][1 ms][INFO] === Request start ===
[2025-08-21 19:56:09][353520955574843][2 ms][DEBUG] START check_frida
[2025-08-21 19:56:09][353520955574843][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:56:10][353520955574843][315 ms][DEBUG] SU: done in 313 ms; outroot         16270     1 2295852   4408 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:56:10][353520955574843][315 ms][DEBUG] check_frida: running
[2025-08-21 19:56:10][353520955574843][315 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 19:56:10][353520955574843][315 ms][DEBUG] START check_internet
[2025-08-21 19:56:10][353520955574843][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:56:10][353520955574843][737 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.957/195.957/195.957/0.000 ms\n
[2025-08-21 19:56:10][353520955574843][737 ms][DEBUG] check_internet: online
[2025-08-21 19:56:10][353520955574843][737 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 19:56:10][353520955574843][737 ms][DEBUG] START check_scloud
[2025-08-21 19:56:10][353520955574843][737 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:56:10][353520955574843][1049 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23678064 82284 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:56:10][353520955574843][1049 ms][DEBUG] targetPkg: running
[2025-08-21 19:56:10][353520955574843][1049 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 19:56:10][353520955574843][1049 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:56:10][353520955574843][1049 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTIwOTU1NTc0ODQzIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMUJFM0VYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgyOSJ9'" -e "main()" -q"
[2025-08-21 19:56:10][353520955574843][1049 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:56:10][353520955574843][1049 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTIwOTU1NTc0ODQzIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMUJFM0VYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgyOSJ9'" -e "main()" -q"
[2025-08-21 19:56:13][353520955574843][3767 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNTIwOTU1NTc0ODQzIiwibW9kZWwiOiJTTS1BMTY2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kxMUJFM0VYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTgyOSJ9"\r\n
[2025-08-21 19:56:20][353520955574843][10718 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8df3789-b58a-4bff-b3d0-5971f4207c9b","id":"QR_e8df3789-b58a-4bff-b3d0-5971f4207c9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:56:20][353520955574843][10719 ms][DEBUG] proc_open done in 9669 ms; code=0; res.len=3152
[2025-08-21 19:56:20][353520955574843][10719 ms][DEBUG] END   runCmdUntilRes#1 in 9669 ms
[2025-08-21 19:56:20][353520955574843][10719 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:56:27][353117550339159][1 ms][INFO] === Request start ===
[2025-08-21 19:56:27][353117550339159][2 ms][DEBUG] START check_frida
[2025-08-21 19:56:27][353117550339159][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:56:27][353117550339159][299 ms][DEBUG] SU: done in 298 ms; outroot         16270     1 2312272   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:56:27][353117550339159][299 ms][DEBUG] check_frida: running
[2025-08-21 19:56:27][353117550339159][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 19:56:27][353117550339159][299 ms][DEBUG] START check_internet
[2025-08-21 19:56:27][353117550339159][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:56:27][353117550339159][752 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.772/201.772/201.772/0.000 ms\n
[2025-08-21 19:56:27][353117550339159][752 ms][DEBUG] check_internet: online
[2025-08-21 19:56:27][353117550339159][752 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 19:56:27][353117550339159][752 ms][DEBUG] START check_scloud
[2025-08-21 19:56:27][353117550339159][752 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:56:28][353117550339159][1002 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23678096 81220 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:56:28][353117550339159][1002 ms][DEBUG] targetPkg: running
[2025-08-21 19:56:28][353117550339159][1002 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:56:28][353117550339159][1002 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:56:28][353117550339159][1002 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTE3NTUwMzM5MTU5IiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cyMjEwODhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM5NyJ9'" -e "main()" -q"
[2025-08-21 19:56:28][353117550339159][1003 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:56:28][353117550339159][1003 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTE3NTUwMzM5MTU5IiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cyMjEwODhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM5NyJ9'" -e "main()" -q"
[2025-08-21 19:56:30][353117550339159][3673 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTE3NTUwMzM5MTU5IiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cyMjEwODhXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTM5NyJ9"\r\n
[2025-08-21 19:56:32][353117550339159][5407 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b3f4a3f-fa19-4e3b-bd4a-6a691c7b5c9e","id":"QR_8b3f4a3f-fa19-4e3b-bd4a-6a691c7b5c9e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:56:32][353117550339159][5407 ms][DEBUG] proc_open done in 4404 ms; code=0; res.len=3152
[2025-08-21 19:56:32][353117550339159][5407 ms][DEBUG] END   runCmdUntilRes#1 in 4405 ms
[2025-08-21 19:56:32][353117550339159][5407 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:57:36][351877475303927][1 ms][INFO] === Request start ===
[2025-08-21 19:57:36][351877475303927][1 ms][DEBUG] START check_frida
[2025-08-21 19:57:36][351877475303927][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:57:36][351877475303927][313 ms][DEBUG] SU: done in 311 ms; outroot         16270     1 2295852   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:57:36][351877475303927][313 ms][DEBUG] check_frida: running
[2025-08-21 19:57:36][351877475303927][313 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 19:57:36][351877475303927][313 ms][DEBUG] START check_scloud
[2025-08-21 19:57:36][351877475303927][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:57:37][351877475303927][625 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23678128 81800 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:57:37][351877475303927][625 ms][DEBUG] targetPkg: running
[2025-08-21 19:57:37][351877475303927][625 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 19:57:37][351877475303927][625 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:57:37][351877475303927][626 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc1MzAzOTI3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MTlHS0RBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExOSJ9'" -e "main()" -q"
[2025-08-21 19:57:37][351877475303927][626 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:57:37][351877475303927][626 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODc3NDc1MzAzOTI3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MTlHS0RBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExOSJ9'" -e "main()" -q"
[2025-08-21 19:57:39][351877475303927][3281 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODc3NDc1MzAzOTI3IiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MTlHS0RBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDExOSJ9"\r\n
[2025-08-21 19:57:41][351877475303927][5421 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80efafde-def2-4119-9332-f8bd1274cd6d","id":"QR_80efafde-def2-4119-9332-f8bd1274cd6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:57:41][351877475303927][5421 ms][DEBUG] proc_open done in 4795 ms; code=0; res.len=3152
[2025-08-21 19:57:41][351877475303927][5421 ms][DEBUG] END   runCmdUntilRes#1 in 4795 ms
[2025-08-21 19:57:41][351877475303927][5421 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 19:58:08][350498054031960][0 ms][INFO] === Request start ===
[2025-08-21 19:58:08][350498054031960][1 ms][DEBUG] START check_frida
[2025-08-21 19:58:08][350498054031960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:58:09][350498054031960][317 ms][DEBUG] SU: done in 316 ms; outroot         16270     1 2295852   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:58:09][350498054031960][317 ms][DEBUG] check_frida: running
[2025-08-21 19:58:09][350498054031960][317 ms][DEBUG] END   check_frida in 316 ms
[2025-08-21 19:58:09][350498054031960][317 ms][DEBUG] START check_internet
[2025-08-21 19:58:09][350498054031960][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:58:09][350498054031960][674 ms][DEBUG] SU: done in 357 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.938/238.938/238.938/0.000 ms\n
[2025-08-21 19:58:09][350498054031960][674 ms][DEBUG] check_internet: online
[2025-08-21 19:58:09][350498054031960][674 ms][DEBUG] END   check_internet in 357 ms
[2025-08-21 19:58:09][350498054031960][674 ms][DEBUG] START check_scloud
[2025-08-21 19:58:09][350498054031960][674 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:58:09][350498054031960][940 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23678160 81480 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:58:09][350498054031960][941 ms][DEBUG] targetPkg: running
[2025-08-21 19:58:09][350498054031960][941 ms][DEBUG] END   check_scloud in 267 ms
[2025-08-21 19:58:09][350498054031960][941 ms][DEBUG] rawBody.length=1161
[2025-08-21 19:58:09][350498054031960][941 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDU0MDMxOTYwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQ0MiJ9'" -e "main()" -q"
[2025-08-21 19:58:09][350498054031960][941 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:58:09][350498054031960][941 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDU0MDMxOTYwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQ0MiJ9'" -e "main()" -q"
[2025-08-21 19:58:12][350498054031960][3579 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDk4MDU0MDMxOTYwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQ0MiJ9"\r\n
[2025-08-21 19:58:14][350498054031960][5251 ms][DEBUG] frida res:res:{"code":5000300,"message":"DEVICE_OPERATION_EXCEPTION","data":"Response from uploadDevicesToServiceFromKdms was empty"}\r\n
[2025-08-21 19:58:14][350498054031960][5251 ms][DEBUG] proc_open done in 4310 ms; code=0; res.len=119
[2025-08-21 19:58:14][350498054031960][5251 ms][DEBUG] END   runCmdUntilRes#1 in 4310 ms
[2025-08-21 19:58:14][350498054031960][5251 ms][INFO] SUCCESS response from frida (len=119)
[2025-08-21 19:58:14][][0 ms][INFO] === Request start ===
[2025-08-21 19:58:14][][1 ms][DEBUG] START check_frida
[2025-08-21 19:58:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:58:14][][285 ms][DEBUG] SU: done in 284 ms; outroot         16270     1 2312272   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:58:14][][286 ms][DEBUG] check_frida: running
[2025-08-21 19:58:14][][286 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 19:58:14][][286 ms][DEBUG] START check_internet
[2025-08-21 19:58:14][][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:58:15][][551 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.967/147.967/147.967/0.000 ms\n
[2025-08-21 19:58:15][][551 ms][DEBUG] check_internet: online
[2025-08-21 19:58:15][][551 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 19:58:15][][551 ms][DEBUG] START check_scloud
[2025-08-21 19:58:15][][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:58:15][][801 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23678192 82100 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:58:15][][801 ms][DEBUG] targetPkg: running
[2025-08-21 19:58:15][][801 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:58:15][][801 ms][DEBUG] rawBody.length=1131
[2025-08-21 19:58:15][][801 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzAxNCJ9'" -e "main()" -q"
[2025-08-21 19:58:15][][801 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:58:15][][801 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzAxNCJ9'" -e "main()" -q"
[2025-08-21 19:58:18][][3472 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzAxNCJ9"\r\n
[2025-08-21 19:58:19][][5050 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 19:58:19][][5050 ms][DEBUG] proc_open done in 4248 ms; code=0; res.len=107
[2025-08-21 19:58:19][][5050 ms][DEBUG] END   runCmdUntilRes#1 in 4249 ms
[2025-08-21 19:58:19][][5050 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 19:58:19][][0 ms][INFO] === Request start ===
[2025-08-21 19:58:19][][1 ms][DEBUG] START check_frida
[2025-08-21 19:58:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:58:20][][325 ms][DEBUG] SU: done in 324 ms; outroot         16270     1 2312272   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:58:20][][325 ms][DEBUG] check_frida: running
[2025-08-21 19:58:20][][325 ms][DEBUG] END   check_frida in 324 ms
[2025-08-21 19:58:20][][325 ms][DEBUG] START check_internet
[2025-08-21 19:58:20][][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:58:20][][621 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.757/186.757/186.757/0.000 ms\n
[2025-08-21 19:58:20][][621 ms][DEBUG] check_internet: online
[2025-08-21 19:58:20][][621 ms][DEBUG] END   check_internet in 297 ms
[2025-08-21 19:58:20][][621 ms][DEBUG] START check_scloud
[2025-08-21 19:58:20][][621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:58:20][][887 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23678224 82636 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:58:20][][887 ms][DEBUG] targetPkg: running
[2025-08-21 19:58:20][][887 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 19:58:20][][887 ms][DEBUG] rawBody.length=1131
[2025-08-21 19:58:20][][887 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc5MSJ9'" -e "main()" -q"
[2025-08-21 19:58:20][][887 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:58:20][][888 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc5MSJ9'" -e "main()" -q"
[2025-08-21 19:58:23][][3511 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFRUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjc5MSJ9"\r\n
[2025-08-21 19:58:25][][5058 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-21 19:58:25][][5058 ms][DEBUG] proc_open done in 4171 ms; code=0; res.len=107
[2025-08-21 19:58:25][][5058 ms][DEBUG] END   runCmdUntilRes#1 in 4171 ms
[2025-08-21 19:58:25][][5058 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-21 19:58:26][350498054031960][0 ms][INFO] === Request start ===
[2025-08-21 19:58:26][350498054031960][1 ms][DEBUG] START check_frida
[2025-08-21 19:58:26][350498054031960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 19:58:27][350498054031960][315 ms][DEBUG] SU: done in 314 ms; outroot         16270     1 2312272   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 19:58:27][350498054031960][315 ms][DEBUG] check_frida: running
[2025-08-21 19:58:27][350498054031960][315 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 19:58:27][350498054031960][315 ms][DEBUG] START check_internet
[2025-08-21 19:58:27][350498054031960][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 19:58:27][350498054031960][596 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=176 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 176.302/176.302/176.302/0.000 ms\n
[2025-08-21 19:58:27][350498054031960][596 ms][DEBUG] check_internet: online
[2025-08-21 19:58:27][350498054031960][596 ms][DEBUG] END   check_internet in 282 ms
[2025-08-21 19:58:27][350498054031960][596 ms][DEBUG] START check_scloud
[2025-08-21 19:58:27][350498054031960][597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 19:58:27][350498054031960][846 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23678256 82168 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 19:58:27][350498054031960][846 ms][DEBUG] targetPkg: running
[2025-08-21 19:58:27][350498054031960][846 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 19:58:27][350498054031960][846 ms][DEBUG] rawBody.length=1160
[2025-08-21 19:58:27][350498054031960][846 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDU0MDMxOTYwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzI0In0='" -e "main()" -q"
[2025-08-21 19:58:27][350498054031960][846 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 19:58:27][350498054031960][846 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDU0MDMxOTYwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzI0In0='" -e "main()" -q"
[2025-08-21 19:58:30][350498054031960][3501 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDk4MDU0MDMxOTYwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFRSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzI0In0="\r\n
[2025-08-21 19:58:33][350498054031960][6626 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46c4eef2-5e53-4cb2-b37a-11c31c2d9d36","id":"QR_46c4eef2-5e53-4cb2-b37a-11c31c2d9d36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 19:58:33][350498054031960][6626 ms][DEBUG] proc_open done in 5780 ms; code=0; res.len=3152
[2025-08-21 19:58:33][350498054031960][6626 ms][DEBUG] END   runCmdUntilRes#1 in 5780 ms
[2025-08-21 19:58:33][350498054031960][6626 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:00:11][352288963352617][0 ms][INFO] === Request start ===
[2025-08-21 20:00:11][352288963352617][0 ms][DEBUG] START check_frida
[2025-08-21 20:00:11][352288963352617][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:00:12][352288963352617][306 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2295852   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:00:12][352288963352617][306 ms][DEBUG] check_frida: running
[2025-08-21 20:00:12][352288963352617][306 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 20:00:12][352288963352617][307 ms][DEBUG] START check_internet
[2025-08-21 20:00:12][352288963352617][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:00:12][352288963352617][666 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.493/240.493/240.493/0.000 ms\n
[2025-08-21 20:00:12][352288963352617][666 ms][DEBUG] check_internet: online
[2025-08-21 20:00:12][352288963352617][666 ms][DEBUG] END   check_internet in 359 ms
[2025-08-21 20:00:12][352288963352617][666 ms][DEBUG] START check_scloud
[2025-08-21 20:00:12][352288963352617][666 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:00:12][352288963352617][962 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23678288 82760 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:00:12][352288963352617][962 ms][DEBUG] targetPkg: running
[2025-08-21 20:00:12][352288963352617][962 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 20:00:12][352288963352617][962 ms][DEBUG] rawBody.length=1161
[2025-08-21 20:00:12][352288963352617][962 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTYzMzUyNjE3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ1MDFQR0NIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk5OCJ9'" -e "main()" -q"
[2025-08-21 20:00:12][352288963352617][962 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:00:12][352288963352617][962 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTYzMzUyNjE3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ1MDFQR0NIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk5OCJ9'" -e "main()" -q"
[2025-08-21 20:00:15][352288963352617][3602 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjg4OTYzMzUyNjE3IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ1MDFQR0NIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzk5OCJ9"\r\n
[2025-08-21 20:00:17][352288963352617][5961 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc6291a8-6043-490f-99a6-5b79f3e6add3","id":"QR_bc6291a8-6043-490f-99a6-5b79f3e6add3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:00:17][352288963352617][5961 ms][DEBUG] proc_open done in 4999 ms; code=0; res.len=3152
[2025-08-21 20:00:17][352288963352617][5961 ms][DEBUG] END   runCmdUntilRes#1 in 4999 ms
[2025-08-21 20:00:17][352288963352617][5961 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:01:08][358184572238889][1 ms][INFO] === Request start ===
[2025-08-21 20:01:08][358184572238889][2 ms][DEBUG] START check_frida
[2025-08-21 20:01:08][358184572238889][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:01:08][358184572238889][307 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2295852   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:01:08][358184572238889][307 ms][DEBUG] check_frida: running
[2025-08-21 20:01:08][358184572238889][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 20:01:08][358184572238889][308 ms][DEBUG] START check_scloud
[2025-08-21 20:01:08][358184572238889][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:01:09][358184572238889][573 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23678320 81968 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:01:09][358184572238889][573 ms][DEBUG] targetPkg: running
[2025-08-21 20:01:09][358184572238889][573 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 20:01:09][358184572238889][573 ms][DEBUG] rawBody.length=1161
[2025-08-21 20:01:09][358184572238889][573 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTg0NTcyMjM4ODg5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMFNHSDhEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkzMyJ9'" -e "main()" -q"
[2025-08-21 20:01:09][358184572238889][573 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:01:09][358184572238889][573 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTg0NTcyMjM4ODg5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMFNHSDhEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkzMyJ9'" -e "main()" -q"
[2025-08-21 20:01:11][358184572238889][3213 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MTg0NTcyMjM4ODg5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDMFNHSDhEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkzMyJ9"\r\n
[2025-08-21 20:01:13][358184572238889][5228 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6165c96d-dc38-456d-975e-4d578cc2b65c","id":"QR_6165c96d-dc38-456d-975e-4d578cc2b65c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:01:13][358184572238889][5228 ms][DEBUG] proc_open done in 4655 ms; code=0; res.len=3152
[2025-08-21 20:01:13][358184572238889][5228 ms][DEBUG] END   runCmdUntilRes#1 in 4655 ms
[2025-08-21 20:01:13][358184572238889][5229 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:02:10][352689821232752][0 ms][INFO] === Request start ===
[2025-08-21 20:02:10][352689821232752][1 ms][DEBUG] START check_frida
[2025-08-21 20:02:10][352689821232752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:02:10][352689821232752][326 ms][DEBUG] SU: done in 325 ms; outroot         16270     1 2295852   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:02:10][352689821232752][326 ms][DEBUG] check_frida: running
[2025-08-21 20:02:10][352689821232752][326 ms][DEBUG] END   check_frida in 325 ms
[2025-08-21 20:02:10][352689821232752][326 ms][DEBUG] START check_internet
[2025-08-21 20:02:10][352689821232752][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:02:11][352689821232752][858 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.609/200.609/200.609/0.000 ms\n
[2025-08-21 20:02:11][352689821232752][858 ms][DEBUG] check_internet: online
[2025-08-21 20:02:11][352689821232752][858 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 20:02:11][352689821232752][858 ms][DEBUG] START check_scloud
[2025-08-21 20:02:11][352689821232752][858 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:02:11][352689821232752][1139 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23678352 82556 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:02:11][352689821232752][1139 ms][DEBUG] targetPkg: running
[2025-08-21 20:02:11][352689821232752][1139 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 20:02:11][352689821232752][1139 ms][DEBUG] rawBody.length=1161
[2025-08-21 20:02:11][352689821232752][1139 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjg5ODIxMjMyNzUyIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c5MTMyQURZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwOSJ9'" -e "main()" -q"
[2025-08-21 20:02:11][352689821232752][1139 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:02:11][352689821232752][1139 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjg5ODIxMjMyNzUyIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c5MTMyQURZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwOSJ9'" -e "main()" -q"
[2025-08-21 20:02:14][352689821232752][3794 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjg5ODIxMjMyNzUyIiwibW9kZWwiOiJTTS1BMzQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c5MTMyQURZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjkwOSJ9"\r\n
[2025-08-21 20:02:16][352689821232752][5965 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb3101c8-c494-43c4-9a41-fed6862e7d4b","id":"QR_cb3101c8-c494-43c4-9a41-fed6862e7d4b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:02:16][352689821232752][5966 ms][DEBUG] proc_open done in 4826 ms; code=0; res.len=3152
[2025-08-21 20:02:16][352689821232752][5966 ms][DEBUG] END   runCmdUntilRes#1 in 4826 ms
[2025-08-21 20:02:16][352689821232752][5966 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:02:35][354438820146409][1 ms][INFO] === Request start ===
[2025-08-21 20:02:35][354438820146409][1 ms][DEBUG] START check_frida
[2025-08-21 20:02:35][354438820146409][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:02:36][354438820146409][307 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2312272   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:02:36][354438820146409][307 ms][DEBUG] check_frida: running
[2025-08-21 20:02:36][354438820146409][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 20:02:36][354438820146409][308 ms][DEBUG] START check_internet
[2025-08-21 20:02:36][354438820146409][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:02:36][354438820146409][603 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=180 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 180.619/180.619/180.619/0.000 ms\n
[2025-08-21 20:02:36][354438820146409][603 ms][DEBUG] check_internet: online
[2025-08-21 20:02:36][354438820146409][603 ms][DEBUG] END   check_internet in 295 ms
[2025-08-21 20:02:36][354438820146409][603 ms][DEBUG] START check_scloud
[2025-08-21 20:02:36][354438820146409][603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:02:36][354438820146409][869 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23678384 82020 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:02:36][354438820146409][869 ms][DEBUG] targetPkg: running
[2025-08-21 20:02:36][354438820146409][869 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 20:02:36][354438820146409][869 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:02:36][354438820146409][869 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDM4ODIwMTQ2NDA5IiwibW9kZWwiOiJTTS1BMjM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzNTAxSldSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDIyIn0='" -e "main()" -q"
[2025-08-21 20:02:36][354438820146409][869 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:02:36][354438820146409][869 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDM4ODIwMTQ2NDA5IiwibW9kZWwiOiJTTS1BMjM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzNTAxSldSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDIyIn0='" -e "main()" -q"
[2025-08-21 20:02:39][354438820146409][3508 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDM4ODIwMTQ2NDA5IiwibW9kZWwiOiJTTS1BMjM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzNTAxSldSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDIyIn0="\r\n
[2025-08-21 20:02:42][354438820146409][6352 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c92f7c11-236c-4acb-84cc-c605e8b12e7f","id":"QR_c92f7c11-236c-4acb-84cc-c605e8b12e7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:02:42][354438820146409][6352 ms][DEBUG] proc_open done in 5483 ms; code=0; res.len=3152
[2025-08-21 20:02:42][354438820146409][6352 ms][DEBUG] END   runCmdUntilRes#1 in 5483 ms
[2025-08-21 20:02:42][354438820146409][6352 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:04:10][357651710233080][0 ms][INFO] === Request start ===
[2025-08-21 20:04:10][357651710233080][1 ms][DEBUG] START check_frida
[2025-08-21 20:04:10][357651710233080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:04:10][357651710233080][309 ms][DEBUG] SU: done in 308 ms; outroot         16270     1 2295852   4420 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:04:10][357651710233080][309 ms][DEBUG] check_frida: running
[2025-08-21 20:04:10][357651710233080][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 20:04:10][357651710233080][309 ms][DEBUG] START check_internet
[2025-08-21 20:04:10][357651710233080][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:04:11][357651710233080][684 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.058/264.058/264.058/0.000 ms\n
[2025-08-21 20:04:11][357651710233080][684 ms][DEBUG] check_internet: online
[2025-08-21 20:04:11][357651710233080][684 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 20:04:11][357651710233080][685 ms][DEBUG] START check_scloud
[2025-08-21 20:04:11][357651710233080][685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:04:11][357651710233080][934 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23678416 81440 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:04:11][357651710233080][934 ms][DEBUG] targetPkg: running
[2025-08-21 20:04:11][357651710233080][934 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:04:11][357651710233080][934 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:04:11][357651710233080][934 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzEwMjMzMDgwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ1MDJaU0xKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzY1In0='" -e "main()" -q"
[2025-08-21 20:04:11][357651710233080][934 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:04:11][357651710233080][934 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzEwMjMzMDgwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ1MDJaU0xKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzY1In0='" -e "main()" -q"
[2025-08-21 20:04:14][357651710233080][3589 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzEwMjMzMDgwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ1MDJaU0xKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzY1In0="\r\n
[2025-08-21 20:04:18][357651710233080][8010 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29bc2487-a4cd-4fa4-944f-b0f363aecb20","id":"QR_29bc2487-a4cd-4fa4-944f-b0f363aecb20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:04:18][357651710233080][8010 ms][DEBUG] proc_open done in 7076 ms; code=0; res.len=3152
[2025-08-21 20:04:18][357651710233080][8010 ms][DEBUG] END   runCmdUntilRes#1 in 7076 ms
[2025-08-21 20:04:18][357651710233080][8010 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:04:27][354595808612411][0 ms][INFO] === Request start ===
[2025-08-21 20:04:27][354595808612411][1 ms][DEBUG] START check_frida
[2025-08-21 20:04:27][354595808612411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:04:27][354595808612411][261 ms][DEBUG] SU: done in 260 ms; outroot         16270     1 2312272   4396 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:04:27][354595808612411][261 ms][DEBUG] check_frida: running
[2025-08-21 20:04:27][354595808612411][261 ms][DEBUG] END   check_frida in 261 ms
[2025-08-21 20:04:27][354595808612411][262 ms][DEBUG] START check_internet
[2025-08-21 20:04:27][354595808612411][262 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:04:27][354595808612411][589 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.906/210.906/210.906/0.000 ms\n
[2025-08-21 20:04:27][354595808612411][590 ms][DEBUG] check_internet: online
[2025-08-21 20:04:27][354595808612411][590 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 20:04:27][354595808612411][590 ms][DEBUG] START check_scloud
[2025-08-21 20:04:27][354595808612411][590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:04:28][354595808612411][1011 ms][DEBUG] SU: done in 422 ms; outu0_a118      16385  4994 23678448 81256 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:04:28][354595808612411][1011 ms][DEBUG] targetPkg: running
[2025-08-21 20:04:28][354595808612411][1012 ms][DEBUG] END   check_scloud in 422 ms
[2025-08-21 20:04:28][354595808612411][1012 ms][DEBUG] rawBody.length=1161
[2025-08-21 20:04:28][354595808612411][1012 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTk1ODA4NjEyNDExIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MDJDVDZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU4MyJ9'" -e "main()" -q"
[2025-08-21 20:04:28][354595808612411][1012 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:04:28][354595808612411][1012 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTk1ODA4NjEyNDExIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MDJDVDZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU4MyJ9'" -e "main()" -q"
[2025-08-21 20:04:28][350915063909480][0 ms][INFO] === Request start ===
[2025-08-21 20:04:30][354595808612411][3651 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTk1ODA4NjEyNDExIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c1MDJDVDZMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTU4MyJ9"\r\n
[2025-08-21 20:04:33][354595808612411][5947 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5485c0ba-f8e0-4d26-98cb-f9f9b7fc4fdb","id":"QR_5485c0ba-f8e0-4d26-98cb-f9f9b7fc4fdb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:04:33][354595808612411][5948 ms][DEBUG] proc_open done in 4936 ms; code=0; res.len=3152
[2025-08-21 20:04:33][354595808612411][5948 ms][DEBUG] END   runCmdUntilRes#1 in 4936 ms
[2025-08-21 20:04:33][354595808612411][5948 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:04:33][350915063909480][5064 ms][DEBUG] START check_frida
[2025-08-21 20:04:33][350915063909480][5064 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:04:33][350915063909480][5377 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2312272   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:04:33][350915063909480][5377 ms][DEBUG] check_frida: running
[2025-08-21 20:04:33][350915063909480][5377 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 20:04:33][350915063909480][5377 ms][DEBUG] START check_internet
[2025-08-21 20:04:33][350915063909480][5377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:04:34][350915063909480][5642 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.829/146.829/146.829/0.000 ms\n
[2025-08-21 20:04:34][350915063909480][5642 ms][DEBUG] check_internet: online
[2025-08-21 20:04:34][350915063909480][5642 ms][DEBUG] END   check_internet in 265 ms
[2025-08-21 20:04:34][350915063909480][5642 ms][DEBUG] START check_scloud
[2025-08-21 20:04:34][350915063909480][5642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:04:34][350915063909480][5893 ms][DEBUG] SU: done in 251 ms; outu0_a118      16385  4994 23678480 81812 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:04:34][350915063909480][5893 ms][DEBUG] targetPkg: running
[2025-08-21 20:04:34][350915063909480][5893 ms][DEBUG] END   check_scloud in 251 ms
[2025-08-21 20:04:34][350915063909480][5893 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:04:34][350915063909480][5893 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTE1MDYzOTA5NDgwIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFczMDNaN1lYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDE2In0='" -e "main()" -q"
[2025-08-21 20:04:34][350915063909480][5894 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:04:34][350915063909480][5894 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTE1MDYzOTA5NDgwIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFczMDNaN1lYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDE2In0='" -e "main()" -q"
[2025-08-21 20:04:37][350915063909480][8547 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTE1MDYzOTA5NDgwIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFczMDNaN1lYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDE2In0="\r\n
[2025-08-21 20:04:39][355016404689207][1 ms][INFO] === Request start ===
[2025-08-21 20:04:40][350915063909480][11578 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7f53fc0-34ad-4aad-a6e3-b83af57738aa","id":"QR_f7f53fc0-34ad-4aad-a6e3-b83af57738aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:04:40][350915063909480][11579 ms][DEBUG] proc_open done in 5685 ms; code=0; res.len=3152
[2025-08-21 20:04:40][350915063909480][11579 ms][DEBUG] END   runCmdUntilRes#1 in 5685 ms
[2025-08-21 20:04:40][350915063909480][11579 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:04:40][355016404689207][1016 ms][DEBUG] START check_frida
[2025-08-21 20:04:40][355016404689207][1016 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:04:41][355016404689207][1328 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2312272   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:04:41][355016404689207][1328 ms][DEBUG] check_frida: running
[2025-08-21 20:04:41][355016404689207][1328 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 20:04:41][355016404689207][1328 ms][DEBUG] START check_internet
[2025-08-21 20:04:41][355016404689207][1328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:04:41][355016404689207][1578 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.948/146.948/146.948/0.000 ms\n
[2025-08-21 20:04:41][355016404689207][1578 ms][DEBUG] check_internet: online
[2025-08-21 20:04:41][355016404689207][1578 ms][DEBUG] END   check_internet in 250 ms
[2025-08-21 20:04:41][355016404689207][1578 ms][DEBUG] START check_scloud
[2025-08-21 20:04:41][355016404689207][1578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:04:41][355016404689207][1828 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23678512 81228 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:04:41][355016404689207][1828 ms][DEBUG] targetPkg: running
[2025-08-21 20:04:41][355016404689207][1828 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:04:41][355016404689207][1828 ms][DEBUG] rawBody.length=1161
[2025-08-21 20:04:41][355016404689207][1828 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDE2NDA0Njg5MjA3IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJCMk1GQ0RQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ2NSJ9'" -e "main()" -q"
[2025-08-21 20:04:41][355016404689207][1828 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:04:41][355016404689207][1828 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MDE2NDA0Njg5MjA3IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJCMk1GQ0RQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ2NSJ9'" -e "main()" -q"
[2025-08-21 20:04:44][355016404689207][4452 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MDE2NDA0Njg5MjA3IiwibW9kZWwiOiJTTS1BMTI3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFJCMk1GQ0RQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzQ2NSJ9"\r\n
[2025-08-21 20:04:46][355016404689207][6499 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48ab44c5-e9ad-4ea3-9f9d-be81be86dcdc","id":"QR_48ab44c5-e9ad-4ea3-9f9d-be81be86dcdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:04:46][355016404689207][6499 ms][DEBUG] proc_open done in 4670 ms; code=0; res.len=3152
[2025-08-21 20:04:46][355016404689207][6499 ms][DEBUG] END   runCmdUntilRes#1 in 4670 ms
[2025-08-21 20:04:46][355016404689207][6499 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:06:08][352861160941729][0 ms][INFO] === Request start ===
[2025-08-21 20:06:08][352861160941729][1 ms][DEBUG] START check_frida
[2025-08-21 20:06:08][352861160941729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:06:08][352861160941729][308 ms][DEBUG] SU: done in 307 ms; outroot         16270     1 2295852   4416 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:06:08][352861160941729][308 ms][DEBUG] check_frida: running
[2025-08-21 20:06:08][352861160941729][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 20:06:08][352861160941729][308 ms][DEBUG] START check_internet
[2025-08-21 20:06:08][352861160941729][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:06:08][352861160941729][620 ms][DEBUG] SU: done in 311 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.548/208.548/208.548/0.000 ms\n
[2025-08-21 20:06:08][352861160941729][620 ms][DEBUG] check_internet: online
[2025-08-21 20:06:08][352861160941729][620 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 20:06:08][352861160941729][620 ms][DEBUG] START check_scloud
[2025-08-21 20:06:08][352861160941729][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:06:08][352861160941729][917 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23678544 80924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:06:08][352861160941729][917 ms][DEBUG] targetPkg: running
[2025-08-21 20:06:08][352861160941729][917 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 20:06:08][352861160941729][917 ms][DEBUG] rawBody.length=1161
[2025-08-21 20:06:08][352861160941729][917 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODYxMTYwOTQxNzI5IiwibW9kZWwiOiJTTS1BMzM2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q3ME1UNVJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYyOSJ9'" -e "main()" -q"
[2025-08-21 20:06:08][352861160941729][917 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:06:08][352861160941729][917 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODYxMTYwOTQxNzI5IiwibW9kZWwiOiJTTS1BMzM2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q3ME1UNVJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYyOSJ9'" -e "main()" -q"
[2025-08-21 20:06:11][352861160941729][3572 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyODYxMTYwOTQxNzI5IiwibW9kZWwiOiJTTS1BMzM2TiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1Q3ME1UNVJKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJLT0MiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYyOSJ9"\r\n
[2025-08-21 20:06:13][352861160941729][5853 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9688d6d-41e5-47d4-b2fb-87796385eeac","id":"QR_e9688d6d-41e5-47d4-b2fb-87796385eeac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:06:13][352861160941729][5853 ms][DEBUG] proc_open done in 4936 ms; code=0; res.len=3152
[2025-08-21 20:06:13][352861160941729][5854 ms][DEBUG] END   runCmdUntilRes#1 in 4937 ms
[2025-08-21 20:06:13][352861160941729][5854 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:07:09][357980448166357][1 ms][INFO] === Request start ===
[2025-08-21 20:07:09][357980448166357][2 ms][DEBUG] START check_frida
[2025-08-21 20:07:09][357980448166357][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:07:09][357980448166357][294 ms][DEBUG] SU: done in 292 ms; outroot         16270     1 2295852   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:07:09][357980448166357][294 ms][DEBUG] check_frida: running
[2025-08-21 20:07:09][357980448166357][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 20:07:09][357980448166357][294 ms][DEBUG] START check_scloud
[2025-08-21 20:07:09][357980448166357][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:07:09][357980448166357][606 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23678576 81596 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:07:09][357980448166357][607 ms][DEBUG] targetPkg: running
[2025-08-21 20:07:09][357980448166357][607 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 20:07:09][357980448166357][607 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:07:09][357980448166357][607 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTgwNDQ4MTY2MzU3IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg1MDM1TlFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjk0In0='" -e "main()" -q"
[2025-08-21 20:07:09][357980448166357][607 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:07:09][357980448166357][607 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTgwNDQ4MTY2MzU3IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg1MDM1TlFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjk0In0='" -e "main()" -q"
[2025-08-21 20:07:12][357980448166357][3231 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTgwNDQ4MTY2MzU3IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg1MDM1TlFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjk0In0="\r\n
[2025-08-21 20:07:15][357980448166357][6308 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e40e7d81-59fc-457f-878f-040cf171ffa4","id":"QR_e40e7d81-59fc-457f-878f-040cf171ffa4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:07:15][357980448166357][6309 ms][DEBUG] proc_open done in 5702 ms; code=0; res.len=3152
[2025-08-21 20:07:15][357980448166357][6309 ms][DEBUG] END   runCmdUntilRes#1 in 5702 ms
[2025-08-21 20:07:15][357980448166357][6309 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:09:29][354562652699225][1 ms][INFO] === Request start ===
[2025-08-21 20:09:29][354562652699225][2 ms][DEBUG] START check_frida
[2025-08-21 20:09:29][354562652699225][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:09:30][354562652699225][304 ms][DEBUG] SU: done in 302 ms; outroot         16270     1 2295852   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:09:30][354562652699225][304 ms][DEBUG] check_frida: running
[2025-08-21 20:09:30][354562652699225][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 20:09:30][354562652699225][304 ms][DEBUG] START check_scloud
[2025-08-21 20:09:30][354562652699225][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:09:30][354562652699225][538 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23678608 81308 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:09:30][354562652699225][538 ms][DEBUG] targetPkg: running
[2025-08-21 20:09:30][354562652699225][538 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 20:09:30][354562652699225][538 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:09:30][354562652699225][538 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTYyNjUyNjk5MjI1IiwibW9kZWwiOiJTTS1BMzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQxMDhBVDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzkzIn0='" -e "main()" -q"
[2025-08-21 20:09:30][354562652699225][538 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:09:30][354562652699225][538 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTYyNjUyNjk5MjI1IiwibW9kZWwiOiJTTS1BMzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQxMDhBVDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzkzIn0='" -e "main()" -q"
[2025-08-21 20:09:33][354562652699225][3209 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTYyNjUyNjk5MjI1IiwibW9kZWwiOiJTTS1BMzI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQxMDhBVDVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MzkzIn0="\r\n
[2025-08-21 20:09:38][354562652699225][8333 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83f27ae0-20c5-48d0-8d21-56d4ea3eb86b","id":"QR_83f27ae0-20c5-48d0-8d21-56d4ea3eb86b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:09:38][354562652699225][8333 ms][DEBUG] proc_open done in 7794 ms; code=0; res.len=3152
[2025-08-21 20:09:38][354562652699225][8333 ms][DEBUG] END   runCmdUntilRes#1 in 7795 ms
[2025-08-21 20:09:38][354562652699225][8333 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:10:48][357980448114977][1 ms][INFO] === Request start ===
[2025-08-21 20:10:48][357980448114977][2 ms][DEBUG] START check_frida
[2025-08-21 20:10:48][357980448114977][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:10:48][357980448114977][317 ms][DEBUG] SU: done in 315 ms; outroot         16270     1 2295852   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:10:48][357980448114977][317 ms][DEBUG] check_frida: running
[2025-08-21 20:10:48][357980448114977][317 ms][DEBUG] END   check_frida in 315 ms
[2025-08-21 20:10:48][357980448114977][317 ms][DEBUG] START check_internet
[2025-08-21 20:10:48][357980448114977][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:10:49][357980448114977][770 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.632/201.632/201.632/0.000 ms\n
[2025-08-21 20:10:49][357980448114977][770 ms][DEBUG] check_internet: online
[2025-08-21 20:10:49][357980448114977][770 ms][DEBUG] END   check_internet in 453 ms
[2025-08-21 20:10:49][357980448114977][770 ms][DEBUG] START check_scloud
[2025-08-21 20:10:49][357980448114977][770 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:10:49][357980448114977][1020 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23678640 81860 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:10:49][357980448114977][1020 ms][DEBUG] targetPkg: running
[2025-08-21 20:10:49][357980448114977][1020 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:10:49][357980448114977][1020 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:10:49][357980448114977][1020 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTgwNDQ4MTE0OTc3IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg1MDMwWjFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNDEwIn0='" -e "main()" -q"
[2025-08-21 20:10:49][357980448114977][1020 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:10:49][357980448114977][1020 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTgwNDQ4MTE0OTc3IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg1MDMwWjFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNDEwIn0='" -e "main()" -q"
[2025-08-21 20:10:51][357980448114977][3644 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTgwNDQ4MTE0OTc3IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFg1MDMwWjFKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNDEwIn0="\r\n
[2025-08-21 20:10:56][357980448114977][8237 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24f8d68f-b98b-49bd-8b21-9098cf96b71d","id":"QR_24f8d68f-b98b-49bd-8b21-9098cf96b71d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:10:56][357980448114977][8237 ms][DEBUG] proc_open done in 7217 ms; code=0; res.len=3152
[2025-08-21 20:10:56][357980448114977][8237 ms][DEBUG] END   runCmdUntilRes#1 in 7217 ms
[2025-08-21 20:10:56][357980448114977][8237 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:12:09][356722913988852][0 ms][INFO] === Request start ===
[2025-08-21 20:12:09][356722913988852][1 ms][DEBUG] START check_frida
[2025-08-21 20:12:09][356722913988852][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:12:09][356722913988852][307 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2295852   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:12:09][356722913988852][308 ms][DEBUG] check_frida: running
[2025-08-21 20:12:09][356722913988852][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 20:12:09][356722913988852][308 ms][DEBUG] START check_internet
[2025-08-21 20:12:09][356722913988852][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:12:09][356722913988852][792 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.598/202.598/202.598/0.000 ms\n
[2025-08-21 20:12:09][356722913988852][792 ms][DEBUG] check_internet: online
[2025-08-21 20:12:09][356722913988852][792 ms][DEBUG] END   check_internet in 484 ms
[2025-08-21 20:12:09][356722913988852][792 ms][DEBUG] START check_scloud
[2025-08-21 20:12:09][356722913988852][792 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:12:10][356722913988852][1042 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23678672 81120 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:12:10][356722913988852][1042 ms][DEBUG] targetPkg: running
[2025-08-21 20:12:10][356722913988852][1042 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:12:10][356722913988852][1042 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:12:10][356722913988852][1042 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzIyOTEzOTg4ODUyIiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gzMDZaS1RWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDkzIn0='" -e "main()" -q"
[2025-08-21 20:12:10][356722913988852][1042 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:12:10][356722913988852][1042 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NzIyOTEzOTg4ODUyIiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gzMDZaS1RWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDkzIn0='" -e "main()" -q"
[2025-08-21 20:12:12][356722913988852][3697 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NzIyOTEzOTg4ODUyIiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gzMDZaS1RWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NDkzIn0="\r\n
[2025-08-21 20:12:16][356722913988852][7228 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67857bb4-623c-4fa9-b0d3-5a4bafa42824","id":"QR_67857bb4-623c-4fa9-b0d3-5a4bafa42824","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:12:16][356722913988852][7228 ms][DEBUG] proc_open done in 6186 ms; code=0; res.len=3152
[2025-08-21 20:12:16][356722913988852][7228 ms][DEBUG] END   runCmdUntilRes#1 in 6186 ms
[2025-08-21 20:12:16][356722913988852][7228 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:12:25][350547662780291][0 ms][INFO] === Request start ===
[2025-08-21 20:12:25][350547662780291][1 ms][DEBUG] START check_frida
[2025-08-21 20:12:25][350547662780291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:12:25][350547662780291][265 ms][DEBUG] SU: done in 264 ms; outroot         16270     1 2312272   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:12:25][350547662780291][265 ms][DEBUG] check_frida: running
[2025-08-21 20:12:25][350547662780291][265 ms][DEBUG] END   check_frida in 264 ms
[2025-08-21 20:12:25][350547662780291][265 ms][DEBUG] START check_internet
[2025-08-21 20:12:25][350547662780291][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:12:25][350547662780291][687 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.471/297.471/297.471/0.000 ms\n
[2025-08-21 20:12:25][350547662780291][687 ms][DEBUG] check_internet: online
[2025-08-21 20:12:25][350547662780291][687 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 20:12:25][350547662780291][687 ms][DEBUG] START check_scloud
[2025-08-21 20:12:25][350547662780291][687 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:12:26][350547662780291][968 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23678704 81676 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:12:26][350547662780291][968 ms][DEBUG] targetPkg: running
[2025-08-21 20:12:26][350547662780291][968 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 20:12:26][350547662780291][968 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:12:26][350547662780291][968 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ3NjYyNzgwMjkxIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJDMDBSRFdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjE0In0='" -e "main()" -q"
[2025-08-21 20:12:26][350547662780291][968 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:12:26][350547662780291][968 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTQ3NjYyNzgwMjkxIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJDMDBSRFdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjE0In0='" -e "main()" -q"
[2025-08-21 20:12:28][350547662780291][3608 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTQ3NjYyNzgwMjkxIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJDMDBSRFdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjE0In0="\r\n
[2025-08-21 20:12:32][350547662780291][7107 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91c17738-f638-4bf9-a88c-9891b736b674","id":"QR_91c17738-f638-4bf9-a88c-9891b736b674","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:12:32][350547662780291][7107 ms][DEBUG] proc_open done in 6139 ms; code=0; res.len=3152
[2025-08-21 20:12:32][350547662780291][7107 ms][DEBUG] END   runCmdUntilRes#1 in 6139 ms
[2025-08-21 20:12:32][350547662780291][7107 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:17:09][351088371987272][1 ms][INFO] === Request start ===
[2025-08-21 20:17:09][351088371987272][2 ms][DEBUG] START check_frida
[2025-08-21 20:17:09][351088371987272][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:17:09][351088371987272][270 ms][DEBUG] SU: done in 268 ms; outroot         16270     1 2295852   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:17:09][351088371987272][270 ms][DEBUG] check_frida: running
[2025-08-21 20:17:09][351088371987272][270 ms][DEBUG] END   check_frida in 268 ms
[2025-08-21 20:17:09][351088371987272][270 ms][DEBUG] START check_scloud
[2025-08-21 20:17:09][351088371987272][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:17:09][351088371987272][504 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23678736 81440 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:17:09][351088371987272][504 ms][DEBUG] targetPkg: running
[2025-08-21 20:17:09][351088371987272][504 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 20:17:09][351088371987272][504 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:17:09][351088371987272][505 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDg4MzcxOTg3MjcyIiwibW9kZWwiOiJTTS1NNjI1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJBMDJDUzdBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDIxIn0='" -e "main()" -q"
[2025-08-21 20:17:09][351088371987272][505 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:17:09][351088371987272][505 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDg4MzcxOTg3MjcyIiwibW9kZWwiOiJTTS1NNjI1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJBMDJDUzdBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDIxIn0='" -e "main()" -q"
[2025-08-21 20:17:12][351088371987272][3160 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDg4MzcxOTg3MjcyIiwibW9kZWwiOiJTTS1NNjI1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJBMDJDUzdBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDIxIn0="\r\n
[2025-08-21 20:17:18][351088371987272][8721 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48fc71b8-4eb5-433c-a80b-14575ef34c3e","id":"QR_48fc71b8-4eb5-433c-a80b-14575ef34c3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:17:18][351088371987272][8722 ms][DEBUG] proc_open done in 8217 ms; code=0; res.len=3152
[2025-08-21 20:17:18][351088371987272][8722 ms][DEBUG] END   runCmdUntilRes#1 in 8217 ms
[2025-08-21 20:17:18][351088371987272][8722 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:19:46][353357972442708][1 ms][INFO] === Request start ===
[2025-08-21 20:19:46][353357972442708][2 ms][DEBUG] START check_frida
[2025-08-21 20:19:46][353357972442708][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:19:47][353357972442708][309 ms][DEBUG] SU: done in 308 ms; outroot         16270     1 2295852   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:19:47][353357972442708][309 ms][DEBUG] check_frida: running
[2025-08-21 20:19:47][353357972442708][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 20:19:47][353357972442708][309 ms][DEBUG] START check_scloud
[2025-08-21 20:19:47][353357972442708][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:19:47][353357972442708][544 ms][DEBUG] SU: done in 235 ms; outu0_a118      16385  4994 23678768 82028 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:19:47][353357972442708][544 ms][DEBUG] targetPkg: running
[2025-08-21 20:19:47][353357972442708][545 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 20:19:47][353357972442708][545 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:19:47][353357972442708][545 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTcyNDQyNzA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MEcyVDNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTM0In0='" -e "main()" -q"
[2025-08-21 20:19:47][353357972442708][545 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:19:47][353357972442708][545 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTcyNDQyNzA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MEcyVDNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTM0In0='" -e "main()" -q"
[2025-08-21 20:19:50][353357972442708][3230 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzU3OTcyNDQyNzA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg2MEcyVDNFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTM0In0="\r\n
[2025-08-21 20:19:53][353357972442708][6605 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5c87cfd-864c-4c51-9b29-795c233708ce","id":"QR_e5c87cfd-864c-4c51-9b29-795c233708ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:19:53][353357972442708][6605 ms][DEBUG] proc_open done in 6060 ms; code=0; res.len=3152
[2025-08-21 20:19:53][353357972442708][6605 ms][DEBUG] END   runCmdUntilRes#1 in 6060 ms
[2025-08-21 20:19:53][353357972442708][6605 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:19:54][353357971068652][0 ms][INFO] === Request start ===
[2025-08-21 20:19:54][353357971068652][1 ms][DEBUG] START check_frida
[2025-08-21 20:19:54][353357971068652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:19:54][353357971068652][272 ms][DEBUG] SU: done in 271 ms; outroot         16270     1 2312272   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:19:54][353357971068652][272 ms][DEBUG] check_frida: running
[2025-08-21 20:19:54][353357971068652][272 ms][DEBUG] END   check_frida in 271 ms
[2025-08-21 20:19:54][353357971068652][272 ms][DEBUG] START check_scloud
[2025-08-21 20:19:54][353357971068652][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:19:54][353357971068652][522 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23678800 81008 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:19:54][353357971068652][522 ms][DEBUG] targetPkg: running
[2025-08-21 20:19:54][353357971068652][522 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:19:54][353357971068652][522 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:19:54][353357971068652][522 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTcxMDY4NjUyIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEdIOEhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MDY2In0='" -e "main()" -q"
[2025-08-21 20:19:54][353357971068652][522 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:19:54][353357971068652][522 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTcxMDY4NjUyIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEdIOEhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MDY2In0='" -e "main()" -q"
[2025-08-21 20:19:57][353357971068652][3161 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzU3OTcxMDY4NjUyIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFg1MEdIOEhIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MDY2In0="\r\n
[2025-08-21 20:20:00][353357971068652][6005 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a382ed9-d375-4197-8864-a6fa44f39a45","id":"QR_3a382ed9-d375-4197-8864-a6fa44f39a45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:20:00][353357971068652][6005 ms][DEBUG] proc_open done in 5483 ms; code=0; res.len=3152
[2025-08-21 20:20:00][353357971068652][6005 ms][DEBUG] END   runCmdUntilRes#1 in 5483 ms
[2025-08-21 20:20:00][353357971068652][6005 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:25:12][353244114388595][1 ms][INFO] === Request start ===
[2025-08-21 20:25:12][353244114388595][2 ms][DEBUG] START check_frida
[2025-08-21 20:25:12][353244114388595][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:25:12][353244114388595][305 ms][DEBUG] SU: done in 304 ms; outroot         16270     1 2295852   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:25:12][353244114388595][306 ms][DEBUG] check_frida: running
[2025-08-21 20:25:12][353244114388595][306 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 20:25:12][353244114388595][306 ms][DEBUG] START check_scloud
[2025-08-21 20:25:12][353244114388595][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:25:12][353244114388595][604 ms][DEBUG] SU: done in 299 ms; outu0_a118      16385  4994 23678832 81832 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:25:12][353244114388595][604 ms][DEBUG] targetPkg: running
[2025-08-21 20:25:12][353244114388595][604 ms][DEBUG] END   check_scloud in 299 ms
[2025-08-21 20:25:12][353244114388595][604 ms][DEBUG] rawBody.length=1159
[2025-08-21 20:25:12][353244114388595][605 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjQ0MTE0Mzg4NTk1IiwibW9kZWwiOiJTTS1YNzEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDcwQkRZNkEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ0hPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzMyMjYifQ=='" -e "main()" -q"
[2025-08-21 20:25:12][353244114388595][605 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:25:12][353244114388595][605 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjQ0MTE0Mzg4NTk1IiwibW9kZWwiOiJTTS1YNzEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDcwQkRZNkEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ0hPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzMyMjYifQ=='" -e "main()" -q"
[2025-08-21 20:25:15][353244114388595][3227 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjQ0MTE0Mzg4NTk1IiwibW9kZWwiOiJTTS1YNzEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDcwQkRZNkEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ0hPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzMyMjYifQ=="\r\n
[2025-08-21 20:25:18][353244114388595][6554 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a68aeb5f-6295-4b8a-a467-01052a44f4ea","id":"QR_a68aeb5f-6295-4b8a-a467-01052a44f4ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:25:18][353244114388595][6555 ms][DEBUG] proc_open done in 5950 ms; code=0; res.len=3152
[2025-08-21 20:25:18][353244114388595][6555 ms][DEBUG] END   runCmdUntilRes#1 in 5950 ms
[2025-08-21 20:25:18][353244114388595][6555 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:27:09][358558825836062][0 ms][INFO] === Request start ===
[2025-08-21 20:27:09][358558825836062][1 ms][DEBUG] START check_frida
[2025-08-21 20:27:09][358558825836062][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:27:09][358558825836062][305 ms][DEBUG] SU: done in 304 ms; outroot         16270     1 2295852   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:27:09][358558825836062][306 ms][DEBUG] check_frida: running
[2025-08-21 20:27:09][358558825836062][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 20:27:09][358558825836062][306 ms][DEBUG] START check_scloud
[2025-08-21 20:27:09][358558825836062][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:27:09][358558825836062][555 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23678864 81236 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:27:09][358558825836062][555 ms][DEBUG] targetPkg: running
[2025-08-21 20:27:09][358558825836062][555 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:27:09][358558825836062][555 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:27:09][358558825836062][555 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTU4ODI1ODM2MDYyIiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE5CMDFRS1lNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyODc4In0='" -e "main()" -q"
[2025-08-21 20:27:09][358558825836062][555 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:27:09][358558825836062][555 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTU4ODI1ODM2MDYyIiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE5CMDFRS1lNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyODc4In0='" -e "main()" -q"
[2025-08-21 20:27:12][358558825836062][3180 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NTU4ODI1ODM2MDYyIiwibW9kZWwiOiJTTS1HNzgwRiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE5CMDFRS1lNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyODc4In0="\r\n
[2025-08-21 20:27:15][358558825836062][6304 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4019d0f4-5bf7-47f4-9ebe-12d0d15e9e0d","id":"QR_4019d0f4-5bf7-47f4-9ebe-12d0d15e9e0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:27:15][358558825836062][6304 ms][DEBUG] proc_open done in 5749 ms; code=0; res.len=3152
[2025-08-21 20:27:15][358558825836062][6304 ms][DEBUG] END   runCmdUntilRes#1 in 5749 ms
[2025-08-21 20:27:15][358558825836062][6304 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:27:16][357450475757023][1 ms][INFO] === Request start ===
[2025-08-21 20:27:16][357450475757023][1 ms][DEBUG] START check_frida
[2025-08-21 20:27:16][357450475757023][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:27:16][357450475757023][296 ms][DEBUG] SU: done in 294 ms; outroot         16270     1 2312272   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:27:16][357450475757023][296 ms][DEBUG] check_frida: running
[2025-08-21 20:27:16][357450475757023][296 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 20:27:16][357450475757023][296 ms][DEBUG] START check_scloud
[2025-08-21 20:27:16][357450475757023][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:27:16][357450475757023][546 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23678896 81796 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:27:16][357450475757023][546 ms][DEBUG] targetPkg: running
[2025-08-21 20:27:16][357450475757023][546 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:27:16][357450475757023][546 ms][DEBUG] rawBody.length=1161
[2025-08-21 20:27:16][357450475757023][546 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDc1NzU3MDIzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MDUzMDdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQwMiJ9'" -e "main()" -q"
[2025-08-21 20:27:16][357450475757023][546 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:27:16][357450475757023][546 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDc1NzU3MDIzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MDUzMDdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQwMiJ9'" -e "main()" -q"
[2025-08-21 20:27:19][357450475757023][3185 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDUwNDc1NzU3MDIzIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MDUzMDdMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTQwMiJ9"\r\n
[2025-08-21 20:27:21][357450475757023][5451 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_281abac0-d70f-4b6f-ba3d-f94e2f566404","id":"QR_281abac0-d70f-4b6f-ba3d-f94e2f566404","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:27:21][357450475757023][5451 ms][DEBUG] proc_open done in 4904 ms; code=0; res.len=3152
[2025-08-21 20:27:21][357450475757023][5451 ms][DEBUG] END   runCmdUntilRes#1 in 4904 ms
[2025-08-21 20:27:21][357450475757023][5451 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:28:36][350518497632346][0 ms][INFO] === Request start ===
[2025-08-21 20:28:36][350518497632346][1 ms][DEBUG] START check_frida
[2025-08-21 20:28:36][350518497632346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:28:36][350518497632346][294 ms][DEBUG] SU: done in 293 ms; outroot         16270     1 2295852   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:28:36][350518497632346][294 ms][DEBUG] check_frida: running
[2025-08-21 20:28:36][350518497632346][294 ms][DEBUG] END   check_frida in 293 ms
[2025-08-21 20:28:36][350518497632346][294 ms][DEBUG] START check_internet
[2025-08-21 20:28:36][350518497632346][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:28:37][350518497632346][841 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.992/202.992/202.992/0.000 ms\n
[2025-08-21 20:28:37][350518497632346][841 ms][DEBUG] check_internet: online
[2025-08-21 20:28:37][350518497632346][841 ms][DEBUG] END   check_internet in 547 ms
[2025-08-21 20:28:37][350518497632346][841 ms][DEBUG] START check_scloud
[2025-08-21 20:28:37][350518497632346][841 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:28:37][350518497632346][1091 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23678928 80848 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:28:37][350518497632346][1091 ms][DEBUG] targetPkg: running
[2025-08-21 20:28:37][350518497632346][1091 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:28:37][350518497632346][1091 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:28:37][350518497632346][1091 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTE4NDk3NjMyMzQ2IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMVhFSjNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyODEyIn0='" -e "main()" -q"
[2025-08-21 20:28:37][350518497632346][1091 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:28:37][350518497632346][1091 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTE4NDk3NjMyMzQ2IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMVhFSjNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyODEyIn0='" -e "main()" -q"
[2025-08-21 20:28:40][350518497632346][3730 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTE4NDk3NjMyMzQ2IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gzMVhFSjNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyODEyIn0="\r\n
[2025-08-21 20:28:48][350518497632346][12181 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c61bcbdb-c0a2-41a6-9735-a2ea5e27b03b","id":"QR_c61bcbdb-c0a2-41a6-9735-a2ea5e27b03b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:28:48][350518497632346][12182 ms][DEBUG] proc_open done in 11090 ms; code=0; res.len=3152
[2025-08-21 20:28:48][350518497632346][12182 ms][DEBUG] END   runCmdUntilRes#1 in 11090 ms
[2025-08-21 20:28:48][350518497632346][12182 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:29:35][359122720358984][1 ms][INFO] === Request start ===
[2025-08-21 20:29:35][359122720358984][2 ms][DEBUG] START check_frida
[2025-08-21 20:29:35][359122720358984][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:29:35][359122720358984][310 ms][DEBUG] SU: done in 308 ms; outroot         16270     1 2294840   4404 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:29:35][359122720358984][310 ms][DEBUG] check_frida: running
[2025-08-21 20:29:35][359122720358984][310 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 20:29:35][359122720358984][310 ms][DEBUG] START check_scloud
[2025-08-21 20:29:35][359122720358984][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:29:35][359122720358984][560 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23678960 81556 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:29:35][359122720358984][560 ms][DEBUG] targetPkg: running
[2025-08-21 20:29:35][359122720358984][560 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:29:35][359122720358984][560 ms][DEBUG] rawBody.length=1161
[2025-08-21 20:29:35][359122720358984][560 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTIyNzIwMzU4OTg0IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4WVhCMURTNDVOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODIyMiJ9'" -e "main()" -q"
[2025-08-21 20:29:35][359122720358984][560 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:29:35][359122720358984][560 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTIyNzIwMzU4OTg0IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4WVhCMURTNDVOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODIyMiJ9'" -e "main()" -q"
[2025-08-21 20:29:38][359122720358984][3215 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTIyNzIwMzU4OTg0IiwibW9kZWwiOiJTTS1BMDY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI4WVhCMURTNDVOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODIyMiJ9"\r\n
[2025-08-21 20:29:40][359122720358984][5465 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0700d5c-67df-4649-9aa1-4197e609cf43","id":"QR_d0700d5c-67df-4649-9aa1-4197e609cf43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:29:40][359122720358984][5465 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-21 20:29:40][359122720358984][5465 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-21 20:29:40][359122720358984][5465 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:30:40][353600812027555][1 ms][INFO] === Request start ===
[2025-08-21 20:30:40][353600812027555][2 ms][DEBUG] START check_frida
[2025-08-21 20:30:40][353600812027555][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:30:40][353600812027555][301 ms][DEBUG] SU: done in 300 ms; outroot         16270     1 2295852   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:30:40][353600812027555][302 ms][DEBUG] check_frida: running
[2025-08-21 20:30:40][353600812027555][302 ms][DEBUG] END   check_frida in 300 ms
[2025-08-21 20:30:40][353600812027555][302 ms][DEBUG] START check_internet
[2025-08-21 20:30:40][353600812027555][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:30:40][353600812027555][583 ms][DEBUG] SU: done in 280 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.329/163.329/163.329/0.000 ms\n
[2025-08-21 20:30:40][353600812027555][583 ms][DEBUG] check_internet: online
[2025-08-21 20:30:40][353600812027555][583 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 20:30:40][353600812027555][583 ms][DEBUG] START check_scloud
[2025-08-21 20:30:40][353600812027555][583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:30:41][353600812027555][834 ms][DEBUG] SU: done in 251 ms; outu0_a118      16385  4994 23678992 81384 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:30:41][353600812027555][834 ms][DEBUG] targetPkg: running
[2025-08-21 20:30:41][353600812027555][834 ms][DEBUG] END   check_scloud in 251 ms
[2025-08-21 20:30:41][353600812027555][834 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:30:41][353600812027555][834 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODEyMDI3NTU1IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ2MDJOMEpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTIzIn0='" -e "main()" -q"
[2025-08-21 20:30:41][353600812027555][834 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:30:41][353600812027555][834 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODEyMDI3NTU1IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ2MDJOMEpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTIzIn0='" -e "main()" -q"
[2025-08-21 20:30:43][353600812027555][3488 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjAwODEyMDI3NTU1IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ2MDJOMEpOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTIzIn0="\r\n
[2025-08-21 20:30:48][353600812027555][8440 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82c6bb84-b8ee-48f3-80ed-52aa04d1f974","id":"QR_82c6bb84-b8ee-48f3-80ed-52aa04d1f974","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:30:48][353600812027555][8440 ms][DEBUG] proc_open done in 7606 ms; code=0; res.len=3152
[2025-08-21 20:30:48][353600812027555][8440 ms][DEBUG] END   runCmdUntilRes#1 in 7606 ms
[2025-08-21 20:30:48][353600812027555][8440 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:32:22][350633290524879][0 ms][INFO] === Request start ===
[2025-08-21 20:32:22][350633290524879][0 ms][DEBUG] START check_frida
[2025-08-21 20:32:22][350633290524879][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:32:23][350633290524879][244 ms][DEBUG] SU: done in 244 ms; outroot         16270     1 2295852   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:32:23][350633290524879][244 ms][DEBUG] check_frida: running
[2025-08-21 20:32:23][350633290524879][244 ms][DEBUG] END   check_frida in 244 ms
[2025-08-21 20:32:23][350633290524879][244 ms][DEBUG] START check_internet
[2025-08-21 20:32:23][350633290524879][244 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:32:23][350633290524879][714 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.739/200.739/200.739/0.000 ms\n
[2025-08-21 20:32:23][350633290524879][714 ms][DEBUG] check_internet: online
[2025-08-21 20:32:23][350633290524879][714 ms][DEBUG] END   check_internet in 470 ms
[2025-08-21 20:32:23][350633290524879][714 ms][DEBUG] START check_scloud
[2025-08-21 20:32:23][350633290524879][714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:32:23][350633290524879][994 ms][DEBUG] SU: done in 280 ms; outu0_a118      16385  4994 23679024 81948 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:32:23][350633290524879][994 ms][DEBUG] targetPkg: running
[2025-08-21 20:32:23][350633290524879][994 ms][DEBUG] END   check_scloud in 280 ms
[2025-08-21 20:32:23][350633290524879][994 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:32:23][350633290524879][994 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjMzMjkwNTI0ODc5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzMDBTMkZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjYwIn0='" -e "main()" -q"
[2025-08-21 20:32:23][350633290524879][994 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:32:23][350633290524879][994 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjMzMjkwNTI0ODc5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzMDBTMkZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjYwIn0='" -e "main()" -q"
[2025-08-21 20:32:26][350633290524879][3634 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjMzMjkwNTI0ODc5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzMDBTMkZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjYwIn0="\r\n
[2025-08-21 20:32:29][350633290524879][6946 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0843e302-6c66-47a8-88ab-bdf57697c6b7","id":"QR_0843e302-6c66-47a8-88ab-bdf57697c6b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:32:29][350633290524879][6946 ms][DEBUG] proc_open done in 5952 ms; code=0; res.len=3152
[2025-08-21 20:32:29][350633290524879][6946 ms][DEBUG] END   runCmdUntilRes#1 in 5952 ms
[2025-08-21 20:32:29][350633290524879][6946 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:32:42][357567912255186][1 ms][INFO] === Request start ===
[2025-08-21 20:32:42][357567912255186][2 ms][DEBUG] START check_frida
[2025-08-21 20:32:42][357567912255186][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:32:42][357567912255186][314 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2312272   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:32:42][357567912255186][314 ms][DEBUG] check_frida: running
[2025-08-21 20:32:42][357567912255186][314 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 20:32:42][357567912255186][314 ms][DEBUG] START check_internet
[2025-08-21 20:32:42][357567912255186][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:32:42][357567912255186][626 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.739/201.739/201.739/0.000 ms\n
[2025-08-21 20:32:42][357567912255186][626 ms][DEBUG] check_internet: online
[2025-08-21 20:32:42][357567912255186][627 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 20:32:42][357567912255186][627 ms][DEBUG] START check_scloud
[2025-08-21 20:32:42][357567912255186][627 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:32:43][357567912255186][892 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23679056 81244 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:32:43][357567912255186][892 ms][DEBUG] targetPkg: running
[2025-08-21 20:32:43][357567912255186][892 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 20:32:43][357567912255186][892 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:32:43][357567912255186][893 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTY3OTEyMjU1MTg2IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMzlLWThOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NTI2In0='" -e "main()" -q"
[2025-08-21 20:32:43][357567912255186][893 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:32:43][357567912255186][893 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTY3OTEyMjU1MTg2IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMzlLWThOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NTI2In0='" -e "main()" -q"
[2025-08-21 20:32:45][357567912255186][3547 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTY3OTEyMjU1MTg2IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMzlLWThOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NTI2In0="\r\n
[2025-08-21 20:32:48][357567912255186][6140 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_047234bb-d7af-4d95-88bc-e3e975e8d6ee","id":"QR_047234bb-d7af-4d95-88bc-e3e975e8d6ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:32:48][357567912255186][6141 ms][DEBUG] proc_open done in 5248 ms; code=0; res.len=3152
[2025-08-21 20:32:48][357567912255186][6141 ms][DEBUG] END   runCmdUntilRes#1 in 5248 ms
[2025-08-21 20:32:48][357567912255186][6141 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:35:10][357847400159243][1 ms][INFO] === Request start ===
[2025-08-21 20:35:10][357847400159243][2 ms][DEBUG] START check_frida
[2025-08-21 20:35:10][357847400159243][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:35:10][357847400159243][311 ms][DEBUG] SU: done in 309 ms; outroot         16270     1 2295852   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:35:10][357847400159243][311 ms][DEBUG] check_frida: running
[2025-08-21 20:35:10][357847400159243][311 ms][DEBUG] END   check_frida in 309 ms
[2025-08-21 20:35:10][357847400159243][311 ms][DEBUG] START check_scloud
[2025-08-21 20:35:10][357847400159243][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:35:10][357847400159243][545 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23679088 81820 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:35:10][357847400159243][546 ms][DEBUG] targetPkg: running
[2025-08-21 20:35:10][357847400159243][546 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 20:35:10][357847400159243][546 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:35:10][357847400159243][546 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODQ3NDAwMTU5MjQzIiwibW9kZWwiOiJTTS1TOTAxRSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q1MDBRWlpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDQ5In0='" -e "main()" -q"
[2025-08-21 20:35:10][357847400159243][546 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:35:10][357847400159243][546 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3ODQ3NDAwMTU5MjQzIiwibW9kZWwiOiJTTS1TOTAxRSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q1MDBRWlpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDQ5In0='" -e "main()" -q"
[2025-08-21 20:35:13][357847400159243][3185 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3ODQ3NDAwMTU5MjQzIiwibW9kZWwiOiJTTS1TOTAxRSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q1MDBRWlpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDQ5In0="\r\n
[2025-08-21 20:35:16][357847400159243][6231 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_564db611-aa1e-4df5-9182-71f80e036726","id":"QR_564db611-aa1e-4df5-9182-71f80e036726","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:35:16][357847400159243][6232 ms][DEBUG] proc_open done in 5686 ms; code=0; res.len=3152
[2025-08-21 20:35:16][357847400159243][6232 ms][DEBUG] END   runCmdUntilRes#1 in 5686 ms
[2025-08-21 20:35:16][357847400159243][6232 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:35:25][353353826289817][0 ms][INFO] === Request start ===
[2025-08-21 20:35:25][353353826289817][1 ms][DEBUG] START check_frida
[2025-08-21 20:35:25][353353826289817][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:35:26][353353826289817][306 ms][DEBUG] SU: done in 305 ms; outroot         16270     1 2312272   4436 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:35:26][353353826289817][306 ms][DEBUG] check_frida: running
[2025-08-21 20:35:26][353353826289817][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 20:35:26][353353826289817][306 ms][DEBUG] START check_scloud
[2025-08-21 20:35:26][353353826289817][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:35:26][353353826289817][556 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23679120 81408 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:35:26][353353826289817][556 ms][DEBUG] targetPkg: running
[2025-08-21 20:35:26][353353826289817][556 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:35:26][353353826289817][556 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:35:26][353353826289817][556 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzUzODI2Mjg5ODE3IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0MkxKQzFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzEyIn0='" -e "main()" -q"
[2025-08-21 20:35:26][353353826289817][556 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:35:26][353353826289817][556 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzUzODI2Mjg5ODE3IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0MkxKQzFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzEyIn0='" -e "main()" -q"
[2025-08-21 20:35:29][353353826289817][3227 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzUzODI2Mjg5ODE3IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ0MkxKQzFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzEyIn0="\r\n
[2025-08-21 20:35:33][353353826289817][7460 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c05b968d-ee79-427d-b990-5b459b4d1b4b","id":"QR_c05b968d-ee79-427d-b990-5b459b4d1b4b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:35:33][353353826289817][7461 ms][DEBUG] proc_open done in 6904 ms; code=0; res.len=3152
[2025-08-21 20:35:33][353353826289817][7461 ms][DEBUG] END   runCmdUntilRes#1 in 6904 ms
[2025-08-21 20:35:33][353353826289817][7461 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:35:53][355296342949208][0 ms][INFO] === Request start ===
[2025-08-21 20:35:53][355296342949208][1 ms][DEBUG] START check_frida
[2025-08-21 20:35:53][355296342949208][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:35:54][355296342949208][303 ms][DEBUG] SU: done in 302 ms; outroot         16270     1 2295852   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:35:54][355296342949208][303 ms][DEBUG] check_frida: running
[2025-08-21 20:35:54][355296342949208][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 20:35:54][355296342949208][303 ms][DEBUG] START check_scloud
[2025-08-21 20:35:54][355296342949208][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:35:54][355296342949208][599 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23679152 81956 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:35:54][355296342949208][600 ms][DEBUG] targetPkg: running
[2025-08-21 20:35:54][355296342949208][600 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 20:35:54][355296342949208][600 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:35:54][355296342949208][600 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1Mjk2MzQyOTQ5MjA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFkzMDFQMkRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Mzk5In0='" -e "main()" -q"
[2025-08-21 20:35:54][355296342949208][600 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:35:54][355296342949208][600 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1Mjk2MzQyOTQ5MjA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFkzMDFQMkRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Mzk5In0='" -e "main()" -q"
[2025-08-21 20:35:57][355296342949208][3208 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1Mjk2MzQyOTQ5MjA4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFkzMDFQMkRCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Mzk5In0="\r\n
[2025-08-21 20:36:04][355296342949208][10597 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64da7bd6-5f8d-4967-87db-58d99c1a141a","id":"QR_64da7bd6-5f8d-4967-87db-58d99c1a141a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:36:04][355296342949208][10598 ms][DEBUG] proc_open done in 9997 ms; code=0; res.len=3152
[2025-08-21 20:36:04][355296342949208][10598 ms][DEBUG] END   runCmdUntilRes#1 in 9998 ms
[2025-08-21 20:36:04][355296342949208][10598 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:46:08][352672510869670][1 ms][INFO] === Request start ===
[2025-08-21 20:46:08][352672510869670][2 ms][DEBUG] START check_frida
[2025-08-21 20:46:08][352672510869670][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:46:08][352672510869670][305 ms][DEBUG] SU: done in 304 ms; outroot         16270     1 2296864   4412 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:46:08][352672510869670][305 ms][DEBUG] check_frida: running
[2025-08-21 20:46:08][352672510869670][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 20:46:08][352672510869670][306 ms][DEBUG] START check_internet
[2025-08-21 20:46:08][352672510869670][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:46:09][352672510869670][867 ms][DEBUG] SU: done in 561 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.094/203.094/203.094/0.000 ms\n
[2025-08-21 20:46:09][352672510869670][867 ms][DEBUG] check_internet: online
[2025-08-21 20:46:09][352672510869670][867 ms][DEBUG] END   check_internet in 561 ms
[2025-08-21 20:46:09][352672510869670][867 ms][DEBUG] START check_scloud
[2025-08-21 20:46:09][352672510869670][867 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:46:09][352672510869670][1117 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23661700 81580 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:46:09][352672510869670][1117 ms][DEBUG] targetPkg: running
[2025-08-21 20:46:09][352672510869670][1117 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:46:09][352672510869670][1117 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:46:09][352672510869670][1117 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjcyNTEwODY5NjcwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzNFk5S1JUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjQ0In0='" -e "main()" -q"
[2025-08-21 20:46:09][352672510869670][1117 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:46:09][352672510869670][1117 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjcyNTEwODY5NjcwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzNFk5S1JUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjQ0In0='" -e "main()" -q"
[2025-08-21 20:46:11][352672510869670][3803 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjcyNTEwODY5NjcwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQzNFk5S1JUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjQ0In0="\r\n
[2025-08-21 20:46:15][352672510869670][7303 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38cdcc62-82c4-42c6-9c27-5c9a313c5e13","id":"QR_38cdcc62-82c4-42c6-9c27-5c9a313c5e13","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:46:15][352672510869670][7303 ms][DEBUG] proc_open done in 6185 ms; code=0; res.len=3152
[2025-08-21 20:46:15][352672510869670][7303 ms][DEBUG] END   runCmdUntilRes#1 in 6186 ms
[2025-08-21 20:46:15][352672510869670][7303 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:47:21][355322290184463][0 ms][INFO] === Request start ===
[2025-08-21 20:47:21][355322290184463][0 ms][DEBUG] START check_frida
[2025-08-21 20:47:21][355322290184463][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:47:22][355322290184463][301 ms][DEBUG] SU: done in 301 ms; outroot         16270     1 2295852   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:47:22][355322290184463][301 ms][DEBUG] check_frida: running
[2025-08-21 20:47:22][355322290184463][301 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 20:47:22][355322290184463][301 ms][DEBUG] START check_scloud
[2025-08-21 20:47:22][355322290184463][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:47:22][355322290184463][535 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23679216 82520 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:47:22][355322290184463][535 ms][DEBUG] targetPkg: running
[2025-08-21 20:47:22][355322290184463][536 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 20:47:22][355322290184463][536 ms][DEBUG] rawBody.length=1161
[2025-08-21 20:47:22][355322290184463][536 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzIyMjkwMTg0NDYzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gyMVBCQ1hUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY1NSJ9'" -e "main()" -q"
[2025-08-21 20:47:22][355322290184463][536 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:47:22][355322290184463][536 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzIyMjkwMTg0NDYzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gyMVBCQ1hUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY1NSJ9'" -e "main()" -q"
[2025-08-21 20:47:25][355322290184463][3191 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MzIyMjkwMTg0NDYzIiwibW9kZWwiOiJTTS1BNTU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gyMVBCQ1hUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTY1NSJ9"\r\n
[2025-08-21 20:47:27][355322290184463][5315 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1037ab4d-c08c-4415-8f53-a273bd335013","id":"QR_1037ab4d-c08c-4415-8f53-a273bd335013","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:47:27][355322290184463][5315 ms][DEBUG] proc_open done in 4779 ms; code=0; res.len=3152
[2025-08-21 20:47:27][355322290184463][5315 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-21 20:47:27][355322290184463][5315 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:50:10][354106703996196][1 ms][INFO] === Request start ===
[2025-08-21 20:50:10][354106703996196][2 ms][DEBUG] START check_frida
[2025-08-21 20:50:10][354106703996196][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:50:10][354106703996196][255 ms][DEBUG] SU: done in 254 ms; outroot         16270     1 2295852   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:50:10][354106703996196][255 ms][DEBUG] check_frida: running
[2025-08-21 20:50:10][354106703996196][255 ms][DEBUG] END   check_frida in 254 ms
[2025-08-21 20:50:10][354106703996196][255 ms][DEBUG] START check_internet
[2025-08-21 20:50:10][354106703996196][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:50:11][354106703996196][833 ms][DEBUG] SU: done in 577 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.567/202.567/202.567/0.000 ms\n
[2025-08-21 20:50:11][354106703996196][833 ms][DEBUG] check_internet: online
[2025-08-21 20:50:11][354106703996196][833 ms][DEBUG] END   check_internet in 578 ms
[2025-08-21 20:50:11][354106703996196][833 ms][DEBUG] START check_scloud
[2025-08-21 20:50:11][354106703996196][833 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:50:11][354106703996196][1067 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23679248 82204 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:50:11][354106703996196][1067 ms][DEBUG] targetPkg: running
[2025-08-21 20:50:11][354106703996196][1067 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 20:50:11][354106703996196][1067 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:50:11][354106703996196][1068 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2NzAzOTk2MTk2IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI4WVg5MjIwRjVKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTY4In0='" -e "main()" -q"
[2025-08-21 20:50:11][354106703996196][1068 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:50:11][354106703996196][1068 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTA2NzAzOTk2MTk2IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI4WVg5MjIwRjVKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTY4In0='" -e "main()" -q"
[2025-08-21 20:50:13][354106703996196][3676 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTA2NzAzOTk2MTk2IiwibW9kZWwiOiJTTS1BMDY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI4WVg5MjIwRjVKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MTY4In0="\r\n
[2025-08-21 20:50:16][354106703996196][6754 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e6516d7-0756-40b6-aa40-f519eef8f827","id":"QR_2e6516d7-0756-40b6-aa40-f519eef8f827","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:50:16][354106703996196][6754 ms][DEBUG] proc_open done in 5686 ms; code=0; res.len=3152
[2025-08-21 20:50:16][354106703996196][6754 ms][DEBUG] END   runCmdUntilRes#1 in 5686 ms
[2025-08-21 20:50:16][354106703996196][6754 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:51:10][353600815426838][0 ms][INFO] === Request start ===
[2025-08-21 20:51:10][353600815426838][1 ms][DEBUG] START check_frida
[2025-08-21 20:51:10][353600815426838][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:51:10][353600815426838][314 ms][DEBUG] SU: done in 313 ms; outroot         16270     1 2311260   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:51:10][353600815426838][314 ms][DEBUG] check_frida: running
[2025-08-21 20:51:10][353600815426838][314 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 20:51:10][353600815426838][314 ms][DEBUG] START check_scloud
[2025-08-21 20:51:10][353600815426838][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:51:10][353600815426838][564 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23679280 82752 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:51:10][353600815426838][564 ms][DEBUG] targetPkg: running
[2025-08-21 20:51:10][353600815426838][564 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:51:10][353600815426838][564 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:51:10][353600815426838][564 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODE1NDI2ODM4IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDBCTk1QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTk2In0='" -e "main()" -q"
[2025-08-21 20:51:10][353600815426838][564 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:51:10][353600815426838][565 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODE1NDI2ODM4IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDBCTk1QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTk2In0='" -e "main()" -q"
[2025-08-21 20:51:13][353600815426838][3235 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjAwODE1NDI2ODM4IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFRCMDBCTk1QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTk2In0="\r\n
[2025-08-21 20:51:16][353600815426838][6547 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42aa2b0a-1a76-4d43-87ad-8c1dabe35244","id":"QR_42aa2b0a-1a76-4d43-87ad-8c1dabe35244","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:51:16][353600815426838][6547 ms][DEBUG] proc_open done in 5982 ms; code=0; res.len=3152
[2025-08-21 20:51:16][353600815426838][6547 ms][DEBUG] END   runCmdUntilRes#1 in 5982 ms
[2025-08-21 20:51:16][353600815426838][6547 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:52:59][350287314808196][1 ms][INFO] === Request start ===
[2025-08-21 20:52:59][350287314808196][2 ms][DEBUG] START check_frida
[2025-08-21 20:52:59][350287314808196][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:52:59][350287314808196][307 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2295852   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:52:59][350287314808196][307 ms][DEBUG] check_frida: running
[2025-08-21 20:52:59][350287314808196][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 20:52:59][350287314808196][308 ms][DEBUG] START check_internet
[2025-08-21 20:52:59][350287314808196][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 20:53:00][350287314808196][792 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.329/202.329/202.329/0.000 ms\n
[2025-08-21 20:53:00][350287314808196][792 ms][DEBUG] check_internet: online
[2025-08-21 20:53:00][350287314808196][792 ms][DEBUG] END   check_internet in 485 ms
[2025-08-21 20:53:00][350287314808196][792 ms][DEBUG] START check_scloud
[2025-08-21 20:53:00][350287314808196][792 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:53:00][350287314808196][1042 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23679312 81668 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:53:00][350287314808196][1042 ms][DEBUG] targetPkg: running
[2025-08-21 20:53:00][350287314808196][1042 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 20:53:00][350287314808196][1042 ms][DEBUG] rawBody.length=1161
[2025-08-21 20:53:00][350287314808196][1042 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE0ODA4MTk2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME5DMlJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjIwMyJ9'" -e "main()" -q"
[2025-08-21 20:53:00][350287314808196][1042 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:53:00][350287314808196][1042 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjg3MzE0ODA4MTk2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME5DMlJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjIwMyJ9'" -e "main()" -q"
[2025-08-21 20:53:03][350287314808196][3697 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjg3MzE0ODA4MTk2IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFdDME5DMlJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjIwMyJ9"\r\n
[2025-08-21 20:53:05][350287314808196][5790 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f593206a-3d64-4e2e-8c8d-a17d4d409019","id":"QR_f593206a-3d64-4e2e-8c8d-a17d4d409019","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:53:05][350287314808196][5791 ms][DEBUG] proc_open done in 4749 ms; code=0; res.len=3152
[2025-08-21 20:53:05][350287314808196][5791 ms][DEBUG] END   runCmdUntilRes#1 in 4749 ms
[2025-08-21 20:53:05][350287314808196][5791 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 20:53:28][350551931657686][0 ms][INFO] === Request start ===
[2025-08-21 20:53:28][350551931657686][1 ms][DEBUG] START check_frida
[2025-08-21 20:53:28][350551931657686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 20:53:29][350551931657686][270 ms][DEBUG] SU: done in 269 ms; outroot         16270     1 2311260   4420 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 20:53:29][350551931657686][270 ms][DEBUG] check_frida: running
[2025-08-21 20:53:29][350551931657686][270 ms][DEBUG] END   check_frida in 269 ms
[2025-08-21 20:53:29][350551931657686][270 ms][DEBUG] START check_scloud
[2025-08-21 20:53:29][350551931657686][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 20:53:29][350551931657686][582 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23679344 82252 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 20:53:29][350551931657686][582 ms][DEBUG] targetPkg: running
[2025-08-21 20:53:29][350551931657686][582 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 20:53:29][350551931657686][582 ms][DEBUG] rawBody.length=1160
[2025-08-21 20:53:29][350551931657686][582 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTUxOTMxNjU3Njg2IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk1MDBSUUtEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTQzIn0='" -e "main()" -q"
[2025-08-21 20:53:29][350551931657686][582 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 20:53:29][350551931657686][583 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTUxOTMxNjU3Njg2IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk1MDBSUUtEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTQzIn0='" -e "main()" -q"
[2025-08-21 20:53:31][350551931657686][3191 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTUxOTMxNjU3Njg2IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk1MDBSUUtEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTQzIn0="\r\n
[2025-08-21 20:53:34][350551931657686][6049 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbe81494-c2ed-4021-affd-02c4ae045453","id":"QR_dbe81494-c2ed-4021-affd-02c4ae045453","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 20:53:34][350551931657686][6050 ms][DEBUG] proc_open done in 5467 ms; code=0; res.len=3152
[2025-08-21 20:53:34][350551931657686][6050 ms][DEBUG] END   runCmdUntilRes#1 in 5467 ms
[2025-08-21 20:53:34][350551931657686][6050 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:00:12][350804331667932][1 ms][INFO] === Request start ===
[2025-08-21 21:00:12][350804331667932][2 ms][DEBUG] START check_frida
[2025-08-21 21:00:12][350804331667932][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:00:13][350804331667932][312 ms][DEBUG] SU: done in 311 ms; outroot         16270     1 2312272   4352 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:00:13][350804331667932][313 ms][DEBUG] check_frida: running
[2025-08-21 21:00:13][350804331667932][313 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 21:00:13][350804331667932][313 ms][DEBUG] START check_internet
[2025-08-21 21:00:13][350804331667932][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:00:13][350804331667932][812 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.121/201.121/201.121/0.000 ms\n
[2025-08-21 21:00:13][350804331667932][812 ms][DEBUG] check_internet: online
[2025-08-21 21:00:13][350804331667932][812 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 21:00:13][350804331667932][813 ms][DEBUG] START check_scloud
[2025-08-21 21:00:13][350804331667932][813 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:00:14][350804331667932][1125 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23661892 80992 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:00:14][350804331667932][1125 ms][DEBUG] targetPkg: running
[2025-08-21 21:00:14][350804331667932][1125 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 21:00:14][350804331667932][1125 ms][DEBUG] rawBody.length=1161
[2025-08-21 21:00:14][350804331667932][1125 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODA0MzMxNjY3OTMyIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MUFURlJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI1MSJ9'" -e "main()" -q"
[2025-08-21 21:00:14][350804331667932][1125 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:00:14][350804331667932][1125 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODA0MzMxNjY3OTMyIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MUFURlJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI1MSJ9'" -e "main()" -q"
[2025-08-21 21:00:16][350804331667932][3733 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODA0MzMxNjY3OTMyIiwibW9kZWwiOiJTTS1BMTM3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MUFURlJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI1MSJ9"\r\n
[2025-08-21 21:00:18][350804331667932][5905 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80c505fa-14f1-4f4a-aecd-cc4db4aa529e","id":"QR_80c505fa-14f1-4f4a-aecd-cc4db4aa529e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:00:18][350804331667932][5905 ms][DEBUG] proc_open done in 4780 ms; code=0; res.len=3152
[2025-08-21 21:00:18][350804331667932][5905 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-21 21:00:18][350804331667932][5905 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:02:23][351736902596992][0 ms][INFO] === Request start ===
[2025-08-21 21:02:23][351736902596992][0 ms][DEBUG] START check_frida
[2025-08-21 21:02:23][351736902596992][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:02:23][351736902596992][310 ms][DEBUG] SU: done in 310 ms; outroot         16270     1 2295852   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:02:23][351736902596992][310 ms][DEBUG] check_frida: running
[2025-08-21 21:02:23][351736902596992][310 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 21:02:23][351736902596992][310 ms][DEBUG] START check_internet
[2025-08-21 21:02:23][351736902596992][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:02:23][351736902596992][794 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.305/202.305/202.305/0.000 ms\n
[2025-08-21 21:02:23][351736902596992][795 ms][DEBUG] check_internet: online
[2025-08-21 21:02:23][351736902596992][795 ms][DEBUG] END   check_internet in 485 ms
[2025-08-21 21:02:23][351736902596992][795 ms][DEBUG] START check_scloud
[2025-08-21 21:02:23][351736902596992][795 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:02:24][351736902596992][1060 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23679408 80080 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:02:24][351736902596992][1060 ms][DEBUG] targetPkg: running
[2025-08-21 21:02:24][351736902596992][1060 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 21:02:24][351736902596992][1060 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:02:24][351736902596992][1060 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzM2OTAyNTk2OTkyIiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdBMTY1N1hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njc3In0='" -e "main()" -q"
[2025-08-21 21:02:24][351736902596992][1061 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:02:24][351736902596992][1061 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzM2OTAyNTk2OTkyIiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdBMTY1N1hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njc3In0='" -e "main()" -q"
[2025-08-21 21:02:26][351736902596992][3731 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzM2OTAyNTk2OTkyIiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFdBMTY1N1hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njc3In0="\r\n
[2025-08-21 21:02:30][351736902596992][6918 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fc69a7b-83a5-469b-93bd-d4cb20b07e10","id":"QR_0fc69a7b-83a5-469b-93bd-d4cb20b07e10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:02:30][351736902596992][6919 ms][DEBUG] proc_open done in 5858 ms; code=0; res.len=3152
[2025-08-21 21:02:30][351736902596992][6919 ms][DEBUG] END   runCmdUntilRes#1 in 5858 ms
[2025-08-21 21:02:30][351736902596992][6919 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:03:09][359472810891752][1 ms][INFO] === Request start ===
[2025-08-21 21:03:09][359472810891752][2 ms][DEBUG] START check_frida
[2025-08-21 21:03:09][359472810891752][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:03:09][359472810891752][302 ms][DEBUG] SU: done in 300 ms; outroot         16270     1 2295852   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:03:09][359472810891752][302 ms][DEBUG] check_frida: running
[2025-08-21 21:03:09][359472810891752][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 21:03:09][359472810891752][302 ms][DEBUG] START check_scloud
[2025-08-21 21:03:09][359472810891752][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:03:09][359472810891752][615 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23679440 80648 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:03:09][359472810891752][615 ms][DEBUG] targetPkg: running
[2025-08-21 21:03:09][359472810891752][615 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 21:03:09][359472810891752][615 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:03:09][359472810891752][615 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NDcyODEwODkxNzUyIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFczMExRR1BIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxURyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTg4In0='" -e "main()" -q"
[2025-08-21 21:03:09][359472810891752][615 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:03:09][359472810891752][615 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5NDcyODEwODkxNzUyIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFczMExRR1BIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxURyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTg4In0='" -e "main()" -q"
[2025-08-21 21:03:12][359472810891752][3254 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5NDcyODEwODkxNzUyIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFczMExRR1BIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxURyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTg4In0="\r\n
[2025-08-21 21:03:15][359472810891752][6738 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4857ef7e-6948-41d0-8023-623ce130d4d7","id":"QR_4857ef7e-6948-41d0-8023-623ce130d4d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:03:15][359472810891752][6738 ms][DEBUG] proc_open done in 6123 ms; code=0; res.len=3152
[2025-08-21 21:03:15][359472810891752][6739 ms][DEBUG] END   runCmdUntilRes#1 in 6124 ms
[2025-08-21 21:03:15][359472810891752][6739 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:05:08][355914462151658][0 ms][INFO] === Request start ===
[2025-08-21 21:05:08][355914462151658][1 ms][DEBUG] START check_frida
[2025-08-21 21:05:08][355914462151658][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:05:09][355914462151658][313 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2312272   4328 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:05:09][355914462151658][313 ms][DEBUG] check_frida: running
[2025-08-21 21:05:09][355914462151658][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 21:05:09][355914462151658][313 ms][DEBUG] START check_scloud
[2025-08-21 21:05:09][355914462151658][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:05:09][355914462151658][563 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23679472 79820 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:05:09][355914462151658][563 ms][DEBUG] targetPkg: running
[2025-08-21 21:05:09][355914462151658][563 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 21:05:09][355914462151658][563 ms][DEBUG] rawBody.length=1161
[2025-08-21 21:05:09][355914462151658][563 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1OTE0NDYyMTUxNjU4IiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMDBNTFhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzcyMiJ9'" -e "main()" -q"
[2025-08-21 21:05:09][355914462151658][563 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:05:09][355914462151658][563 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1OTE0NDYyMTUxNjU4IiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMDBNTFhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzcyMiJ9'" -e "main()" -q"
[2025-08-21 21:05:12][355914462151658][3234 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1OTE0NDYyMTUxNjU4IiwibW9kZWwiOiJTTS1BMzQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMDBNTFhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzcyMiJ9"\r\n
[2025-08-21 21:05:14][355914462151658][5624 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a44319f-a7fc-42cf-8a05-576443e5f7d8","id":"QR_3a44319f-a7fc-42cf-8a05-576443e5f7d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:05:14][355914462151658][5624 ms][DEBUG] proc_open done in 5061 ms; code=0; res.len=3152
[2025-08-21 21:05:14][355914462151658][5624 ms][DEBUG] END   runCmdUntilRes#1 in 5061 ms
[2025-08-21 21:05:14][355914462151658][5624 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:08:09][357651716097851][1 ms][INFO] === Request start ===
[2025-08-21 21:08:09][357651716097851][2 ms][DEBUG] START check_frida
[2025-08-21 21:08:09][357651716097851][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:08:09][357651716097851][307 ms][DEBUG] SU: done in 305 ms; outroot         16270     1 2295852   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:08:09][357651716097851][307 ms][DEBUG] check_frida: running
[2025-08-21 21:08:09][357651716097851][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 21:08:09][357651716097851][307 ms][DEBUG] START check_internet
[2025-08-21 21:08:09][357651716097851][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:08:10][357651716097851][853 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.755/200.755/200.755/0.000 ms\n
[2025-08-21 21:08:10][357651716097851][853 ms][DEBUG] check_internet: online
[2025-08-21 21:08:10][357651716097851][854 ms][DEBUG] END   check_internet in 546 ms
[2025-08-21 21:08:10][357651716097851][854 ms][DEBUG] START check_scloud
[2025-08-21 21:08:10][357651716097851][854 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:08:10][357651716097851][1119 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23679504 80100 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:08:10][357651716097851][1119 ms][DEBUG] targetPkg: running
[2025-08-21 21:08:10][357651716097851][1119 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 21:08:10][357651716097851][1119 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:08:10][357651716097851][1119 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE2MDk3ODUxIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ3MDgwOFZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzEzIn0='" -e "main()" -q"
[2025-08-21 21:08:10][357651716097851][1119 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:08:10][357651716097851][1119 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE2MDk3ODUxIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ3MDgwOFZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzEzIn0='" -e "main()" -q"
[2025-08-21 21:08:13][357651716097851][3790 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzE2MDk3ODUxIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ3MDgwOFZYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzEzIn0="\r\n
[2025-08-21 21:08:18][357651716097851][9320 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f7555f6-47c6-4c5f-870c-71ddf7b7ec17","id":"QR_4f7555f6-47c6-4c5f-870c-71ddf7b7ec17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:08:18][357651716097851][9321 ms][DEBUG] proc_open done in 8202 ms; code=0; res.len=3152
[2025-08-21 21:08:18][357651716097851][9321 ms][DEBUG] END   runCmdUntilRes#1 in 8202 ms
[2025-08-21 21:08:18][357651716097851][9321 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:12:08][353026641008154][1 ms][INFO] === Request start ===
[2025-08-21 21:12:08][353026641008154][2 ms][DEBUG] START check_frida
[2025-08-21 21:12:08][353026641008154][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:12:09][353026641008154][319 ms][DEBUG] SU: done in 317 ms; outroot         16270     1 2295852   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:12:09][353026641008154][319 ms][DEBUG] check_frida: running
[2025-08-21 21:12:09][353026641008154][319 ms][DEBUG] END   check_frida in 317 ms
[2025-08-21 21:12:09][353026641008154][319 ms][DEBUG] START check_internet
[2025-08-21 21:12:09][353026641008154][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:12:09][353026641008154][648 ms][DEBUG] SU: done in 330 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.774/206.774/206.774/0.000 ms\n
[2025-08-21 21:12:09][353026641008154][649 ms][DEBUG] check_internet: online
[2025-08-21 21:12:09][353026641008154][649 ms][DEBUG] END   check_internet in 330 ms
[2025-08-21 21:12:09][353026641008154][649 ms][DEBUG] START check_scloud
[2025-08-21 21:12:09][353026641008154][649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:12:09][353026641008154][896 ms][DEBUG] SU: done in 247 ms; outu0_a118      16385  4994 23679536 79316 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:12:09][353026641008154][896 ms][DEBUG] targetPkg: running
[2025-08-21 21:12:09][353026641008154][896 ms][DEBUG] END   check_scloud in 248 ms
[2025-08-21 21:12:09][353026641008154][896 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:12:09][353026641008154][896 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI2NjQxMDA4MTU0IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kxMlZOUVJaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzA5In0='" -e "main()" -q"
[2025-08-21 21:12:09][353026641008154][896 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:12:09][353026641008154][896 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI2NjQxMDA4MTU0IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kxMlZOUVJaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzA5In0='" -e "main()" -q"
[2025-08-21 21:12:12][353026641008154][3521 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDI2NjQxMDA4MTU0IiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1kxMlZOUVJaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzA5In0="\r\n
[2025-08-21 21:12:15][353026641008154][6879 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8253ceff-3464-4c79-8d17-cff98baafe4c","id":"QR_8253ceff-3464-4c79-8d17-cff98baafe4c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:12:15][353026641008154][6880 ms][DEBUG] proc_open done in 5984 ms; code=0; res.len=3152
[2025-08-21 21:12:15][353026641008154][6880 ms][DEBUG] END   runCmdUntilRes#1 in 5984 ms
[2025-08-21 21:12:15][353026641008154][6880 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:12:49][354909111735951][1 ms][INFO] === Request start ===
[2025-08-21 21:12:49][354909111735951][2 ms][DEBUG] START check_frida
[2025-08-21 21:12:49][354909111735951][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:12:50][354909111735951][320 ms][DEBUG] SU: done in 318 ms; outroot         16270     1 2295852   4392 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:12:50][354909111735951][320 ms][DEBUG] check_frida: running
[2025-08-21 21:12:50][354909111735951][320 ms][DEBUG] END   check_frida in 318 ms
[2025-08-21 21:12:50][354909111735951][320 ms][DEBUG] START check_internet
[2025-08-21 21:12:50][354909111735951][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:12:50][354909111735951][788 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.738/202.738/202.738/0.000 ms\n
[2025-08-21 21:12:50][354909111735951][788 ms][DEBUG] check_internet: online
[2025-08-21 21:12:50][354909111735951][788 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 21:12:50][354909111735951][788 ms][DEBUG] START check_scloud
[2025-08-21 21:12:50][354909111735951][789 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:12:50][354909111735951][1069 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23679568 79920 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:12:50][354909111735951][1069 ms][DEBUG] targetPkg: running
[2025-08-21 21:12:50][354909111735951][1069 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 21:12:50][354909111735951][1069 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:12:50][354909111735951][1069 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTA5MTExNzM1OTUxIiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE44MDhNMjdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjI0In0='" -e "main()" -q"
[2025-08-21 21:12:50][354909111735951][1069 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:12:50][354909111735951][1069 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTA5MTExNzM1OTUxIiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE44MDhNMjdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjI0In0='" -e "main()" -q"
[2025-08-21 21:12:53][354909111735951][3740 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTA5MTExNzM1OTUxIiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE44MDhNMjdEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjI0In0="\r\n
[2025-08-21 21:12:58][354909111735951][8442 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31f4fe9b-5aba-425a-a31d-2a6d1517079e","id":"QR_31f4fe9b-5aba-425a-a31d-2a6d1517079e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:12:58][354909111735951][8443 ms][DEBUG] proc_open done in 7373 ms; code=0; res.len=3152
[2025-08-21 21:12:58][354909111735951][8443 ms][DEBUG] END   runCmdUntilRes#1 in 7373 ms
[2025-08-21 21:12:58][354909111735951][8443 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:16:36][353919117007611][1 ms][INFO] === Request start ===
[2025-08-21 21:16:36][353919117007611][2 ms][DEBUG] START check_frida
[2025-08-21 21:16:36][353919117007611][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:16:36][353919117007611][299 ms][DEBUG] SU: done in 298 ms; outroot         16270     1 2295852   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:16:36][353919117007611][299 ms][DEBUG] check_frida: running
[2025-08-21 21:16:36][353919117007611][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 21:16:36][353919117007611][300 ms][DEBUG] START check_internet
[2025-08-21 21:16:36][353919117007611][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:16:37][353919117007611][612 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.371/200.371/200.371/0.000 ms\n
[2025-08-21 21:16:37][353919117007611][612 ms][DEBUG] check_internet: online
[2025-08-21 21:16:37][353919117007611][612 ms][DEBUG] END   check_internet in 313 ms
[2025-08-21 21:16:37][353919117007611][612 ms][DEBUG] START check_scloud
[2025-08-21 21:16:37][353919117007611][612 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:16:37][353919117007611][893 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23679600 79664 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:16:37][353919117007611][893 ms][DEBUG] targetPkg: running
[2025-08-21 21:16:37][353919117007611][893 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 21:16:37][353919117007611][893 ms][DEBUG] rawBody.length=1159
[2025-08-21 21:16:37][353919117007611][893 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTE5MTE3MDA3NjExIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkMwMEw2UEEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzYyMjIifQ=='" -e "main()" -q"
[2025-08-21 21:16:37][353919117007611][893 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:16:37][353919117007611][893 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTE5MTE3MDA3NjExIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkMwMEw2UEEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzYyMjIifQ=='" -e "main()" -q"
[2025-08-21 21:16:40][353919117007611][3533 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTE5MTE3MDA3NjExIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkMwMEw2UEEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzYyMjIifQ=="\r\n
[2025-08-21 21:16:43][353919117007611][6736 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_223181d8-cbf8-40b7-85d8-70b027ffc1ad","id":"QR_223181d8-cbf8-40b7-85d8-70b027ffc1ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:16:43][353919117007611][6736 ms][DEBUG] proc_open done in 5842 ms; code=0; res.len=3152
[2025-08-21 21:16:43][353919117007611][6736 ms][DEBUG] END   runCmdUntilRes#1 in 5842 ms
[2025-08-21 21:16:43][353919117007611][6736 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:17:09][350341128296906][0 ms][INFO] === Request start ===
[2025-08-21 21:17:09][350341128296906][1 ms][DEBUG] START check_frida
[2025-08-21 21:17:09][350341128296906][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:17:09][350341128296906][310 ms][DEBUG] SU: done in 309 ms; outroot         16270     1 2295852   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:17:09][350341128296906][310 ms][DEBUG] check_frida: running
[2025-08-21 21:17:09][350341128296906][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 21:17:09][350341128296906][311 ms][DEBUG] START check_scloud
[2025-08-21 21:17:09][350341128296906][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:17:10][350341128296906][560 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23679632 79444 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:17:10][350341128296906][560 ms][DEBUG] targetPkg: running
[2025-08-21 21:17:10][350341128296906][560 ms][DEBUG] END   check_scloud in 249 ms
[2025-08-21 21:17:10][350341128296906][560 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:17:10][350341128296906][560 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzQxMTI4Mjk2OTA2IiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRBMDFMU1dSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NTE1In0='" -e "main()" -q"
[2025-08-21 21:17:10][350341128296906][560 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:17:10][350341128296906][560 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzQxMTI4Mjk2OTA2IiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRBMDFMU1dSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NTE1In0='" -e "main()" -q"
[2025-08-21 21:17:12][350341128296906][3215 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzQxMTI4Mjk2OTA2IiwibW9kZWwiOiJTTS1NMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRBMDFMU1dSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NTE1In0="\r\n
[2025-08-21 21:17:14][355915853051373][1 ms][INFO] === Request start ===
[2025-08-21 21:17:17][350341128296906][7777 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4650831a-be00-4787-b4ba-ade8910bf7e2","id":"QR_4650831a-be00-4787-b4ba-ade8910bf7e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:17:17][350341128296906][7777 ms][DEBUG] proc_open done in 7217 ms; code=0; res.len=3152
[2025-08-21 21:17:17][350341128296906][7777 ms][DEBUG] END   runCmdUntilRes#1 in 7217 ms
[2025-08-21 21:17:17][350341128296906][7777 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:17:17][355915853051373][3039 ms][DEBUG] START check_frida
[2025-08-21 21:17:17][355915853051373][3039 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:17:18][355915853051373][3352 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2312272   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:17:18][355915853051373][3352 ms][DEBUG] check_frida: running
[2025-08-21 21:17:18][355915853051373][3352 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 21:17:18][355915853051373][3352 ms][DEBUG] START check_scloud
[2025-08-21 21:17:18][355915853051373][3352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:17:18][355915853051373][3601 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23679664 80008 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:17:18][355915853051373][3601 ms][DEBUG] targetPkg: running
[2025-08-21 21:17:18][355915853051373][3601 ms][DEBUG] END   check_scloud in 249 ms
[2025-08-21 21:17:18][355915853051373][3601 ms][DEBUG] rawBody.length=1161
[2025-08-21 21:17:18][355915853051373][3601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1OTE1ODUzMDUxMzczIiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g2MDQ3RDNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY4MyJ9'" -e "main()" -q"
[2025-08-21 21:17:18][355915853051373][3601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:17:18][355915853051373][3601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1OTE1ODUzMDUxMzczIiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g2MDQ3RDNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY4MyJ9'" -e "main()" -q"
[2025-08-21 21:17:21][355915853051373][6257 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1OTE1ODUzMDUxMzczIiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g2MDQ3RDNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjY4MyJ9"\r\n
[2025-08-21 21:17:23][355915853051373][8569 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5abc20d3-b669-4196-8fe6-17e663539eb0","id":"QR_5abc20d3-b669-4196-8fe6-17e663539eb0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:17:23][355915853051373][8569 ms][DEBUG] proc_open done in 4968 ms; code=0; res.len=3152
[2025-08-21 21:17:23][355915853051373][8569 ms][DEBUG] END   runCmdUntilRes#1 in 4968 ms
[2025-08-21 21:17:23][355915853051373][8569 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:17:25][354314903289723][0 ms][INFO] === Request start ===
[2025-08-21 21:17:25][354314903289723][1 ms][DEBUG] START check_frida
[2025-08-21 21:17:25][354314903289723][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:17:25][354314903289723][268 ms][DEBUG] SU: done in 267 ms; outroot         16270     1 2312272   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:17:25][354314903289723][269 ms][DEBUG] check_frida: running
[2025-08-21 21:17:25][354314903289723][269 ms][DEBUG] END   check_frida in 268 ms
[2025-08-21 21:17:25][354314903289723][269 ms][DEBUG] START check_scloud
[2025-08-21 21:17:25][354314903289723][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:17:26][354314903289723][581 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23679696 79716 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:17:26][354314903289723][581 ms][DEBUG] targetPkg: running
[2025-08-21 21:17:26][354314903289723][581 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 21:17:26][354314903289723][581 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:17:26][354314903289723][581 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzE0OTAzMjg5NzIzIiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFc4MDIxREdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjIxIn0='" -e "main()" -q"
[2025-08-21 21:17:26][354314903289723][581 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:17:26][354314903289723][581 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzE0OTAzMjg5NzIzIiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFc4MDIxREdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjIxIn0='" -e "main()" -q"
[2025-08-21 21:17:28][354314903289723][3189 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MzE0OTAzMjg5NzIzIiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFc4MDIxREdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjIxIn0="\r\n
[2025-08-21 21:17:31][354314903289723][6095 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4de9e45e-ef2e-4a52-9d48-c0fe095b4001","id":"QR_4de9e45e-ef2e-4a52-9d48-c0fe095b4001","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:17:31][354314903289723][6095 ms][DEBUG] proc_open done in 5514 ms; code=0; res.len=3152
[2025-08-21 21:17:31][354314903289723][6095 ms][DEBUG] END   runCmdUntilRes#1 in 5514 ms
[2025-08-21 21:17:31][354314903289723][6095 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:17:43][358615311676046][0 ms][INFO] === Request start ===
[2025-08-21 21:17:43][358615311676046][1 ms][DEBUG] START check_frida
[2025-08-21 21:17:43][358615311676046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:17:43][358615311676046][307 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2312272   4388 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:17:43][358615311676046][307 ms][DEBUG] check_frida: running
[2025-08-21 21:17:43][358615311676046][307 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 21:17:43][358615311676046][307 ms][DEBUG] START check_scloud
[2025-08-21 21:17:43][358615311676046][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:17:43][358615311676046][557 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23679728 80308 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:17:43][358615311676046][557 ms][DEBUG] targetPkg: running
[2025-08-21 21:17:43][358615311676046][557 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 21:17:43][358615311676046][557 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:17:43][358615311676046][557 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NjE1MzExNjc2MDQ2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMUsxNVFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDYzIn0='" -e "main()" -q"
[2025-08-21 21:17:43][358615311676046][557 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:17:43][358615311676046][558 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NjE1MzExNjc2MDQ2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMUsxNVFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDYzIn0='" -e "main()" -q"
[2025-08-21 21:17:46][358615311676046][3213 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NjE1MzExNjc2MDQ2IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dBMUsxNVFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDYzIn0="\r\n
[2025-08-21 21:17:53][358615311676046][10008 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23245d57-5c97-4e01-8097-89a5a08e2147","id":"QR_23245d57-5c97-4e01-8097-89a5a08e2147","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:17:53][358615311676046][10009 ms][DEBUG] proc_open done in 9451 ms; code=0; res.len=3152
[2025-08-21 21:17:53][358615311676046][10009 ms][DEBUG] END   runCmdUntilRes#1 in 9451 ms
[2025-08-21 21:17:53][358615311676046][10009 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:17:58][350915068892921][1 ms][INFO] === Request start ===
[2025-08-21 21:17:58][350915068892921][2 ms][DEBUG] START check_frida
[2025-08-21 21:17:58][350915068892921][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:17:58][350915068892921][282 ms][DEBUG] SU: done in 281 ms; outroot         16270     1 2312272   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:17:58][350915068892921][283 ms][DEBUG] check_frida: running
[2025-08-21 21:17:58][350915068892921][283 ms][DEBUG] END   check_frida in 281 ms
[2025-08-21 21:17:58][350915068892921][283 ms][DEBUG] START check_scloud
[2025-08-21 21:17:58][350915068892921][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:17:58][350915068892921][518 ms][DEBUG] SU: done in 235 ms; outu0_a118      16385  4994 23679760 79708 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:17:58][350915068892921][518 ms][DEBUG] targetPkg: running
[2025-08-21 21:17:58][350915068892921][518 ms][DEBUG] END   check_scloud in 236 ms
[2025-08-21 21:17:58][350915068892921][518 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:17:58][350915068892921][518 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTE1MDY4ODkyOTIxIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFc3MDY4NFFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTMzIn0='" -e "main()" -q"
[2025-08-21 21:17:58][350915068892921][518 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:17:58][350915068892921][519 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTE1MDY4ODkyOTIxIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFc3MDY4NFFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTMzIn0='" -e "main()" -q"
[2025-08-21 21:18:01][350915068892921][3172 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTE1MDY4ODkyOTIxIiwibW9kZWwiOiJTTS1BMDQ3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFc3MDY4NFFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyOTMzIn0="\r\n
[2025-08-21 21:18:05][350915068892921][7468 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a617308c-6b66-4213-a367-6447ca8ac9bc","id":"QR_a617308c-6b66-4213-a367-6447ca8ac9bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:18:05][350915068892921][7469 ms][DEBUG] proc_open done in 6950 ms; code=0; res.len=3152
[2025-08-21 21:18:05][350915068892921][7469 ms][DEBUG] END   runCmdUntilRes#1 in 6950 ms
[2025-08-21 21:18:05][350915068892921][7469 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:20:09][357576780397889][1 ms][INFO] === Request start ===
[2025-08-21 21:20:09][357576780397889][2 ms][DEBUG] START check_frida
[2025-08-21 21:20:09][357576780397889][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:20:10][357576780397889][309 ms][DEBUG] SU: done in 307 ms; outroot         16270     1 2295852   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:20:10][357576780397889][309 ms][DEBUG] check_frida: running
[2025-08-21 21:20:10][357576780397889][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 21:20:10][357576780397889][309 ms][DEBUG] START check_internet
[2025-08-21 21:20:10][357576780397889][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:20:10][357576780397889][824 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.310/202.310/202.310/0.000 ms\n
[2025-08-21 21:20:10][357576780397889][824 ms][DEBUG] check_internet: online
[2025-08-21 21:20:10][357576780397889][824 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 21:20:10][357576780397889][824 ms][DEBUG] START check_scloud
[2025-08-21 21:20:10][357576780397889][824 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:20:10][357576780397889][1058 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23679792 80316 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:20:10][357576780397889][1058 ms][DEBUG] targetPkg: running
[2025-08-21 21:20:10][357576780397889][1058 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 21:20:10][357576780397889][1058 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:20:10][357576780397889][1058 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2NzgwMzk3ODg5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1gzMDdWTjBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjkzIn0='" -e "main()" -q"
[2025-08-21 21:20:10][357576780397889][1059 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:20:10][357576780397889][1059 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2NzgwMzk3ODg5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1gzMDdWTjBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjkzIn0='" -e "main()" -q"
[2025-08-21 21:20:13][357576780397889][3714 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTc2NzgwMzk3ODg5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1gzMDdWTjBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjkzIn0="\r\n
[2025-08-21 21:20:17][357576780397889][7150 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b4e98f9-35c7-4c17-b946-526fe8ee9c20","id":"QR_8b4e98f9-35c7-4c17-b946-526fe8ee9c20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:20:17][357576780397889][7151 ms][DEBUG] proc_open done in 6092 ms; code=0; res.len=3152
[2025-08-21 21:20:17][357576780397889][7151 ms][DEBUG] END   runCmdUntilRes#1 in 6092 ms
[2025-08-21 21:20:17][357576780397889][7151 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:20:28][357576775579095][0 ms][INFO] === Request start ===
[2025-08-21 21:20:28][357576775579095][1 ms][DEBUG] START check_frida
[2025-08-21 21:20:28][357576775579095][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:20:28][357576775579095][315 ms][DEBUG] SU: done in 314 ms; outroot         16270     1 2295852   4404 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:20:28][357576775579095][315 ms][DEBUG] check_frida: running
[2025-08-21 21:20:28][357576775579095][316 ms][DEBUG] END   check_frida in 315 ms
[2025-08-21 21:20:28][357576775579095][316 ms][DEBUG] START check_internet
[2025-08-21 21:20:28][357576775579095][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:20:29][357576775579095][597 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.230/174.230/174.230/0.000 ms\n
[2025-08-21 21:20:29][357576775579095][597 ms][DEBUG] check_internet: online
[2025-08-21 21:20:29][357576775579095][597 ms][DEBUG] END   check_internet in 281 ms
[2025-08-21 21:20:29][357576775579095][597 ms][DEBUG] START check_scloud
[2025-08-21 21:20:29][357576775579095][597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:20:29][357576775579095][831 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23679824 80000 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:20:29][357576775579095][831 ms][DEBUG] targetPkg: running
[2025-08-21 21:20:29][357576775579095][831 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 21:20:29][357576775579095][831 ms][DEBUG] rawBody.length=1161
[2025-08-21 21:20:29][357576775579095][831 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2Nzc1NTc5MDk1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g4MEJKSDFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEzMyJ9'" -e "main()" -q"
[2025-08-21 21:20:29][357576775579095][831 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:20:29][357576775579095][832 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2Nzc1NTc5MDk1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g4MEJKSDFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEzMyJ9'" -e "main()" -q"
[2025-08-21 21:20:31][357576775579095][3455 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTc2Nzc1NTc5MDk1IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g4MEJKSDFMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTEzMyJ9"\r\n
[2025-08-21 21:20:34][357576775579095][5736 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df60f4fc-2504-452c-9dd8-9e0703973f32","id":"QR_df60f4fc-2504-452c-9dd8-9e0703973f32","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:20:34][357576775579095][5736 ms][DEBUG] proc_open done in 4904 ms; code=0; res.len=3152
[2025-08-21 21:20:34][357576775579095][5736 ms][DEBUG] END   runCmdUntilRes#1 in 4904 ms
[2025-08-21 21:20:34][357576775579095][5736 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:24:10][357799157906708][1 ms][INFO] === Request start ===
[2025-08-21 21:24:10][357799157906708][2 ms][DEBUG] START check_frida
[2025-08-21 21:24:10][357799157906708][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:24:10][357799157906708][316 ms][DEBUG] SU: done in 314 ms; outroot         16270     1 2295852   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:24:10][357799157906708][316 ms][DEBUG] check_frida: running
[2025-08-21 21:24:10][357799157906708][316 ms][DEBUG] END   check_frida in 314 ms
[2025-08-21 21:24:10][357799157906708][316 ms][DEBUG] START check_internet
[2025-08-21 21:24:10][357799157906708][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:24:11][357799157906708][800 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.799/201.799/201.799/0.000 ms\n
[2025-08-21 21:24:11][357799157906708][800 ms][DEBUG] check_internet: online
[2025-08-21 21:24:11][357799157906708][800 ms][DEBUG] END   check_internet in 485 ms
[2025-08-21 21:24:11][357799157906708][801 ms][DEBUG] START check_scloud
[2025-08-21 21:24:11][357799157906708][801 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:24:11][357799157906708][1050 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23679856 80576 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:24:11][357799157906708][1050 ms][DEBUG] targetPkg: running
[2025-08-21 21:24:11][357799157906708][1050 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 21:24:11][357799157906708][1050 ms][DEBUG] rawBody.length=1161
[2025-08-21 21:24:11][357799157906708][1050 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzk5MTU3OTA2NzA4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c4MDFEM0hSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc5NCJ9'" -e "main()" -q"
[2025-08-21 21:24:11][357799157906708][1050 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:24:11][357799157906708][1050 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Nzk5MTU3OTA2NzA4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c4MDFEM0hSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc5NCJ9'" -e "main()" -q"
[2025-08-21 21:24:13][357799157906708][3721 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Nzk5MTU3OTA2NzA4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1c4MDFEM0hSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMRUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTc5NCJ9"\r\n
[2025-08-21 21:24:16][357799157906708][6205 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_500a4a28-4b68-49dd-86b9-3895df2431a4","id":"QR_500a4a28-4b68-49dd-86b9-3895df2431a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:24:16][357799157906708][6205 ms][DEBUG] proc_open done in 5155 ms; code=0; res.len=3152
[2025-08-21 21:24:16][357799157906708][6205 ms][DEBUG] END   runCmdUntilRes#1 in 5155 ms
[2025-08-21 21:24:16][357799157906708][6205 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:30:10][359126210278107][1 ms][INFO] === Request start ===
[2025-08-21 21:30:10][359126210278107][2 ms][DEBUG] START check_frida
[2025-08-21 21:30:10][359126210278107][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:30:11][359126210278107][285 ms][DEBUG] SU: done in 283 ms; outroot         16270     1 2295852   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:30:11][359126210278107][285 ms][DEBUG] check_frida: running
[2025-08-21 21:30:11][359126210278107][285 ms][DEBUG] END   check_frida in 283 ms
[2025-08-21 21:30:11][359126210278107][285 ms][DEBUG] START check_internet
[2025-08-21 21:30:11][359126210278107][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:30:11][359126210278107][816 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.051/200.051/200.051/0.000 ms\n
[2025-08-21 21:30:11][359126210278107][816 ms][DEBUG] check_internet: online
[2025-08-21 21:30:11][359126210278107][816 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 21:30:11][359126210278107][816 ms][DEBUG] START check_scloud
[2025-08-21 21:30:11][359126210278107][816 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:30:11][359126210278107][1097 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23679888 80100 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:30:11][359126210278107][1097 ms][DEBUG] targetPkg: running
[2025-08-21 21:30:11][359126210278107][1097 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 21:30:11][359126210278107][1097 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:30:11][359126210278107][1097 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTI2MjEwMjc4MTA3IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEY4WDVUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njc3In0='" -e "main()" -q"
[2025-08-21 21:30:11][359126210278107][1097 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:30:11][359126210278107][1097 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTI2MjEwMjc4MTA3IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEY4WDVUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njc3In0='" -e "main()" -q"
[2025-08-21 21:30:14][359126210278107][3768 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTI2MjEwMjc4MTA3IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEY4WDVUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njc3In0="\r\n
[2025-08-21 21:30:23][359126210278107][12438 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69664592-a20a-4b3a-befd-7ff249151508","id":"QR_69664592-a20a-4b3a-befd-7ff249151508","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:30:23][359126210278107][12438 ms][DEBUG] proc_open done in 11341 ms; code=0; res.len=3152
[2025-08-21 21:30:23][359126210278107][12438 ms][DEBUG] END   runCmdUntilRes#1 in 11341 ms
[2025-08-21 21:30:23][359126210278107][12438 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:33:05][357450478072438][1 ms][INFO] === Request start ===
[2025-08-21 21:33:05][357450478072438][2 ms][DEBUG] START check_frida
[2025-08-21 21:33:05][357450478072438][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:33:06][357450478072438][318 ms][DEBUG] SU: done in 317 ms; outroot         16270     1 2294840   4200 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:33:06][357450478072438][318 ms][DEBUG] check_frida: running
[2025-08-21 21:33:06][357450478072438][318 ms][DEBUG] END   check_frida in 317 ms
[2025-08-21 21:33:06][357450478072438][318 ms][DEBUG] START check_scloud
[2025-08-21 21:33:06][357450478072438][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:33:06][357450478072438][584 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23679920 80364 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:33:06][357450478072438][584 ms][DEBUG] targetPkg: running
[2025-08-21 21:33:06][357450478072438][584 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 21:33:06][357450478072438][584 ms][DEBUG] rawBody.length=1161
[2025-08-21 21:33:06][357450478072438][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDc4MDcyNDM4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MEVTMkpBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzNiJ9'" -e "main()" -q"
[2025-08-21 21:33:06][357450478072438][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:33:06][357450478072438][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDUwNDc4MDcyNDM4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MEVTMkpBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzNiJ9'" -e "main()" -q"
[2025-08-21 21:33:08][357450478072438][3240 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDUwNDc4MDcyNDM4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg1MEVTMkpBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTgzNiJ9"\r\n
[2025-08-21 21:33:11][357450478072438][5676 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50cc3bec-170e-40d3-9da6-3b1b73820a34","id":"QR_50cc3bec-170e-40d3-9da6-3b1b73820a34","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:33:11][357450478072438][5677 ms][DEBUG] proc_open done in 5092 ms; code=0; res.len=3152
[2025-08-21 21:33:11][357450478072438][5677 ms][DEBUG] END   runCmdUntilRes#1 in 5092 ms
[2025-08-21 21:33:11][357450478072438][5677 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:33:20][357157881886458][0 ms][INFO] === Request start ===
[2025-08-21 21:33:20][357157881886458][1 ms][DEBUG] START check_frida
[2025-08-21 21:33:20][357157881886458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:33:21][357157881886458][256 ms][DEBUG] SU: done in 255 ms; outroot         16270     1 2312272   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:33:21][357157881886458][256 ms][DEBUG] check_frida: running
[2025-08-21 21:33:21][357157881886458][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-21 21:33:21][357157881886458][256 ms][DEBUG] START check_scloud
[2025-08-21 21:33:21][357157881886458][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:33:21][357157881886458][522 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23679952 79956 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:33:21][357157881886458][522 ms][DEBUG] targetPkg: running
[2025-08-21 21:33:21][357157881886458][522 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 21:33:21][357157881886458][522 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:33:21][357157881886458][522 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MTU3ODgxODg2NDU4IiwibW9kZWwiOiJTTS1BMzI2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1I5MVI4RjJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTEyIn0='" -e "main()" -q"
[2025-08-21 21:33:21][357157881886458][522 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:33:21][357157881886458][522 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MTU3ODgxODg2NDU4IiwibW9kZWwiOiJTTS1BMzI2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1I5MVI4RjJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTEyIn0='" -e "main()" -q"
[2025-08-21 21:33:24][357157881886458][3193 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MTU3ODgxODg2NDU4IiwibW9kZWwiOiJTTS1BMzI2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1I5MVI4RjJOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5OTEyIn0="\r\n
[2025-08-21 21:33:28][357157881886458][7629 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1f61aa1-3358-42ac-9c7a-46b3c685a355","id":"QR_e1f61aa1-3358-42ac-9c7a-46b3c685a355","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:33:28][357157881886458][7630 ms][DEBUG] proc_open done in 7108 ms; code=0; res.len=3152
[2025-08-21 21:33:28][357157881886458][7630 ms][DEBUG] END   runCmdUntilRes#1 in 7108 ms
[2025-08-21 21:33:28][357157881886458][7630 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:35:02][353283323618566][0 ms][INFO] === Request start ===
[2025-08-21 21:35:02][353283323618566][1 ms][DEBUG] START check_frida
[2025-08-21 21:35:02][353283323618566][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:35:03][353283323618566][260 ms][DEBUG] SU: done in 259 ms; outroot         16270     1 2295852   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:35:03][353283323618566][260 ms][DEBUG] check_frida: running
[2025-08-21 21:35:03][353283323618566][260 ms][DEBUG] END   check_frida in 259 ms
[2025-08-21 21:35:03][353283323618566][260 ms][DEBUG] START check_scloud
[2025-08-21 21:35:03][353283323618566][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:35:03][353283323618566][540 ms][DEBUG] SU: done in 280 ms; outu0_a118      16385  4994 23679984 80504 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:35:03][353283323618566][540 ms][DEBUG] targetPkg: running
[2025-08-21 21:35:03][353283323618566][540 ms][DEBUG] END   check_scloud in 280 ms
[2025-08-21 21:35:03][353283323618566][541 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:35:03][353283323618566][541 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjgzMzIzNjE4NTY2IiwibW9kZWwiOiJTTS1BMTU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMlIySkdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODgzIn0='" -e "main()" -q"
[2025-08-21 21:35:03][353283323618566][541 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:35:03][353283323618566][541 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjgzMzIzNjE4NTY2IiwibW9kZWwiOiJTTS1BMTU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMlIySkdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODgzIn0='" -e "main()" -q"
[2025-08-21 21:35:06][353283323618566][3211 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjgzMzIzNjE4NTY2IiwibW9kZWwiOiJTTS1BMTU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMlIySkdKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3ODgzIn0="\r\n
[2025-08-21 21:35:10][353283323618566][8054 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e7cbc07-8198-424e-bc26-64a6a8cdc0b7","id":"QR_6e7cbc07-8198-424e-bc26-64a6a8cdc0b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:35:10][353283323618566][8055 ms][DEBUG] proc_open done in 7514 ms; code=0; res.len=3152
[2025-08-21 21:35:10][353283323618566][8055 ms][DEBUG] END   runCmdUntilRes#1 in 7514 ms
[2025-08-21 21:35:10][353283323618566][8055 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:39:20][350350680411811][1 ms][INFO] === Request start ===
[2025-08-21 21:39:20][350350680411811][2 ms][DEBUG] START check_frida
[2025-08-21 21:39:20][350350680411811][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:39:21][350350680411811][260 ms][DEBUG] SU: done in 259 ms; outroot         16270     1 2295852   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:39:21][350350680411811][260 ms][DEBUG] check_frida: running
[2025-08-21 21:39:21][350350680411811][260 ms][DEBUG] END   check_frida in 259 ms
[2025-08-21 21:39:21][350350680411811][260 ms][DEBUG] START check_scloud
[2025-08-21 21:39:21][350350680411811][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:39:21][350350680411811][510 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23680016 79436 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:39:21][350350680411811][510 ms][DEBUG] targetPkg: running
[2025-08-21 21:39:21][350350680411811][510 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 21:39:21][350350680411811][510 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:39:21][350350680411811][511 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzUwNjgwNDExODExIiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c4MEFZRllIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTU4In0='" -e "main()" -q"
[2025-08-21 21:39:21][350350680411811][511 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:39:21][350350680411811][511 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzUwNjgwNDExODExIiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c4MEFZRllIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTU4In0='" -e "main()" -q"
[2025-08-21 21:39:23][350350680411811][3134 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzUwNjgwNDExODExIiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c4MEFZRllIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTU4In0="\r\n
[2025-08-21 21:39:26][350350680411811][5884 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03364d5b-d38a-4d46-9a2e-e3cef64f1b17","id":"QR_03364d5b-d38a-4d46-9a2e-e3cef64f1b17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:39:26][350350680411811][5884 ms][DEBUG] proc_open done in 5373 ms; code=0; res.len=3152
[2025-08-21 21:39:26][350350680411811][5884 ms][DEBUG] END   runCmdUntilRes#1 in 5373 ms
[2025-08-21 21:39:26][350350680411811][5884 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:45:09][357567916062471][1 ms][INFO] === Request start ===
[2025-08-21 21:45:09][357567916062471][2 ms][DEBUG] START check_frida
[2025-08-21 21:45:09][357567916062471][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:45:10][357567916062471][299 ms][DEBUG] SU: done in 297 ms; outroot         16270     1 2294840   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:45:10][357567916062471][299 ms][DEBUG] check_frida: running
[2025-08-21 21:45:10][357567916062471][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 21:45:10][357567916062471][299 ms][DEBUG] START check_scloud
[2025-08-21 21:45:10][357567916062471][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:45:10][357567916062471][549 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23680048 79004 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:45:10][357567916062471][549 ms][DEBUG] targetPkg: running
[2025-08-21 21:45:10][357567916062471][549 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 21:45:10][357567916062471][549 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:45:10][357567916062471][549 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTY3OTE2MDYyNDcxIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gzMDdGMDNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODU1In0='" -e "main()" -q"
[2025-08-21 21:45:10][357567916062471][549 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:45:10][357567916062471][549 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTY3OTE2MDYyNDcxIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gzMDdGMDNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODU1In0='" -e "main()" -q"
[2025-08-21 21:45:13][357567916062471][3205 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTY3OTE2MDYyNDcxIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1gzMDdGMDNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODU1In0="\r\n
[2025-08-21 21:45:16][357567916062471][6454 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24326a0f-dc61-4d0e-807c-36227234f39b","id":"QR_24326a0f-dc61-4d0e-807c-36227234f39b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:45:16][357567916062471][6454 ms][DEBUG] proc_open done in 5905 ms; code=0; res.len=3152
[2025-08-21 21:45:16][357567916062471][6454 ms][DEBUG] END   runCmdUntilRes#1 in 5905 ms
[2025-08-21 21:45:16][357567916062471][6454 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:45:28][352674170153833][0 ms][INFO] === Request start ===
[2025-08-21 21:45:28][352674170153833][1 ms][DEBUG] START check_frida
[2025-08-21 21:45:28][352674170153833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:45:29][352674170153833][290 ms][DEBUG] SU: done in 289 ms; outroot         16270     1 2295852   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:45:29][352674170153833][290 ms][DEBUG] check_frida: running
[2025-08-21 21:45:29][352674170153833][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 21:45:29][352674170153833][290 ms][DEBUG] START check_scloud
[2025-08-21 21:45:29][352674170153833][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:45:29][352674170153833][539 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23680080 79700 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:45:29][352674170153833][539 ms][DEBUG] targetPkg: running
[2025-08-21 21:45:29][352674170153833][539 ms][DEBUG] END   check_scloud in 249 ms
[2025-08-21 21:45:29][352674170153833][539 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:45:29][352674170153833][540 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc0MTcwMTUzODMzIiwibW9kZWwiOiJTTS1NMTI3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQyMEI1SjRZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjA4In0='" -e "main()" -q"
[2025-08-21 21:45:29][352674170153833][540 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:45:29][352674170153833][540 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjc0MTcwMTUzODMzIiwibW9kZWwiOiJTTS1NMTI3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQyMEI1SjRZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjA4In0='" -e "main()" -q"
[2025-08-21 21:45:31][352674170153833][3210 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjc0MTcwMTUzODMzIiwibW9kZWwiOiJTTS1NMTI3RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQyMEI1SjRZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjA4In0="\r\n
[2025-08-21 21:45:33][352674170153833][4413 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9d685a2-d475-4757-95b8-c640ff61de94","id":"QR_a9d685a2-d475-4757-95b8-c640ff61de94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:45:33][352674170153833][4413 ms][DEBUG] proc_open done in 3873 ms; code=0; res.len=3152
[2025-08-21 21:45:33][352674170153833][4413 ms][DEBUG] END   runCmdUntilRes#1 in 3873 ms
[2025-08-21 21:45:33][352674170153833][4413 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:47:07][358132923148406][1 ms][INFO] === Request start ===
[2025-08-21 21:47:07][358132923148406][1 ms][DEBUG] START check_frida
[2025-08-21 21:47:07][358132923148406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:47:07][353600812157121][0 ms][INFO] === Request start ===
[2025-08-21 21:47:08][358132923148406][299 ms][DEBUG] SU: done in 297 ms; outroot         16270     1 2295852   4484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:47:08][358132923148406][299 ms][DEBUG] check_frida: running
[2025-08-21 21:47:08][358132923148406][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 21:47:08][358132923148406][299 ms][DEBUG] START check_scloud
[2025-08-21 21:47:08][358132923148406][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:47:08][358132923148406][595 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23680112 78916 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:47:08][358132923148406][596 ms][DEBUG] targetPkg: running
[2025-08-21 21:47:08][358132923148406][596 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 21:47:08][358132923148406][596 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:47:08][358132923148406][596 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTMyOTIzMTQ4NDA2IiwibW9kZWwiOiJTTS1TOTA4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MVMzSlFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjgzIn0='" -e "main()" -q"
[2025-08-21 21:47:08][358132923148406][596 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:47:08][358132923148406][596 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTMyOTIzMTQ4NDA2IiwibW9kZWwiOiJTTS1TOTA4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MVMzSlFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjgzIn0='" -e "main()" -q"
[2025-08-21 21:47:11][358132923148406][3204 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MTMyOTIzMTQ4NDA2IiwibW9kZWwiOiJTTS1TOTA4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MVMzSlFUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjgzIn0="\r\n
[2025-08-21 21:47:15][358132923148406][7656 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_331360c4-143e-41d2-a98e-e6c98134aeab","id":"QR_331360c4-143e-41d2-a98e-e6c98134aeab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:47:15][358132923148406][7656 ms][DEBUG] proc_open done in 7060 ms; code=0; res.len=3152
[2025-08-21 21:47:15][358132923148406][7656 ms][DEBUG] END   runCmdUntilRes#1 in 7060 ms
[2025-08-21 21:47:15][358132923148406][7656 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:47:15][353600812157121][8109 ms][DEBUG] START check_frida
[2025-08-21 21:47:15][353600812157121][8109 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:47:16][353600812157121][8375 ms][DEBUG] SU: done in 266 ms; outroot         16270     1 2312272   4476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:47:16][353600812157121][8375 ms][DEBUG] check_frida: running
[2025-08-21 21:47:16][353600812157121][8375 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 21:47:16][353600812157121][8376 ms][DEBUG] START check_scloud
[2025-08-21 21:47:16][353600812157121][8376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:47:16][353600812157121][8625 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23680144 79496 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:47:16][353600812157121][8625 ms][DEBUG] targetPkg: running
[2025-08-21 21:47:16][353600812157121][8625 ms][DEBUG] END   check_scloud in 249 ms
[2025-08-21 21:47:16][353600812157121][8625 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:47:16][353600812157121][8625 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODEyMTU3MTIxIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ2MDNHQ0FFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzE1In0='" -e "main()" -q"
[2025-08-21 21:47:16][353600812157121][8625 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:47:16][353600812157121][8625 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjAwODEyMTU3MTIxIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ2MDNHQ0FFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzE1In0='" -e "main()" -q"
[2025-08-21 21:47:19][353600812157121][11265 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjAwODEyMTU3MTIxIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQ2MDNHQ0FFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzE1In0="\r\n
[2025-08-21 21:47:21][353600812157121][13936 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86b2ba8b-be25-4787-b4ad-7034e485af6e","id":"QR_86b2ba8b-be25-4787-b4ad-7034e485af6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:47:21][353600812157121][13936 ms][DEBUG] proc_open done in 5311 ms; code=0; res.len=3152
[2025-08-21 21:47:21][353600812157121][13936 ms][DEBUG] END   runCmdUntilRes#1 in 5311 ms
[2025-08-21 21:47:21][353600812157121][13936 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:52:21][350896389271674][1 ms][INFO] === Request start ===
[2025-08-21 21:52:21][350896389271674][2 ms][DEBUG] START check_frida
[2025-08-21 21:52:21][350896389271674][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:52:21][350896389271674][300 ms][DEBUG] SU: done in 298 ms; outroot         16270     1 2295852   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:52:21][350896389271674][300 ms][DEBUG] check_frida: running
[2025-08-21 21:52:21][350896389271674][300 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 21:52:21][350896389271674][300 ms][DEBUG] START check_internet
[2025-08-21 21:52:21][350896389271674][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:52:22][350896389271674][893 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.633/198.633/198.633/0.000 ms\n
[2025-08-21 21:52:22][350896389271674][893 ms][DEBUG] check_internet: online
[2025-08-21 21:52:22][350896389271674][894 ms][DEBUG] END   check_internet in 594 ms
[2025-08-21 21:52:22][350896389271674][894 ms][DEBUG] START check_scloud
[2025-08-21 21:52:22][350896389271674][894 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:52:22][350896389271674][1159 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23680176 79524 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:52:22][350896389271674][1159 ms][DEBUG] targetPkg: running
[2025-08-21 21:52:22][350896389271674][1159 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 21:52:22][350896389271674][1159 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:52:22][350896389271674][1159 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2Mzg5MjcxNjc0IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MDE3TUtBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODc1In0='" -e "main()" -q"
[2025-08-21 21:52:22][350896389271674][1159 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:52:22][350896389271674][1160 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2Mzg5MjcxNjc0IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MDE3TUtBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODc1In0='" -e "main()" -q"
[2025-08-21 21:52:25][350896389271674][3736 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2Mzg5MjcxNjc0IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk3MDE3TUtBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODc1In0="\r\n
[2025-08-21 21:52:28][350896389271674][7642 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_505f5a5c-480d-406a-9af0-dc223914d216","id":"QR_505f5a5c-480d-406a-9af0-dc223914d216","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:52:28][350896389271674][7642 ms][DEBUG] proc_open done in 6483 ms; code=0; res.len=3152
[2025-08-21 21:52:28][350896389271674][7642 ms][DEBUG] END   runCmdUntilRes#1 in 6483 ms
[2025-08-21 21:52:28][350896389271674][7642 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:57:32][350274357034435][1 ms][INFO] === Request start ===
[2025-08-21 21:57:32][350274357034435][2 ms][DEBUG] START check_frida
[2025-08-21 21:57:32][350274357034435][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:57:32][350274357034435][297 ms][DEBUG] SU: done in 296 ms; outroot         16270     1 2295852   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:57:32][350274357034435][297 ms][DEBUG] check_frida: running
[2025-08-21 21:57:32][350274357034435][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 21:57:32][350274357034435][298 ms][DEBUG] START check_scloud
[2025-08-21 21:57:32][350274357034435][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:57:32][350274357034435][608 ms][DEBUG] SU: done in 310 ms; outu0_a118      16385  4994 23680208 80344 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:57:32][350274357034435][608 ms][DEBUG] targetPkg: running
[2025-08-21 21:57:32][350274357034435][608 ms][DEBUG] END   check_scloud in 311 ms
[2025-08-21 21:57:32][350274357034435][608 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:57:32][350274357034435][608 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzU3MDM0NDM1IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEhMMUNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzIxIn0='" -e "main()" -q"
[2025-08-21 21:57:32][350274357034435][608 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:57:32][350274357034435][609 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzU3MDM0NDM1IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEhMMUNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzIxIn0='" -e "main()" -q"
[2025-08-21 21:57:35][350274357034435][3279 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjc0MzU3MDM0NDM1IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMEhMMUNCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzIxIn0="\r\n
[2025-08-21 21:57:38][350274357034435][6341 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31642cfa-7d0c-400e-8094-e4575e452626","id":"QR_31642cfa-7d0c-400e-8094-e4575e452626","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:57:38][350274357034435][6341 ms][DEBUG] proc_open done in 5733 ms; code=0; res.len=3152
[2025-08-21 21:57:38][350274357034435][6341 ms][DEBUG] END   runCmdUntilRes#1 in 5733 ms
[2025-08-21 21:57:38][350274357034435][6342 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 21:58:25][353138604576414][0 ms][INFO] === Request start ===
[2025-08-21 21:58:25][353138604576414][1 ms][DEBUG] START check_frida
[2025-08-21 21:58:25][353138604576414][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 21:58:25][353138604576414][297 ms][DEBUG] SU: done in 296 ms; outroot         16270     1 2295852   4484 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 21:58:25][353138604576414][297 ms][DEBUG] check_frida: running
[2025-08-21 21:58:25][353138604576414][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-21 21:58:25][353138604576414][298 ms][DEBUG] START check_internet
[2025-08-21 21:58:25][353138604576414][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 21:58:26][353138604576414][749 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.613/200.613/200.613/0.000 ms\n
[2025-08-21 21:58:26][353138604576414][749 ms][DEBUG] check_internet: online
[2025-08-21 21:58:26][353138604576414][749 ms][DEBUG] END   check_internet in 451 ms
[2025-08-21 21:58:26][353138604576414][749 ms][DEBUG] START check_scloud
[2025-08-21 21:58:26][353138604576414][749 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 21:58:26][353138604576414][1014 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23680240 79604 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 21:58:26][353138604576414][1014 ms][DEBUG] targetPkg: running
[2025-08-21 21:58:26][353138604576414][1014 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 21:58:26][353138604576414][1014 ms][DEBUG] rawBody.length=1160
[2025-08-21 21:58:26][353138604576414][1014 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTM4NjA0NTc2NDE0IiwibW9kZWwiOiJTTS1TOTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMkJDV0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDAwIn0='" -e "main()" -q"
[2025-08-21 21:58:26][353138604576414][1014 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 21:58:26][353138604576414][1015 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTM4NjA0NTc2NDE0IiwibW9kZWwiOiJTTS1TOTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMkJDV0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDAwIn0='" -e "main()" -q"
[2025-08-21 21:58:28][353138604576414][3638 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTM4NjA0NTc2NDE0IiwibW9kZWwiOiJTTS1TOTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMkJDV0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNDAwIn0="\r\n
[2025-08-21 21:58:33][353138604576414][8294 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3bec24da-2253-4ab2-b1e4-71ed33390c63","id":"QR_3bec24da-2253-4ab2-b1e4-71ed33390c63","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 21:58:33][353138604576414][8294 ms][DEBUG] proc_open done in 7279 ms; code=0; res.len=3152
[2025-08-21 21:58:33][353138604576414][8294 ms][DEBUG] END   runCmdUntilRes#1 in 7279 ms
[2025-08-21 21:58:33][353138604576414][8294 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:03:37][352623857817061][1 ms][INFO] === Request start ===
[2025-08-21 22:03:37][352623857817061][1 ms][DEBUG] START check_frida
[2025-08-21 22:03:37][352623857817061][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:03:37][352623857817061][296 ms][DEBUG] SU: done in 294 ms; outroot         16270     1 2296864   4408 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:03:37][352623857817061][296 ms][DEBUG] check_frida: running
[2025-08-21 22:03:37][352623857817061][296 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 22:03:37][352623857817061][296 ms][DEBUG] START check_scloud
[2025-08-21 22:03:37][352623857817061][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:03:37][352623857817061][608 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23680272 79348 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:03:37][352623857817061][609 ms][DEBUG] targetPkg: running
[2025-08-21 22:03:37][352623857817061][609 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 22:03:37][352623857817061][609 ms][DEBUG] rawBody.length=1161
[2025-08-21 22:03:37][352623857817061][609 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjIzODU3ODE3MDYxIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMTU4UURLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI0MSJ9'" -e "main()" -q"
[2025-08-21 22:03:37][352623857817061][609 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:03:37][352623857817061][609 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjIzODU3ODE3MDYxIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMTU4UURLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI0MSJ9'" -e "main()" -q"
[2025-08-21 22:03:40][352623857817061][3279 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjIzODU3ODE3MDYxIiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMTU4UURLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI0MSJ9"\r\n
[2025-08-21 22:03:42][352623857817061][5435 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0733736-321f-42ed-bdda-5d2fd1cf3a18","id":"QR_e0733736-321f-42ed-bdda-5d2fd1cf3a18","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:03:42][352623857817061][5435 ms][DEBUG] proc_open done in 4826 ms; code=0; res.len=3152
[2025-08-21 22:03:42][352623857817061][5435 ms][DEBUG] END   runCmdUntilRes#1 in 4826 ms
[2025-08-21 22:03:42][352623857817061][5435 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:04:50][351676564494237][1 ms][INFO] === Request start ===
[2025-08-21 22:04:50][351676564494237][2 ms][DEBUG] START check_frida
[2025-08-21 22:04:50][351676564494237][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:04:50][351676564494237][253 ms][DEBUG] SU: done in 251 ms; outroot         16270     1 2295852   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:04:50][351676564494237][253 ms][DEBUG] check_frida: running
[2025-08-21 22:04:50][351676564494237][253 ms][DEBUG] END   check_frida in 251 ms
[2025-08-21 22:04:50][351676564494237][253 ms][DEBUG] START check_internet
[2025-08-21 22:04:50][351676564494237][253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 22:04:51][351676564494237][690 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.046/202.046/202.046/0.000 ms\n
[2025-08-21 22:04:51][351676564494237][691 ms][DEBUG] check_internet: online
[2025-08-21 22:04:51][351676564494237][691 ms][DEBUG] END   check_internet in 438 ms
[2025-08-21 22:04:51][351676564494237][691 ms][DEBUG] START check_scloud
[2025-08-21 22:04:51][351676564494237][691 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:04:51][351676564494237][987 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23680304 80200 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:04:51][351676564494237][987 ms][DEBUG] targetPkg: running
[2025-08-21 22:04:51][351676564494237][987 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 22:04:51][351676564494237][987 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:04:51][351676564494237][987 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjc2NTY0NDk0MjM3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MUUzV0ZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjY0In0='" -e "main()" -q"
[2025-08-21 22:04:51][351676564494237][987 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:04:51][351676564494237][987 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjc2NTY0NDk0MjM3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MUUzV0ZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjY0In0='" -e "main()" -q"
[2025-08-21 22:04:54][351676564494237][3643 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjc2NTY0NDk0MjM3IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MUUzV0ZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjY0In0="\r\n
[2025-08-21 22:04:57][351676564494237][7111 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9dfd849e-b5eb-49ed-9268-7e1d7f4d05a6","id":"QR_9dfd849e-b5eb-49ed-9268-7e1d7f4d05a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:04:57][351676564494237][7111 ms][DEBUG] proc_open done in 6124 ms; code=0; res.len=3152
[2025-08-21 22:04:57][351676564494237][7111 ms][DEBUG] END   runCmdUntilRes#1 in 6124 ms
[2025-08-21 22:04:57][351676564494237][7111 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:05:56][351406756152751][1 ms][INFO] === Request start ===
[2025-08-21 22:05:56][351406756152751][2 ms][DEBUG] START check_frida
[2025-08-21 22:05:56][351406756152751][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:05:57][351406756152751][323 ms][DEBUG] SU: done in 321 ms; outroot         16270     1 2295852   4424 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:05:57][351406756152751][323 ms][DEBUG] check_frida: running
[2025-08-21 22:05:57][351406756152751][323 ms][DEBUG] END   check_frida in 322 ms
[2025-08-21 22:05:57][351406756152751][323 ms][DEBUG] START check_scloud
[2025-08-21 22:05:57][351406756152751][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:05:57][351406756152751][573 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23680336 79428 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:05:57][351406756152751][573 ms][DEBUG] targetPkg: running
[2025-08-21 22:05:57][351406756152751][573 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 22:05:57][351406756152751][573 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:05:57][351406756152751][573 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDA2NzU2MTUyNzUxIiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1czMDlQWllLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzczIn0='" -e "main()" -q"
[2025-08-21 22:05:57][351406756152751][573 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:05:57][351406756152751][573 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDA2NzU2MTUyNzUxIiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1czMDlQWllLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzczIn0='" -e "main()" -q"
[2025-08-21 22:06:00][351406756152751][3228 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDA2NzU2MTUyNzUxIiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1czMDlQWllLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzczIn0="\r\n
[2025-08-21 22:06:03][351406756152751][7134 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_066a73ef-a646-4c24-b5f2-be300d3c2055","id":"QR_066a73ef-a646-4c24-b5f2-be300d3c2055","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:06:03][351406756152751][7134 ms][DEBUG] proc_open done in 6561 ms; code=0; res.len=3152
[2025-08-21 22:06:03][351406756152751][7134 ms][DEBUG] END   runCmdUntilRes#1 in 6561 ms
[2025-08-21 22:06:03][351406756152751][7134 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:10:16][352693792077261][1 ms][INFO] === Request start ===
[2025-08-21 22:10:16][352693792077261][2 ms][DEBUG] START check_frida
[2025-08-21 22:10:16][352693792077261][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:10:16][352693792077261][313 ms][DEBUG] SU: done in 311 ms; outroot         16270     1 2295852   4400 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:10:16][352693792077261][313 ms][DEBUG] check_frida: running
[2025-08-21 22:10:16][352693792077261][314 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 22:10:16][352693792077261][314 ms][DEBUG] START check_internet
[2025-08-21 22:10:16][352693792077261][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 22:10:17][352693792077261][813 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.429/201.429/201.429/0.000 ms\n
[2025-08-21 22:10:17][352693792077261][813 ms][DEBUG] check_internet: online
[2025-08-21 22:10:17][352693792077261][813 ms][DEBUG] END   check_internet in 499 ms
[2025-08-21 22:10:17][352693792077261][813 ms][DEBUG] START check_scloud
[2025-08-21 22:10:17][352693792077261][813 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:10:17][352693792077261][1079 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23680368 79528 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:10:17][352693792077261][1079 ms][DEBUG] targetPkg: running
[2025-08-21 22:10:17][352693792077261][1079 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 22:10:17][352693792077261][1079 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:10:17][352693792077261][1079 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjkzNzkyMDc3MjYxIiwibW9kZWwiOiJTTS1TNzIxVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBNEZXQkVZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjcxIn0='" -e "main()" -q"
[2025-08-21 22:10:17][352693792077261][1079 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:10:17][352693792077261][1079 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjkzNzkyMDc3MjYxIiwibW9kZWwiOiJTTS1TNzIxVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBNEZXQkVZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjcxIn0='" -e "main()" -q"
[2025-08-21 22:10:19][352693792077261][3734 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjkzNzkyMDc3MjYxIiwibW9kZWwiOiJTTS1TNzIxVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBNEZXQkVZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMjcxIn0="\r\n
[2025-08-21 22:10:23][352693792077261][6952 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ea41c4c-5117-4612-b999-b28e724e5af8","id":"QR_1ea41c4c-5117-4612-b999-b28e724e5af8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:10:23][352693792077261][6952 ms][DEBUG] proc_open done in 5873 ms; code=0; res.len=3152
[2025-08-21 22:10:23][352693792077261][6952 ms][DEBUG] END   runCmdUntilRes#1 in 5873 ms
[2025-08-21 22:10:23][352693792077261][6952 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:11:04][350000026889705][0 ms][INFO] === Request start ===
[2025-08-21 22:11:04][350000026889705][1 ms][DEBUG] START check_frida
[2025-08-21 22:11:04][350000026889705][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:11:05][350000026889705][303 ms][DEBUG] SU: done in 302 ms; outroot         16270     1 2295852   4476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:11:05][350000026889705][303 ms][DEBUG] check_frida: running
[2025-08-21 22:11:05][350000026889705][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 22:11:05][350000026889705][303 ms][DEBUG] START check_scloud
[2025-08-21 22:11:05][350000026889705][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:11:05][350000026889705][584 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23680400 79512 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:11:05][350000026889705][584 ms][DEBUG] targetPkg: running
[2025-08-21 22:11:05][350000026889705][584 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 22:11:05][350000026889705][585 ms][DEBUG] rawBody.length=1161
[2025-08-21 22:11:05][350000026889705][585 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDAwMDI2ODg5NzA1IiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5CMkVQMlZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTRUsiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkxMiJ9'" -e "main()" -q"
[2025-08-21 22:11:05][350000026889705][585 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:11:05][350000026889705][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDAwMDI2ODg5NzA1IiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5CMkVQMlZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTRUsiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkxMiJ9'" -e "main()" -q"
[2025-08-21 22:11:08][350000026889705][3209 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDAwMDI2ODg5NzA1IiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE5CMkVQMlZSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJTRUsiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDkxMiJ9"\r\n
[2025-08-21 22:11:10][350000026889705][5364 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_600b83a3-f8fa-4330-8e4c-dd87f23ed35c","id":"QR_600b83a3-f8fa-4330-8e4c-dd87f23ed35c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:11:10][350000026889705][5364 ms][DEBUG] proc_open done in 4779 ms; code=0; res.len=3152
[2025-08-21 22:11:10][350000026889705][5364 ms][DEBUG] END   runCmdUntilRes#1 in 4779 ms
[2025-08-21 22:11:10][350000026889705][5364 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:11:15][351272330468968][0 ms][INFO] === Request start ===
[2025-08-21 22:11:15][351272330468968][1 ms][DEBUG] START check_frida
[2025-08-21 22:11:15][351272330468968][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:11:16][351272330468968][264 ms][DEBUG] SU: done in 263 ms; outroot         16270     1 2312272   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:11:16][351272330468968][264 ms][DEBUG] check_frida: running
[2025-08-21 22:11:16][351272330468968][264 ms][DEBUG] END   check_frida in 263 ms
[2025-08-21 22:11:16][351272330468968][264 ms][DEBUG] START check_scloud
[2025-08-21 22:11:16][351272330468968][264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:11:16][351272330468968][576 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23680432 80076 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:11:16][351272330468968][576 ms][DEBUG] targetPkg: running
[2025-08-21 22:11:16][351272330468968][576 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 22:11:16][351272330468968][577 ms][DEBUG] rawBody.length=1161
[2025-08-21 22:11:16][351272330468968][577 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzMwNDY4OTY4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFpHM0ZCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDEyMiJ9'" -e "main()" -q"
[2025-08-21 22:11:16][351272330468968][577 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:11:16][351272330468968][577 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzMwNDY4OTY4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFpHM0ZCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDEyMiJ9'" -e "main()" -q"
[2025-08-21 22:11:19][351272330468968][3232 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcyMzMwNDY4OTY4IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFpHM0ZCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDEyMiJ9"\r\n
[2025-08-21 22:11:20][351272330468968][4966 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd6f21fd-2eb8-4e47-8900-7f803724804b","id":"QR_fd6f21fd-2eb8-4e47-8900-7f803724804b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:11:20][351272330468968][4966 ms][DEBUG] proc_open done in 4389 ms; code=0; res.len=3152
[2025-08-21 22:11:20][351272330468968][4966 ms][DEBUG] END   runCmdUntilRes#1 in 4390 ms
[2025-08-21 22:11:20][351272330468968][4966 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:15:08][352749384900821][1 ms][INFO] === Request start ===
[2025-08-21 22:15:08][352749384900821][2 ms][DEBUG] START check_frida
[2025-08-21 22:15:08][352749384900821][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:15:08][352749384900821][306 ms][DEBUG] SU: done in 304 ms; outroot         16270     1 2295852   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:15:08][352749384900821][306 ms][DEBUG] check_frida: running
[2025-08-21 22:15:08][352749384900821][307 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 22:15:08][352749384900821][307 ms][DEBUG] START check_scloud
[2025-08-21 22:15:08][352749384900821][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:15:09][352749384900821][603 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23680464 79464 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:15:09][352749384900821][603 ms][DEBUG] targetPkg: running
[2025-08-21 22:15:09][352749384900821][603 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 22:15:09][352749384900821][603 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:15:09][352749384900821][603 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzQ5Mzg0OTAwODIxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MEU3TlpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNDc5In0='" -e "main()" -q"
[2025-08-21 22:15:09][352749384900821][603 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:15:09][352749384900821][604 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzQ5Mzg0OTAwODIxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MEU3TlpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNDc5In0='" -e "main()" -q"
[2025-08-21 22:15:11][352749384900821][3227 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzQ5Mzg0OTAwODIxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg3MEU3TlpSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNDc5In0="\r\n
[2025-08-21 22:15:18][352749384900821][9851 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94c881f2-48b6-4b45-9356-c05901b2e0e3","id":"QR_94c881f2-48b6-4b45-9356-c05901b2e0e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:15:18][352749384900821][9851 ms][DEBUG] proc_open done in 9247 ms; code=0; res.len=3152
[2025-08-21 22:15:18][352749384900821][9851 ms][DEBUG] END   runCmdUntilRes#1 in 9248 ms
[2025-08-21 22:15:18][352749384900821][9851 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:15:27][355195303641764][0 ms][INFO] === Request start ===
[2025-08-21 22:15:27][355195303641764][1 ms][DEBUG] START check_frida
[2025-08-21 22:15:27][355195303641764][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:15:27][355195303641764][293 ms][DEBUG] SU: done in 292 ms; outroot         16270     1 2295852   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:15:27][355195303641764][293 ms][DEBUG] check_frida: running
[2025-08-21 22:15:27][355195303641764][293 ms][DEBUG] END   check_frida in 292 ms
[2025-08-21 22:15:27][355195303641764][293 ms][DEBUG] START check_scloud
[2025-08-21 22:15:27][355195303641764][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:15:27][355195303641764][527 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23680496 80060 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:15:27][355195303641764][527 ms][DEBUG] targetPkg: running
[2025-08-21 22:15:27][355195303641764][527 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 22:15:27][355195303641764][527 ms][DEBUG] rawBody.length=1161
[2025-08-21 22:15:27][355195303641764][527 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTk1MzAzNjQxNzY0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlk2MU5EIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYzNiJ9'" -e "main()" -q"
[2025-08-21 22:15:27][355195303641764][528 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:15:27][355195303641764][528 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTk1MzAzNjQxNzY0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlk2MU5EIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYzNiJ9'" -e "main()" -q"
[2025-08-21 22:15:30][355195303641764][3183 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MTk1MzAzNjQxNzY0IiwibW9kZWwiOiJTTS1TNzExQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1dDMlk2MU5EIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTYzNiJ9"\r\n
[2025-08-21 22:15:32][355195303641764][5620 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_678aa2b1-a52a-42c2-b223-4c57c439f0cd","id":"QR_678aa2b1-a52a-42c2-b223-4c57c439f0cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:15:32][355195303641764][5620 ms][DEBUG] proc_open done in 5092 ms; code=0; res.len=3152
[2025-08-21 22:15:32][355195303641764][5620 ms][DEBUG] END   runCmdUntilRes#1 in 5093 ms
[2025-08-21 22:15:32][355195303641764][5620 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:15:40][350095131284362][0 ms][INFO] === Request start ===
[2025-08-21 22:15:40][350095131284362][1 ms][DEBUG] START check_frida
[2025-08-21 22:15:40][350095131284362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:15:41][350095131284362][308 ms][DEBUG] SU: done in 307 ms; outroot         16270     1 2312272   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:15:41][350095131284362][308 ms][DEBUG] check_frida: running
[2025-08-21 22:15:41][350095131284362][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 22:15:41][350095131284362][308 ms][DEBUG] START check_scloud
[2025-08-21 22:15:41][350095131284362][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:15:41][350095131284362][543 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23680528 79656 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:15:41][350095131284362][543 ms][DEBUG] targetPkg: running
[2025-08-21 22:15:41][350095131284362][543 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 22:15:41][350095131284362][543 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:15:41][350095131284362][543 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDk1MTMxMjg0MzYyIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MkE2TUpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjI0In0='" -e "main()" -q"
[2025-08-21 22:15:41][350095131284362][543 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:15:41][350095131284362][543 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDk1MTMxMjg0MzYyIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MkE2TUpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjI0In0='" -e "main()" -q"
[2025-08-21 22:15:44][350095131284362][3198 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDk1MTMxMjg0MzYyIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MkE2TUpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjI0In0="\r\n
[2025-08-21 22:15:47][350095131284362][6838 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_096f3c00-54df-4f4a-8c97-9ab95a8d67d3","id":"QR_096f3c00-54df-4f4a-8c97-9ab95a8d67d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:15:47][350095131284362][6838 ms][DEBUG] proc_open done in 6295 ms; code=0; res.len=3152
[2025-08-21 22:15:47][350095131284362][6838 ms][DEBUG] END   runCmdUntilRes#1 in 6295 ms
[2025-08-21 22:15:47][350095131284362][6838 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:15:56][351676568981775][0 ms][INFO] === Request start ===
[2025-08-21 22:15:56][351676568981775][1 ms][DEBUG] START check_frida
[2025-08-21 22:15:56][351676568981775][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:15:56][351676568981775][269 ms][DEBUG] SU: done in 268 ms; outroot         16270     1 2312272   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:15:56][351676568981775][270 ms][DEBUG] check_frida: running
[2025-08-21 22:15:56][351676568981775][270 ms][DEBUG] END   check_frida in 269 ms
[2025-08-21 22:15:56][351676568981775][270 ms][DEBUG] START check_scloud
[2025-08-21 22:15:56][351676568981775][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:15:57][351676568981775][582 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23680560 79084 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:15:57][351676568981775][582 ms][DEBUG] targetPkg: running
[2025-08-21 22:15:57][351676568981775][582 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 22:15:57][351676568981775][582 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:15:57][351676568981775][582 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjc2NTY4OTgxNzc1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kxMFo3UUNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjA4In0='" -e "main()" -q"
[2025-08-21 22:15:57][351676568981775][582 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:15:57][351676568981775][582 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjc2NTY4OTgxNzc1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kxMFo3UUNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjA4In0='" -e "main()" -q"
[2025-08-21 22:15:59][351676568981775][3269 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjc2NTY4OTgxNzc1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kxMFo3UUNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjA4In0="\r\n
[2025-08-21 22:16:05][351676568981775][9376 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9838f9a-7e18-4103-9d77-aa35bdac5126","id":"QR_c9838f9a-7e18-4103-9d77-aa35bdac5126","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:16:05][351676568981775][9377 ms][DEBUG] proc_open done in 8795 ms; code=0; res.len=3152
[2025-08-21 22:16:05][351676568981775][9377 ms][DEBUG] END   runCmdUntilRes#1 in 8795 ms
[2025-08-21 22:16:05][351676568981775][9377 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:19:56][350039937539280][1 ms][INFO] === Request start ===
[2025-08-21 22:19:56][350039937539280][2 ms][DEBUG] START check_frida
[2025-08-21 22:19:56][350039937539280][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:19:56][350039937539280][264 ms][DEBUG] SU: done in 263 ms; outroot         16270     1 2295852   4480 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:19:56][350039937539280][265 ms][DEBUG] check_frida: running
[2025-08-21 22:19:56][350039937539280][265 ms][DEBUG] END   check_frida in 263 ms
[2025-08-21 22:19:56][350039937539280][265 ms][DEBUG] START check_scloud
[2025-08-21 22:19:56][350039937539280][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:19:57][350039937539280][577 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23680592 79932 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:19:57][350039937539280][577 ms][DEBUG] targetPkg: running
[2025-08-21 22:19:57][350039937539280][577 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 22:19:57][350039937539280][577 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:19:57][350039937539280][577 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDM5OTM3NTM5MjgwIiwibW9kZWwiOiJTTS1BMTI3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQxMEQ5VzFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2Nzk3In0='" -e "main()" -q"
[2025-08-21 22:19:57][350039937539280][578 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:19:57][350039937539280][578 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDM5OTM3NTM5MjgwIiwibW9kZWwiOiJTTS1BMTI3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQxMEQ5VzFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2Nzk3In0='" -e "main()" -q"
[2025-08-21 22:19:59][350039937539280][3201 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDM5OTM3NTM5MjgwIiwibW9kZWwiOiJTTS1BMTI3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQxMEQ5VzFLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2Nzk3In0="\r\n
[2025-08-21 22:20:03][350039937539280][7122 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8e895fb-0ce7-421e-a46d-e6d5d43f1232","id":"QR_b8e895fb-0ce7-421e-a46d-e6d5d43f1232","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:20:03][350039937539280][7123 ms][DEBUG] proc_open done in 6545 ms; code=0; res.len=3152
[2025-08-21 22:20:03][350039937539280][7123 ms][DEBUG] END   runCmdUntilRes#1 in 6545 ms
[2025-08-21 22:20:03][350039937539280][7123 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:22:21][351771924662787][1 ms][INFO] === Request start ===
[2025-08-21 22:22:21][351771924662787][2 ms][DEBUG] START check_frida
[2025-08-21 22:22:21][351771924662787][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:22:22][351771924662787][272 ms][DEBUG] SU: done in 270 ms; outroot         16270     1 2295852   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:22:22][351771924662787][272 ms][DEBUG] check_frida: running
[2025-08-21 22:22:22][351771924662787][272 ms][DEBUG] END   check_frida in 270 ms
[2025-08-21 22:22:22][351771924662787][272 ms][DEBUG] START check_internet
[2025-08-21 22:22:22][351771924662787][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 22:22:22][351771924662787][772 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.656/201.656/201.656/0.000 ms\n
[2025-08-21 22:22:22][351771924662787][772 ms][DEBUG] check_internet: online
[2025-08-21 22:22:22][351771924662787][772 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 22:22:22][351771924662787][772 ms][DEBUG] START check_scloud
[2025-08-21 22:22:22][351771924662787][772 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:22:22][351771924662787][1068 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23680624 79512 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:22:22][351771924662787][1068 ms][DEBUG] targetPkg: running
[2025-08-21 22:22:22][351771924662787][1068 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 22:22:22][351771924662787][1068 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:22:22][351771924662787][1068 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTI0NjYyNzg3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBM1JONldUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTYxIn0='" -e "main()" -q"
[2025-08-21 22:22:22][351771924662787][1068 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:22:22][351771924662787][1068 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTI0NjYyNzg3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBM1JONldUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTYxIn0='" -e "main()" -q"
[2025-08-21 22:22:25][351771924662787][3708 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzcxOTI0NjYyNzg3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBM1JONldUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMTYxIn0="\r\n
[2025-08-21 22:22:28][351771924662787][7004 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa11e65d-7d2a-41b7-85e4-1e616d8edcfb","id":"QR_fa11e65d-7d2a-41b7-85e4-1e616d8edcfb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:22:28][351771924662787][7005 ms][DEBUG] proc_open done in 5936 ms; code=0; res.len=3152
[2025-08-21 22:22:28][351771924662787][7005 ms][DEBUG] END   runCmdUntilRes#1 in 5936 ms
[2025-08-21 22:22:28][351771924662787][7005 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:25:09][354793243587534][1 ms][INFO] === Request start ===
[2025-08-21 22:25:09][354793243587534][2 ms][DEBUG] START check_frida
[2025-08-21 22:25:09][354793243587534][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:25:10][354793243587534][270 ms][DEBUG] SU: done in 268 ms; outroot         16270     1 2295852   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:25:10][354793243587534][270 ms][DEBUG] check_frida: running
[2025-08-21 22:25:10][354793243587534][270 ms][DEBUG] END   check_frida in 268 ms
[2025-08-21 22:25:10][354793243587534][270 ms][DEBUG] START check_scloud
[2025-08-21 22:25:10][354793243587534][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:25:10][354793243587534][567 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23680656 79856 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:25:10][354793243587534][567 ms][DEBUG] targetPkg: running
[2025-08-21 22:25:10][354793243587534][567 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 22:25:10][354793243587534][567 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:25:10][354793243587534][567 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzkzMjQzNTg3NTM0IiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc1MFlCRTdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDY5In0='" -e "main()" -q"
[2025-08-21 22:25:10][354793243587534][567 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:25:10][354793243587534][567 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzkzMjQzNTg3NTM0IiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc1MFlCRTdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDY5In0='" -e "main()" -q"
[2025-08-21 22:25:13][354793243587534][3191 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzkzMjQzNTg3NTM0IiwibW9kZWwiOiJTTS1BMTM1VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc1MFlCRTdCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFJTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDY5In0="\r\n
[2025-08-21 22:25:16][354793243587534][6534 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6122d18f-fd4a-4d0c-9bc2-0719b996c920","id":"QR_6122d18f-fd4a-4d0c-9bc2-0719b996c920","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:25:16][354793243587534][6534 ms][DEBUG] proc_open done in 5967 ms; code=0; res.len=3152
[2025-08-21 22:25:16][354793243587534][6534 ms][DEBUG] END   runCmdUntilRes#1 in 5967 ms
[2025-08-21 22:25:16][354793243587534][6534 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:26:39][352432794771385][0 ms][INFO] === Request start ===
[2025-08-21 22:26:39][352432794771385][1 ms][DEBUG] START check_frida
[2025-08-21 22:26:39][352432794771385][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:26:40][352432794771385][318 ms][DEBUG] SU: done in 317 ms; outroot         16270     1 2295852   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:26:40][352432794771385][318 ms][DEBUG] check_frida: running
[2025-08-21 22:26:40][352432794771385][318 ms][DEBUG] END   check_frida in 318 ms
[2025-08-21 22:26:40][352432794771385][318 ms][DEBUG] START check_internet
[2025-08-21 22:26:40][352432794771385][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 22:26:40][352432794771385][646 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.161/231.161/231.161/0.000 ms\n
[2025-08-21 22:26:40][352432794771385][646 ms][DEBUG] check_internet: online
[2025-08-21 22:26:40][352432794771385][646 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 22:26:40][352432794771385][646 ms][DEBUG] START check_scloud
[2025-08-21 22:26:40][352432794771385][646 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:26:40][352432794771385][927 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23680688 79332 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:26:40][352432794771385][927 ms][DEBUG] targetPkg: running
[2025-08-21 22:26:40][352432794771385][927 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 22:26:40][352432794771385][927 ms][DEBUG] rawBody.length=1161
[2025-08-21 22:26:40][352432794771385][927 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDMyNzk0NzcxMzg1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMjhOWVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI1NyJ9'" -e "main()" -q"
[2025-08-21 22:26:40][352432794771385][927 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:26:40][352432794771385][927 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDMyNzk0NzcxMzg1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMjhOWVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI1NyJ9'" -e "main()" -q"
[2025-08-21 22:26:43][352432794771385][3567 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDMyNzk0NzcxMzg1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMjhOWVBNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzI1NyJ9"\r\n
[2025-08-21 22:26:45][352432794771385][5723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b54c19f1-182c-4612-a98c-693c6355ad6d","id":"QR_b54c19f1-182c-4612-a98c-693c6355ad6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:26:45][352432794771385][5724 ms][DEBUG] proc_open done in 4796 ms; code=0; res.len=3152
[2025-08-21 22:26:45][352432794771385][5724 ms][DEBUG] END   runCmdUntilRes#1 in 4796 ms
[2025-08-21 22:26:45][352432794771385][5724 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:30:10][359147524417041][1 ms][INFO] === Request start ===
[2025-08-21 22:30:10][359147524417041][2 ms][DEBUG] START check_frida
[2025-08-21 22:30:10][359147524417041][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:30:10][359147524417041][303 ms][DEBUG] SU: done in 301 ms; outroot         16270     1 2295852   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:30:10][359147524417041][303 ms][DEBUG] check_frida: running
[2025-08-21 22:30:10][359147524417041][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 22:30:10][359147524417041][303 ms][DEBUG] START check_internet
[2025-08-21 22:30:10][359147524417041][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 22:30:11][359147524417041][772 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.151/201.151/201.151/0.000 ms\n
[2025-08-21 22:30:11][359147524417041][772 ms][DEBUG] check_internet: online
[2025-08-21 22:30:11][359147524417041][772 ms][DEBUG] END   check_internet in 469 ms
[2025-08-21 22:30:11][359147524417041][772 ms][DEBUG] START check_scloud
[2025-08-21 22:30:11][359147524417041][772 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:30:11][359147524417041][1068 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23680720 79956 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:30:11][359147524417041][1068 ms][DEBUG] targetPkg: running
[2025-08-21 22:30:11][359147524417041][1068 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-21 22:30:11][359147524417041][1068 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:30:11][359147524417041][1068 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTQ3NTI0NDE3MDQxIiwibW9kZWwiOiJTTS1BMjM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MDBLTjRIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkJTVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDIzIn0='" -e "main()" -q"
[2025-08-21 22:30:11][359147524417041][1068 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:30:11][359147524417041][1068 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTQ3NTI0NDE3MDQxIiwibW9kZWwiOiJTTS1BMjM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MDBLTjRIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkJTVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDIzIn0='" -e "main()" -q"
[2025-08-21 22:30:13][359147524417041][3708 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTQ3NTI0NDE3MDQxIiwibW9kZWwiOiJTTS1BMjM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MDBLTjRIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkJTVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDIzIn0="\r\n
[2025-08-21 22:30:18][359147524417041][8629 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27992d75-0f46-4b65-9cad-a97ea6e6b7b9","id":"QR_27992d75-0f46-4b65-9cad-a97ea6e6b7b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:30:18][359147524417041][8629 ms][DEBUG] proc_open done in 7561 ms; code=0; res.len=3152
[2025-08-21 22:30:18][359147524417041][8629 ms][DEBUG] END   runCmdUntilRes#1 in 7561 ms
[2025-08-21 22:30:18][359147524417041][8629 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:31:34][351272332248053][1 ms][INFO] === Request start ===
[2025-08-21 22:31:34][351272332248053][2 ms][DEBUG] START check_frida
[2025-08-21 22:31:34][351272332248053][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:31:35][351272332248053][309 ms][DEBUG] SU: done in 308 ms; outroot         16270     1 2295852   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:31:35][351272332248053][309 ms][DEBUG] check_frida: running
[2025-08-21 22:31:35][351272332248053][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 22:31:35][351272332248053][309 ms][DEBUG] START check_scloud
[2025-08-21 22:31:35][351272332248053][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:31:35][351272332248053][559 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23680752 79496 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:31:35][351272332248053][559 ms][DEBUG] targetPkg: running
[2025-08-21 22:31:35][351272332248053][559 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 22:31:35][351272332248053][559 ms][DEBUG] rawBody.length=1161
[2025-08-21 22:31:35][351272332248053][559 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzMyMjQ4MDUzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkzMExSOFJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODEwOSJ9'" -e "main()" -q"
[2025-08-21 22:31:35][351272332248053][559 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:31:35][351272332248053][559 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcyMzMyMjQ4MDUzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkzMExSOFJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODEwOSJ9'" -e "main()" -q"
[2025-08-21 22:31:38][351272332248053][3183 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcyMzMyMjQ4MDUzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkzMExSOFJFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODEwOSJ9"\r\n
[2025-08-21 22:31:40][351272332248053][5183 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35833cba-05ed-43a1-a2f1-f5da6c263ded","id":"QR_35833cba-05ed-43a1-a2f1-f5da6c263ded","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:31:40][351272332248053][5183 ms][DEBUG] proc_open done in 4624 ms; code=0; res.len=3152
[2025-08-21 22:31:40][351272332248053][5183 ms][DEBUG] END   runCmdUntilRes#1 in 4624 ms
[2025-08-21 22:31:40][351272332248053][5183 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:48:20][359156941511120][1 ms][INFO] === Request start ===
[2025-08-21 22:48:20][359156941511120][2 ms][DEBUG] START check_frida
[2025-08-21 22:48:20][359156941511120][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:48:21][359156941511120][309 ms][DEBUG] SU: done in 307 ms; outroot         16270     1 2295852   4476 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:48:21][359156941511120][309 ms][DEBUG] check_frida: running
[2025-08-21 22:48:21][359156941511120][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-21 22:48:21][359156941511120][309 ms][DEBUG] START check_internet
[2025-08-21 22:48:21][359156941511120][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 22:48:21][359156941511120][840 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.820/200.820/200.820/0.000 ms\n
[2025-08-21 22:48:21][359156941511120][840 ms][DEBUG] check_internet: online
[2025-08-21 22:48:21][359156941511120][840 ms][DEBUG] END   check_internet in 531 ms
[2025-08-21 22:48:21][359156941511120][840 ms][DEBUG] START check_scloud
[2025-08-21 22:48:21][359156941511120][840 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:48:21][359156941511120][1105 ms][DEBUG] SU: done in 266 ms; outu0_a118      16385  4994 23663300 78956 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:48:21][359156941511120][1105 ms][DEBUG] targetPkg: running
[2025-08-21 22:48:21][359156941511120][1105 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 22:48:21][359156941511120][1105 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:48:21][359156941511120][1105 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQxNTExMTIwIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMEpUVkhEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1Mzc3In0='" -e "main()" -q"
[2025-08-21 22:48:21][359156941511120][1105 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:48:21][359156941511120][1105 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQxNTExMTIwIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMEpUVkhEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1Mzc3In0='" -e "main()" -q"
[2025-08-21 22:48:24][359156941511120][3714 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTU2OTQxNTExMTIwIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMEpUVkhEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1Mzc3In0="\r\n
[2025-08-21 22:48:29][359156941511120][8713 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b0fe010-5563-4c20-9616-bcebc4bbccf6","id":"QR_3b0fe010-5563-4c20-9616-bcebc4bbccf6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:48:29][359156941511120][8713 ms][DEBUG] proc_open done in 7608 ms; code=0; res.len=3152
[2025-08-21 22:48:29][359156941511120][8713 ms][DEBUG] END   runCmdUntilRes#1 in 7608 ms
[2025-08-21 22:48:29][359156941511120][8713 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:50:08][354314905623754][1 ms][INFO] === Request start ===
[2025-08-21 22:50:08][354314905623754][2 ms][DEBUG] START check_frida
[2025-08-21 22:50:08][354314905623754][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:50:08][354314905623754][259 ms][DEBUG] SU: done in 258 ms; outroot         16270     1 2295852   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:50:08][354314905623754][259 ms][DEBUG] check_frida: running
[2025-08-21 22:50:08][354314905623754][260 ms][DEBUG] END   check_frida in 258 ms
[2025-08-21 22:50:08][354314905623754][260 ms][DEBUG] START check_internet
[2025-08-21 22:50:08][354314905623754][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 22:50:09][354314905623754][603 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.884/234.884/234.884/0.000 ms\n
[2025-08-21 22:50:09][354314905623754][603 ms][DEBUG] check_internet: online
[2025-08-21 22:50:09][354314905623754][604 ms][DEBUG] END   check_internet in 344 ms
[2025-08-21 22:50:09][354314905623754][604 ms][DEBUG] START check_scloud
[2025-08-21 22:50:09][354314905623754][604 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:50:09][354314905623754][869 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23680816 79940 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:50:09][354314905623754][869 ms][DEBUG] targetPkg: running
[2025-08-21 22:50:09][354314905623754][869 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 22:50:09][354314905623754][869 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:50:09][354314905623754][869 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzE0OTA1NjIzNzU0IiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc1MEw2V1NNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODgxIn0='" -e "main()" -q"
[2025-08-21 22:50:09][354314905623754][869 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:50:09][354314905623754][869 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MzE0OTA1NjIzNzU0IiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc1MEw2V1NNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODgxIn0='" -e "main()" -q"
[2025-08-21 22:50:11][354314905623754][3555 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MzE0OTA1NjIzNzU0IiwibW9kZWwiOiJTTS1BMjQ1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFc1MEw2V1NNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2ODgxIn0="\r\n
[2025-08-21 22:50:17][354314905623754][8882 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2acc5463-3c0d-4f45-b466-4f438a25c28c","id":"QR_2acc5463-3c0d-4f45-b466-4f438a25c28c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:50:17][354314905623754][8882 ms][DEBUG] proc_open done in 8013 ms; code=0; res.len=3152
[2025-08-21 22:50:17][354314905623754][8882 ms][DEBUG] END   runCmdUntilRes#1 in 8013 ms
[2025-08-21 22:50:17][354314905623754][8882 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:58:50][356933582456978][0 ms][INFO] === Request start ===
[2025-08-21 22:58:50][356933582456978][1 ms][DEBUG] START check_frida
[2025-08-21 22:58:50][356933582456978][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:58:51][356933582456978][319 ms][DEBUG] SU: done in 318 ms; outroot         16270     1 2294840   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:58:51][356933582456978][319 ms][DEBUG] check_frida: running
[2025-08-21 22:58:51][356933582456978][319 ms][DEBUG] END   check_frida in 319 ms
[2025-08-21 22:58:51][356933582456978][320 ms][DEBUG] START check_internet
[2025-08-21 22:58:51][356933582456978][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 22:58:51][356933582456978][741 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.236/202.236/202.236/0.000 ms\n
[2025-08-21 22:58:51][356933582456978][741 ms][DEBUG] check_internet: online
[2025-08-21 22:58:51][356933582456978][741 ms][DEBUG] END   check_internet in 422 ms
[2025-08-21 22:58:51][356933582456978][741 ms][DEBUG] START check_scloud
[2025-08-21 22:58:51][356933582456978][741 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:58:51][356933582456978][1038 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23663364 79388 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:58:51][356933582456978][1038 ms][DEBUG] targetPkg: running
[2025-08-21 22:58:51][356933582456978][1038 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 22:58:51][356933582456978][1038 ms][DEBUG] rawBody.length=1160
[2025-08-21 22:58:51][356933582456978][1039 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTMzNTgyNDU2OTc4IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMjJKVllaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNPTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2Mzg3In0='" -e "main()" -q"
[2025-08-21 22:58:51][356933582456978][1039 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:58:51][356933582456978][1039 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTMzNTgyNDU2OTc4IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMjJKVllaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNPTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2Mzg3In0='" -e "main()" -q"
[2025-08-21 22:58:54][356933582456978][3709 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTMzNTgyNDU2OTc4IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMjJKVllaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNPTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2Mzg3In0="\r\n
[2025-08-21 22:58:58][356933582456978][7271 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d53123b0-7efe-44cb-b894-383522479298","id":"QR_d53123b0-7efe-44cb-b894-383522479298","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:58:58][356933582456978][7271 ms][DEBUG] proc_open done in 6232 ms; code=0; res.len=3152
[2025-08-21 22:58:58][356933582456978][7271 ms][DEBUG] END   runCmdUntilRes#1 in 6232 ms
[2025-08-21 22:58:58][356933582456978][7271 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 22:59:12][355624093387338][0 ms][INFO] === Request start ===
[2025-08-21 22:59:12][355624093387338][1 ms][DEBUG] START check_frida
[2025-08-21 22:59:12][355624093387338][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 22:59:12][355624093387338][290 ms][DEBUG] SU: done in 289 ms; outroot         16270     1 2295852   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 22:59:12][355624093387338][290 ms][DEBUG] check_frida: running
[2025-08-21 22:59:12][355624093387338][290 ms][DEBUG] END   check_frida in 289 ms
[2025-08-21 22:59:12][355624093387338][290 ms][DEBUG] START check_scloud
[2025-08-21 22:59:12][355624093387338][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 22:59:13][355624093387338][602 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23680880 78576 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 22:59:13][355624093387338][602 ms][DEBUG] targetPkg: running
[2025-08-21 22:59:13][355624093387338][602 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 22:59:13][355624093387338][602 ms][DEBUG] rawBody.length=1159
[2025-08-21 22:59:13][355624093387338][603 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NjI0MDkzMzg3MzM4IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzgwRjZKNkgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFDIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY1NzcifQ=='" -e "main()" -q"
[2025-08-21 22:59:13][355624093387338][603 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 22:59:13][355624093387338][603 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NjI0MDkzMzg3MzM4IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzgwRjZKNkgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFDIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY1NzcifQ=='" -e "main()" -q"
[2025-08-21 22:59:15][355624093387338][3211 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NjI0MDkzMzg3MzM4IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzgwRjZKNkgiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFDIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY1NzcifQ=="\r\n
[2025-08-21 22:59:21][355624093387338][9022 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_499592e2-27c3-4761-a23f-ee7dd239d2cf","id":"QR_499592e2-27c3-4761-a23f-ee7dd239d2cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 22:59:21][355624093387338][9022 ms][DEBUG] proc_open done in 8419 ms; code=0; res.len=3152
[2025-08-21 22:59:21][355624093387338][9022 ms][DEBUG] END   runCmdUntilRes#1 in 8419 ms
[2025-08-21 22:59:21][355624093387338][9022 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:00:05][358897901313384][0 ms][INFO] === Request start ===
[2025-08-21 23:00:05][358897901313384][1 ms][DEBUG] START check_frida
[2025-08-21 23:00:05][358897901313384][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:00:05][358897901313384][292 ms][DEBUG] SU: done in 291 ms; outroot         16270     1 2295852   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:00:05][358897901313384][292 ms][DEBUG] check_frida: running
[2025-08-21 23:00:05][358897901313384][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-21 23:00:05][358897901313384][292 ms][DEBUG] START check_internet
[2025-08-21 23:00:05][358897901313384][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:00:05][358897901313384][620 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.396/205.396/205.396/0.000 ms\n
[2025-08-21 23:00:05][358897901313384][620 ms][DEBUG] check_internet: online
[2025-08-21 23:00:05][358897901313384][620 ms][DEBUG] END   check_internet in 328 ms
[2025-08-21 23:00:05][358897901313384][620 ms][DEBUG] START check_scloud
[2025-08-21 23:00:05][358897901313384][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:00:06][358897901313384][917 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23680912 79160 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:00:06][358897901313384][917 ms][DEBUG] targetPkg: running
[2025-08-21 23:00:06][358897901313384][917 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 23:00:06][358897901313384][917 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:00:06][358897901313384][917 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4ODk3OTAxMzEzMzg0IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1MUZGTDNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNDM0In0='" -e "main()" -q"
[2025-08-21 23:00:06][358897901313384][917 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:00:06][358897901313384][917 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4ODk3OTAxMzEzMzg0IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1MUZGTDNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNDM0In0='" -e "main()" -q"
[2025-08-21 23:00:08][358897901313384][3525 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4ODk3OTAxMzEzMzg0IiwibW9kZWwiOiJTTS1BMTY2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k1MUZGTDNIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNDM0In0="\r\n
[2025-08-21 23:00:12][358897901313384][7571 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbc3a574-ffbb-4a74-a0c6-80137fa2674d","id":"QR_bbc3a574-ffbb-4a74-a0c6-80137fa2674d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:00:12][358897901313384][7572 ms][DEBUG] proc_open done in 6654 ms; code=0; res.len=3152
[2025-08-21 23:00:12][358897901313384][7572 ms][DEBUG] END   runCmdUntilRes#1 in 6654 ms
[2025-08-21 23:00:12][358897901313384][7572 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:02:07][350346451195005][1 ms][INFO] === Request start ===
[2025-08-21 23:02:07][350346451195005][2 ms][DEBUG] START check_frida
[2025-08-21 23:02:07][350346451195005][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:02:07][350346451195005][278 ms][DEBUG] SU: done in 277 ms; outroot         16270     1 2295852   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:02:07][350346451195005][278 ms][DEBUG] check_frida: running
[2025-08-21 23:02:07][350346451195005][279 ms][DEBUG] END   check_frida in 277 ms
[2025-08-21 23:02:07][350346451195005][279 ms][DEBUG] START check_internet
[2025-08-21 23:02:07][350346451195005][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:02:08][350346451195005][653 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.670/242.670/242.670/0.000 ms\n
[2025-08-21 23:02:08][350346451195005][653 ms][DEBUG] check_internet: online
[2025-08-21 23:02:08][350346451195005][653 ms][DEBUG] END   check_internet in 375 ms
[2025-08-21 23:02:08][350346451195005][654 ms][DEBUG] START check_scloud
[2025-08-21 23:02:08][350346451195005][654 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:02:08][350346451195005][966 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23680944 79100 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:02:08][350346451195005][966 ms][DEBUG] targetPkg: running
[2025-08-21 23:02:08][350346451195005][966 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 23:02:08][350346451195005][966 ms][DEBUG] rawBody.length=1161
[2025-08-21 23:02:08][350346451195005][966 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzQ2NDUxMTk1MDA1IiwibW9kZWwiOiJTTS1BNTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1JDMTUxMDRZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM2MCJ9'" -e "main()" -q"
[2025-08-21 23:02:08][350346451195005][966 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:02:08][350346451195005][966 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzQ2NDUxMTk1MDA1IiwibW9kZWwiOiJTTS1BNTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1JDMTUxMDRZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM2MCJ9'" -e "main()" -q"
[2025-08-21 23:02:11][350346451195005][3606 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzQ2NDUxMTk1MDA1IiwibW9kZWwiOiJTTS1BNTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1JDMTUxMDRZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUMiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTM2MCJ9"\r\n
[2025-08-21 23:02:13][350346451195005][5668 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e2ed9cf-6ce3-4049-b727-7a5ed83677bc","id":"QR_6e2ed9cf-6ce3-4049-b727-7a5ed83677bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:02:13][350346451195005][5668 ms][DEBUG] proc_open done in 4702 ms; code=0; res.len=3152
[2025-08-21 23:02:13][350346451195005][5668 ms][DEBUG] END   runCmdUntilRes#1 in 4702 ms
[2025-08-21 23:02:13][350346451195005][5668 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:07:08][355123541166642][1 ms][INFO] === Request start ===
[2025-08-21 23:07:08][355123541166642][2 ms][DEBUG] START check_frida
[2025-08-21 23:07:08][355123541166642][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:07:08][355123541166642][288 ms][DEBUG] SU: done in 286 ms; outroot         16270     1 2296864   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:07:08][355123541166642][288 ms][DEBUG] check_frida: running
[2025-08-21 23:07:08][355123541166642][288 ms][DEBUG] END   check_frida in 286 ms
[2025-08-21 23:07:08][355123541166642][288 ms][DEBUG] START check_scloud
[2025-08-21 23:07:08][355123541166642][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:07:09][355123541166642][600 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23680976 79812 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:07:09][355123541166642][600 ms][DEBUG] targetPkg: running
[2025-08-21 23:07:09][355123541166642][600 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-21 23:07:09][355123541166642][600 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:07:09][355123541166642][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTIzNTQxMTY2NjQyIiwibW9kZWwiOiJTTS1TOTExVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c2MDQ4R05XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDE3In0='" -e "main()" -q"
[2025-08-21 23:07:09][355123541166642][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:07:09][355123541166642][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTIzNTQxMTY2NjQyIiwibW9kZWwiOiJTTS1TOTExVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c2MDQ4R05XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDE3In0='" -e "main()" -q"
[2025-08-21 23:07:11][355123541166642][3240 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MTIzNTQxMTY2NjQyIiwibW9kZWwiOiJTTS1TOTExVSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c2MDQ4R05XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDE3In0="\r\n
[2025-08-21 23:07:15][355123541166642][7255 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c378cc83-2712-4adb-91a4-360379bf8e41","id":"QR_c378cc83-2712-4adb-91a4-360379bf8e41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:07:15][355123541166642][7255 ms][DEBUG] proc_open done in 6654 ms; code=0; res.len=3152
[2025-08-21 23:07:15][355123541166642][7255 ms][DEBUG] END   runCmdUntilRes#1 in 6654 ms
[2025-08-21 23:07:15][355123541166642][7255 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:09:43][359156944990669][1 ms][INFO] === Request start ===
[2025-08-21 23:09:43][359156944990669][2 ms][DEBUG] START check_frida
[2025-08-21 23:09:43][359156944990669][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:09:43][359156944990669][325 ms][DEBUG] SU: done in 323 ms; outroot         16270     1 2296864   4364 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:09:43][359156944990669][325 ms][DEBUG] check_frida: running
[2025-08-21 23:09:43][359156944990669][325 ms][DEBUG] END   check_frida in 323 ms
[2025-08-21 23:09:43][359156944990669][325 ms][DEBUG] START check_scloud
[2025-08-21 23:09:43][359156944990669][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:09:43][359156944990669][622 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23681008 79012 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:09:43][359156944990669][622 ms][DEBUG] targetPkg: running
[2025-08-21 23:09:43][359156944990669][622 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 23:09:43][359156944990669][622 ms][DEBUG] rawBody.length=1161
[2025-08-21 23:09:43][359156944990669][622 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQ0OTkwNjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMEI4NjZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQxNSJ9'" -e "main()" -q"
[2025-08-21 23:09:43][359156944990669][622 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:09:43][359156944990669][622 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQ0OTkwNjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMEI4NjZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQxNSJ9'" -e "main()" -q"
[2025-08-21 23:09:46][359156944990669][3293 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTU2OTQ0OTkwNjY5IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhBMEI4NjZLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODQxNSJ9"\r\n
[2025-08-21 23:09:48][359156944990669][5370 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73b253eb-88c2-45c3-b181-b53ea1f6a7e2","id":"QR_73b253eb-88c2-45c3-b181-b53ea1f6a7e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:09:48][359156944990669][5371 ms][DEBUG] proc_open done in 4749 ms; code=0; res.len=3152
[2025-08-21 23:09:48][359156944990669][5371 ms][DEBUG] END   runCmdUntilRes#1 in 4749 ms
[2025-08-21 23:09:48][359156944990669][5371 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:11:03][354595805976942][1 ms][INFO] === Request start ===
[2025-08-21 23:11:03][354595805976942][2 ms][DEBUG] START check_frida
[2025-08-21 23:11:03][354595805976942][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:11:03][354595805976942][308 ms][DEBUG] SU: done in 306 ms; outroot         16270     1 2295852   4420 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:11:03][354595805976942][308 ms][DEBUG] check_frida: running
[2025-08-21 23:11:03][354595805976942][308 ms][DEBUG] END   check_frida in 306 ms
[2025-08-21 23:11:03][354595805976942][308 ms][DEBUG] START check_scloud
[2025-08-21 23:11:03][354595805976942][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:11:03][354595805976942][558 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23681040 78592 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:11:03][354595805976942][558 ms][DEBUG] targetPkg: running
[2025-08-21 23:11:03][354595805976942][558 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 23:11:03][354595805976942][558 ms][DEBUG] rawBody.length=1161
[2025-08-21 23:11:03][354595805976942][558 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTk1ODA1OTc2OTQyIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMEZFUExOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NyJ9'" -e "main()" -q"
[2025-08-21 23:11:03][354595805976942][558 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:11:03][354595805976942][558 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTk1ODA1OTc2OTQyIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMEZFUExOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NyJ9'" -e "main()" -q"
[2025-08-21 23:11:06][354595805976942][3229 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTk1ODA1OTc2OTQyIiwibW9kZWwiOiJTTS1NMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMEZFUExOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODA3NyJ9"\r\n
[2025-08-21 23:11:08][357042142953018][1 ms][INFO] === Request start ===
[2025-08-21 23:11:08][354595805976942][5338 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_740d59bb-16b3-4fd7-809b-c154b3c23583","id":"QR_740d59bb-16b3-4fd7-809b-c154b3c23583","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:11:08][354595805976942][5338 ms][DEBUG] proc_open done in 4780 ms; code=0; res.len=3152
[2025-08-21 23:11:08][354595805976942][5338 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-21 23:11:08][354595805976942][5338 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:11:09][357042142953018][1010 ms][DEBUG] START check_frida
[2025-08-21 23:11:09][357042142953018][1011 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:11:09][357042142953018][1276 ms][DEBUG] SU: done in 266 ms; outroot         16270     1 2312272   4404 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:11:09][357042142953018][1276 ms][DEBUG] check_frida: running
[2025-08-21 23:11:09][357042142953018][1276 ms][DEBUG] END   check_frida in 266 ms
[2025-08-21 23:11:09][357042142953018][1276 ms][DEBUG] START check_scloud
[2025-08-21 23:11:09][357042142953018][1276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:11:09][357042142953018][1526 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23681072 78684 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:11:09][357042142953018][1526 ms][DEBUG] targetPkg: running
[2025-08-21 23:11:09][357042142953018][1526 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 23:11:09][357042142953018][1526 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:11:09][357042142953018][1526 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQyMTQyOTUzMDE4IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMzIxQjRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjA4In0='" -e "main()" -q"
[2025-08-21 23:11:09][357042142953018][1526 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:11:09][357042142953018][1526 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQyMTQyOTUzMDE4IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMzIxQjRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjA4In0='" -e "main()" -q"
[2025-08-21 23:11:12][357042142953018][4181 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MDQyMTQyOTUzMDE4IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gzMzIxQjRSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjA4In0="\r\n
[2025-08-21 23:11:15][357042142953018][7821 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09320fba-00af-4b52-90fe-31d143351ed7","id":"QR_09320fba-00af-4b52-90fe-31d143351ed7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:11:15][357042142953018][7821 ms][DEBUG] proc_open done in 6295 ms; code=0; res.len=3152
[2025-08-21 23:11:15][357042142953018][7821 ms][DEBUG] END   runCmdUntilRes#1 in 6295 ms
[2025-08-21 23:11:15][357042142953018][7821 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:11:55][350938289340900][0 ms][INFO] === Request start ===
[2025-08-21 23:11:55][350938289340900][1 ms][DEBUG] START check_frida
[2025-08-21 23:11:55][350938289340900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:11:55][350938289340900][309 ms][DEBUG] SU: done in 307 ms; outroot         16270     1 2295852   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:11:55][350938289340900][309 ms][DEBUG] check_frida: running
[2025-08-21 23:11:55][350938289340900][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-21 23:11:55][350938289340900][309 ms][DEBUG] START check_scloud
[2025-08-21 23:11:55][350938289340900][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:11:55][350938289340900][559 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23681104 78092 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:11:55][350938289340900][559 ms][DEBUG] targetPkg: running
[2025-08-21 23:11:55][350938289340900][559 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 23:11:55][350938289340900][559 ms][DEBUG] rawBody.length=1161
[2025-08-21 23:11:55][350938289340900][559 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg5MzQwOTAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFBFQjBBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAwMyJ9'" -e "main()" -q"
[2025-08-21 23:11:55][350938289340900][559 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:11:55][350938289340900][559 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTM4Mjg5MzQwOTAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFBFQjBBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAwMyJ9'" -e "main()" -q"
[2025-08-21 23:11:58][350938289340900][3214 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTM4Mjg5MzQwOTAwIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFkyMFBFQjBBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAwMyJ9"\r\n
[2025-08-21 23:12:00][350938289340900][5120 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7927428-021f-4507-ada7-f43ff1899b22","id":"QR_e7927428-021f-4507-ada7-f43ff1899b22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:12:00][350938289340900][5120 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-21 23:12:00][350938289340900][5120 ms][DEBUG] END   runCmdUntilRes#1 in 4561 ms
[2025-08-21 23:12:00][350938289340900][5120 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:12:16][355773110294785][1 ms][INFO] === Request start ===
[2025-08-21 23:12:16][355773110294785][2 ms][DEBUG] START check_frida
[2025-08-21 23:12:16][355773110294785][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:12:16][355773110294785][269 ms][DEBUG] SU: done in 267 ms; outroot         16270     1 2295852   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:12:16][355773110294785][269 ms][DEBUG] check_frida: running
[2025-08-21 23:12:16][355773110294785][269 ms][DEBUG] END   check_frida in 268 ms
[2025-08-21 23:12:16][355773110294785][269 ms][DEBUG] START check_internet
[2025-08-21 23:12:16][355773110294785][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:12:16][355773110294785][565 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=125 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 125.033/125.033/125.033/0.000 ms\n
[2025-08-21 23:12:16][355773110294785][565 ms][DEBUG] check_internet: online
[2025-08-21 23:12:16][355773110294785][565 ms][DEBUG] END   check_internet in 296 ms
[2025-08-21 23:12:16][355773110294785][565 ms][DEBUG] START check_scloud
[2025-08-21 23:12:16][355773110294785][565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:12:17][355773110294785][847 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23681136 78676 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:12:17][355773110294785][847 ms][DEBUG] targetPkg: running
[2025-08-21 23:12:17][355773110294785][847 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 23:12:17][355773110294785][847 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:12:17][355773110294785][847 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NzczMTEwMjk0Nzg1IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE43MDVHOFFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzMzIn0='" -e "main()" -q"
[2025-08-21 23:12:17][355773110294785][847 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:12:17][355773110294785][847 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NzczMTEwMjk0Nzg1IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE43MDVHOFFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzMzIn0='" -e "main()" -q"
[2025-08-21 23:12:19][355773110294785][3502 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NzczMTEwMjk0Nzg1IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE43MDVHOFFGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzMzIn0="\r\n
[2025-08-21 23:12:23][355773110294785][7033 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_554e3484-2224-400b-a4d1-fd30124ef49e","id":"QR_554e3484-2224-400b-a4d1-fd30124ef49e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:12:23][355773110294785][7033 ms][DEBUG] proc_open done in 6186 ms; code=0; res.len=3152
[2025-08-21 23:12:23][355773110294785][7033 ms][DEBUG] END   runCmdUntilRes#1 in 6186 ms
[2025-08-21 23:12:23][355773110294785][7033 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:12:32][351007060638178][0 ms][INFO] === Request start ===
[2025-08-21 23:12:32][351007060638178][1 ms][DEBUG] START check_frida
[2025-08-21 23:12:32][351007060638178][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:12:33][351007060638178][327 ms][DEBUG] SU: done in 326 ms; outroot         16270     1 2312272   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:12:33][351007060638178][327 ms][DEBUG] check_frida: running
[2025-08-21 23:12:33][351007060638178][327 ms][DEBUG] END   check_frida in 326 ms
[2025-08-21 23:12:33][351007060638178][327 ms][DEBUG] START check_internet
[2025-08-21 23:12:33][351007060638178][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:12:33][351007060638178][608 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.112/156.112/156.112/0.000 ms\n
[2025-08-21 23:12:33][351007060638178][609 ms][DEBUG] check_internet: online
[2025-08-21 23:12:33][351007060638178][609 ms][DEBUG] END   check_internet in 282 ms
[2025-08-21 23:12:33][351007060638178][609 ms][DEBUG] START check_scloud
[2025-08-21 23:12:33][351007060638178][609 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:12:33][351007060638178][858 ms][DEBUG] SU: done in 249 ms; outu0_a118      16385  4994 23681168 78324 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:12:33][351007060638178][858 ms][DEBUG] targetPkg: running
[2025-08-21 23:12:33][351007060638178][858 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 23:12:33][351007060638178][858 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:12:33][351007060638178][858 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDA3MDYwNjM4MTc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1g0MEFGUlFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MDgyIn0='" -e "main()" -q"
[2025-08-21 23:12:33][351007060638178][858 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:12:33][351007060638178][858 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDA3MDYwNjM4MTc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1g0MEFGUlFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MDgyIn0='" -e "main()" -q"
[2025-08-21 23:12:36][351007060638178][3513 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDA3MDYwNjM4MTc4IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1g0MEFGUlFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MDgyIn0="\r\n
[2025-08-21 23:12:39][351007060638178][6747 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83363e54-6a48-43d0-9c5d-69369f42b2c7","id":"QR_83363e54-6a48-43d0-9c5d-69369f42b2c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:12:39][351007060638178][6747 ms][DEBUG] proc_open done in 5889 ms; code=0; res.len=3152
[2025-08-21 23:12:39][351007060638178][6747 ms][DEBUG] END   runCmdUntilRes#1 in 5889 ms
[2025-08-21 23:12:39][351007060638178][6747 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:12:51][350025490298430][0 ms][INFO] === Request start ===
[2025-08-21 23:12:51][350025490298430][1 ms][DEBUG] START check_frida
[2025-08-21 23:12:51][350025490298430][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:12:52][350025490298430][258 ms][DEBUG] SU: done in 257 ms; outroot         16270     1 2295852   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:12:52][350025490298430][258 ms][DEBUG] check_frida: running
[2025-08-21 23:12:52][350025490298430][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-21 23:12:52][350025490298430][258 ms][DEBUG] START check_internet
[2025-08-21 23:12:52][350025490298430][259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:12:52][350025490298430][665 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.591/200.591/200.591/0.000 ms\n
[2025-08-21 23:12:52][350025490298430][665 ms][DEBUG] check_internet: online
[2025-08-21 23:12:52][350025490298430][665 ms][DEBUG] END   check_internet in 406 ms
[2025-08-21 23:12:52][350025490298430][665 ms][DEBUG] START check_scloud
[2025-08-21 23:12:52][350025490298430][665 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:12:52][350025490298430][914 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23681200 78920 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:12:52][350025490298430][914 ms][DEBUG] targetPkg: running
[2025-08-21 23:12:52][350025490298430][915 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 23:12:52][350025490298430][915 ms][DEBUG] rawBody.length=1161
[2025-08-21 23:12:52][350025490298430][915 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI1NDkwMjk4NDMwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1Mlc4QkVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIxOSJ9'" -e "main()" -q"
[2025-08-21 23:12:52][350025490298430][915 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:12:52][350025490298430][915 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDI1NDkwMjk4NDMwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1Mlc4QkVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIxOSJ9'" -e "main()" -q"
[2025-08-21 23:12:55][350025490298430][3554 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDI1NDkwMjk4NDMwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1Mlc4QkVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTIxOSJ9"\r\n
[2025-08-21 23:12:57][350025490298430][5663 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_372626bb-0405-4850-95bc-fbeb7d6ac11f","id":"QR_372626bb-0405-4850-95bc-fbeb7d6ac11f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:12:57][350025490298430][5663 ms][DEBUG] proc_open done in 4749 ms; code=0; res.len=3152
[2025-08-21 23:12:57][350025490298430][5664 ms][DEBUG] END   runCmdUntilRes#1 in 4749 ms
[2025-08-21 23:12:57][350025490298430][5664 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:13:47][350896383143572][0 ms][INFO] === Request start ===
[2025-08-21 23:13:47][350896383143572][1 ms][DEBUG] START check_frida
[2025-08-21 23:13:47][350896383143572][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:13:48][350896383143572][281 ms][DEBUG] SU: done in 280 ms; outroot         16270     1 2295852   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:13:48][350896383143572][281 ms][DEBUG] check_frida: running
[2025-08-21 23:13:48][350896383143572][281 ms][DEBUG] END   check_frida in 280 ms
[2025-08-21 23:13:48][350896383143572][281 ms][DEBUG] START check_scloud
[2025-08-21 23:13:48][350896383143572][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:13:48][350896383143572][546 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23681232 78344 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:13:48][350896383143572][546 ms][DEBUG] targetPkg: running
[2025-08-21 23:13:48][350896383143572][546 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-21 23:13:48][350896383143572][546 ms][DEBUG] rawBody.length=1161
[2025-08-21 23:13:48][350896383143572][546 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDc2NyJ9'" -e "main()" -q"
[2025-08-21 23:13:48][350896383143572][547 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:13:48][350896383143572][547 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDc2NyJ9'" -e "main()" -q"
[2025-08-21 23:13:51][350896383143572][3170 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODk2MzgzMTQzNTcyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkzMEhMNVpIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJQR1UiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDc2NyJ9"\r\n
[2025-08-21 23:13:53][350896383143572][5186 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6787bf3d-f1c9-449f-9029-08fd64213fa2","id":"QR_6787bf3d-f1c9-449f-9029-08fd64213fa2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:13:53][350896383143572][5186 ms][DEBUG] proc_open done in 4639 ms; code=0; res.len=3152
[2025-08-21 23:13:53][350896383143572][5186 ms][DEBUG] END   runCmdUntilRes#1 in 4639 ms
[2025-08-21 23:13:53][350896383143572][5186 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:14:41][350498054031960][1 ms][INFO] === Request start ===
[2025-08-21 23:14:41][350498054031960][2 ms][DEBUG] START check_frida
[2025-08-21 23:14:41][350498054031960][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:14:41][350498054031960][303 ms][DEBUG] SU: done in 301 ms; outroot         16270     1 2295852   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:14:41][350498054031960][303 ms][DEBUG] check_frida: running
[2025-08-21 23:14:41][350498054031960][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-21 23:14:41][350498054031960][304 ms][DEBUG] START check_internet
[2025-08-21 23:14:41][350498054031960][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:14:41][350498054031960][616 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.180/216.180/216.180/0.000 ms\n
[2025-08-21 23:14:41][350498054031960][616 ms][DEBUG] check_internet: online
[2025-08-21 23:14:41][350498054031960][616 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 23:14:41][350498054031960][616 ms][DEBUG] START check_scloud
[2025-08-21 23:14:41][350498054031960][616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:14:42][350498054031960][897 ms][DEBUG] SU: done in 281 ms; outu0_a118      16385  4994 23681264 79004 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:14:42][350498054031960][897 ms][DEBUG] targetPkg: running
[2025-08-21 23:14:42][350498054031960][897 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 23:14:42][350498054031960][897 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:14:42][350498054031960][897 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDU0MDMxOTYwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFRSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Mjc3In0='" -e "main()" -q"
[2025-08-21 23:14:42][350498054031960][897 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:14:42][350498054031960][897 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDU0MDMxOTYwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFRSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Mjc3In0='" -e "main()" -q"
[2025-08-21 23:14:44][350498054031960][3552 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDk4MDU0MDMxOTYwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RDMDhUTTNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVFRSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Mjc3In0="\r\n
[2025-08-21 23:14:48][350498054031960][7145 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e97258fb-e855-4517-bcfd-97ed1512106c","id":"QR_e97258fb-e855-4517-bcfd-97ed1512106c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:14:48][350498054031960][7145 ms][DEBUG] proc_open done in 6248 ms; code=0; res.len=3152
[2025-08-21 23:14:48][350498054031960][7145 ms][DEBUG] END   runCmdUntilRes#1 in 6249 ms
[2025-08-21 23:14:48][350498054031960][7145 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:15:13][353357978263140][1 ms][INFO] === Request start ===
[2025-08-21 23:15:13][353357978263140][2 ms][DEBUG] START check_frida
[2025-08-21 23:15:13][353357978263140][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:15:14][353357978263140][313 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2295852   4480 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:15:14][353357978263140][313 ms][DEBUG] check_frida: running
[2025-08-21 23:15:14][353357978263140][313 ms][DEBUG] END   check_frida in 312 ms
[2025-08-21 23:15:14][353357978263140][314 ms][DEBUG] START check_scloud
[2025-08-21 23:15:14][353357978263140][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:15:14][353357978263140][610 ms][DEBUG] SU: done in 296 ms; outu0_a118      16385  4994 23681296 78680 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:15:14][353357978263140][610 ms][DEBUG] targetPkg: running
[2025-08-21 23:15:14][353357978263140][610 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 23:15:14][353357978263140][610 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:15:14][353357978263140][610 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTc4MjYzMTQwIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMEY4UldUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMTA3In0='" -e "main()" -q"
[2025-08-21 23:15:14][353357978263140][610 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:15:14][353357978263140][610 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTc4MjYzMTQwIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMEY4UldUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMTA3In0='" -e "main()" -q"
[2025-08-21 23:15:17][353357978263140][3266 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzU3OTc4MjYzMTQwIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkxMEY4UldUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMTA3In0="\r\n
[2025-08-21 23:15:20][353357978263140][6171 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c94399b2-6bbd-4c4a-a229-ae25ac19c3c0","id":"QR_c94399b2-6bbd-4c4a-a229-ae25ac19c3c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:15:20][353357978263140][6172 ms][DEBUG] proc_open done in 5562 ms; code=0; res.len=3152
[2025-08-21 23:15:20][353357978263140][6172 ms][DEBUG] END   runCmdUntilRes#1 in 5562 ms
[2025-08-21 23:15:20][353357978263140][6172 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:15:35][353548751584278][0 ms][INFO] === Request start ===
[2025-08-21 23:15:35][353548751584278][1 ms][DEBUG] START check_frida
[2025-08-21 23:15:35][353548751584278][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:15:35][353548751584278][305 ms][DEBUG] SU: done in 304 ms; outroot         16270     1 2295852   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:15:35][353548751584278][305 ms][DEBUG] check_frida: running
[2025-08-21 23:15:35][353548751584278][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-21 23:15:35][353548751584278][305 ms][DEBUG] START check_scloud
[2025-08-21 23:15:35][353548751584278][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:15:35][353548751584278][571 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23681328 79256 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:15:35][353548751584278][571 ms][DEBUG] targetPkg: running
[2025-08-21 23:15:35][353548751584278][571 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-21 23:15:35][353548751584278][571 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:15:35][353548751584278][571 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTQ4NzUxNTg0Mjc4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MENOUzNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NTgzIn0='" -e "main()" -q"
[2025-08-21 23:15:35][353548751584278][571 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:15:35][353548751584278][571 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTQ4NzUxNTg0Mjc4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MENOUzNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NTgzIn0='" -e "main()" -q"
[2025-08-21 23:15:38][353548751584278][3242 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNTQ4NzUxNTg0Mjc4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MENOUzNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NTgzIn0="\r\n
[2025-08-21 23:15:42][353548751584278][7631 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41ed4747-dea4-478e-a703-a7f782a97a5e","id":"QR_41ed4747-dea4-478e-a703-a7f782a97a5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:15:42][353548751584278][7631 ms][DEBUG] proc_open done in 7060 ms; code=0; res.len=3152
[2025-08-21 23:15:42][353548751584278][7631 ms][DEBUG] END   runCmdUntilRes#1 in 7060 ms
[2025-08-21 23:15:42][353548751584278][7631 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:16:29][350181272176342][0 ms][INFO] === Request start ===
[2025-08-21 23:16:29][350181272176342][1 ms][DEBUG] START check_frida
[2025-08-21 23:16:29][350181272176342][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:16:30][350181272176342][274 ms][DEBUG] SU: done in 273 ms; outroot         16270     1 2295852   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:16:30][350181272176342][274 ms][DEBUG] check_frida: running
[2025-08-21 23:16:30][350181272176342][274 ms][DEBUG] END   check_frida in 273 ms
[2025-08-21 23:16:30][350181272176342][274 ms][DEBUG] START check_internet
[2025-08-21 23:16:30][350181272176342][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:16:30][350181272176342][586 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.385/202.385/202.385/0.000 ms\n
[2025-08-21 23:16:30][350181272176342][587 ms][DEBUG] check_internet: online
[2025-08-21 23:16:30][350181272176342][587 ms][DEBUG] END   check_internet in 312 ms
[2025-08-21 23:16:30][350181272176342][587 ms][DEBUG] START check_scloud
[2025-08-21 23:16:30][350181272176342][587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:16:30][350181272176342][836 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23681360 78596 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:16:30][350181272176342][836 ms][DEBUG] targetPkg: running
[2025-08-21 23:16:30][350181272176342][837 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 23:16:30][350181272176342][837 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:16:30][350181272176342][837 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTgxMjcyMTc2MzQyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MFpMTkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzQ4In0='" -e "main()" -q"
[2025-08-21 23:16:30][350181272176342][837 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:16:30][350181272176342][837 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTgxMjcyMTc2MzQyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MFpMTkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzQ4In0='" -e "main()" -q"
[2025-08-21 23:16:33][350181272176342][3508 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTgxMjcyMTc2MzQyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MFpMTkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzQ4In0="\r\n
[2025-08-21 23:16:36][350181272176342][6913 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9fc90f5-c5fd-4c06-a81c-1d2d868629a8","id":"QR_a9fc90f5-c5fd-4c06-a81c-1d2d868629a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:16:36][350181272176342][6913 ms][DEBUG] proc_open done in 6077 ms; code=0; res.len=3152
[2025-08-21 23:16:36][350181272176342][6913 ms][DEBUG] END   runCmdUntilRes#1 in 6077 ms
[2025-08-21 23:16:36][350181272176342][6913 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:19:05][351771920789279][1 ms][INFO] === Request start ===
[2025-08-21 23:19:05][351771920789279][2 ms][DEBUG] START check_frida
[2025-08-21 23:19:05][351771920789279][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:19:05][351771920789279][264 ms][DEBUG] SU: done in 263 ms; outroot         16270     1 2295852   4480 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:19:05][351771920789279][265 ms][DEBUG] check_frida: running
[2025-08-21 23:19:05][351771920789279][265 ms][DEBUG] END   check_frida in 263 ms
[2025-08-21 23:19:05][351771920789279][265 ms][DEBUG] START check_scloud
[2025-08-21 23:19:05][351771920789279][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:19:05][351771920789279][513 ms][DEBUG] SU: done in 248 ms; outu0_a118      16385  4994 23681392 79420 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:19:05][351771920789279][513 ms][DEBUG] targetPkg: running
[2025-08-21 23:19:05][351771920789279][513 ms][DEBUG] END   check_scloud in 248 ms
[2025-08-21 23:19:05][351771920789279][513 ms][DEBUG] rawBody.length=1161
[2025-08-21 23:19:05][351771920789279][513 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTIwNzg5Mjc5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MkMzQ0RSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQVUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU4MCJ9'" -e "main()" -q"
[2025-08-21 23:19:05][351771920789279][513 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:19:05][351771920789279][514 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTIwNzg5Mjc5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MkMzQ0RSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQVUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU4MCJ9'" -e "main()" -q"
[2025-08-21 23:19:08][351771920789279][3168 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzcxOTIwNzg5Mjc5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MkMzQ0RSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJDQVUiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDU4MCJ9"\r\n
[2025-08-21 23:19:10][351771920789279][5246 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1873674c-57bc-425d-a76d-acf07eebdcc9","id":"QR_1873674c-57bc-425d-a76d-acf07eebdcc9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:19:10][351771920789279][5246 ms][DEBUG] proc_open done in 4733 ms; code=0; res.len=3152
[2025-08-21 23:19:10][351771920789279][5246 ms][DEBUG] END   runCmdUntilRes#1 in 4733 ms
[2025-08-21 23:19:10][351771920789279][5246 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:22:09][350417371014996][1 ms][INFO] === Request start ===
[2025-08-21 23:22:09][350417371014996][2 ms][DEBUG] START check_frida
[2025-08-21 23:22:09][350417371014996][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:22:09][350417371014996][300 ms][DEBUG] SU: done in 298 ms; outroot         16270     1 2295852   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:22:09][350417371014996][300 ms][DEBUG] check_frida: running
[2025-08-21 23:22:09][350417371014996][300 ms][DEBUG] END   check_frida in 298 ms
[2025-08-21 23:22:09][350417371014996][300 ms][DEBUG] START check_internet
[2025-08-21 23:22:09][350417371014996][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:22:10][350417371014996][800 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.267/202.267/202.267/0.000 ms\n
[2025-08-21 23:22:10][350417371014996][800 ms][DEBUG] check_internet: online
[2025-08-21 23:22:10][350417371014996][800 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 23:22:10][350417371014996][800 ms][DEBUG] START check_scloud
[2025-08-21 23:22:10][350417371014996][800 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:22:10][350417371014996][1034 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23681424 78924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:22:10][350417371014996][1034 ms][DEBUG] targetPkg: running
[2025-08-21 23:22:10][350417371014996][1034 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 23:22:10][350417371014996][1034 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:22:10][350417371014996][1034 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDE3MzcxMDE0OTk2IiwibW9kZWwiOiJTTS1HOTk2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05DMEFBVDNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzIxIn0='" -e "main()" -q"
[2025-08-21 23:22:10][350417371014996][1034 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:22:10][350417371014996][1034 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDE3MzcxMDE0OTk2IiwibW9kZWwiOiJTTS1HOTk2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05DMEFBVDNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzIxIn0='" -e "main()" -q"
[2025-08-21 23:22:13][350417371014996][3674 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDE3MzcxMDE0OTk2IiwibW9kZWwiOiJTTS1HOTk2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ05DMEFBVDNEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMzIxIn0="\r\n
[2025-08-21 23:22:16][350417371014996][7235 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_226e0bf1-3403-4123-bdaf-cacc3e9c9b6d","id":"QR_226e0bf1-3403-4123-bdaf-cacc3e9c9b6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:22:16][350417371014996][7236 ms][DEBUG] proc_open done in 6202 ms; code=0; res.len=3152
[2025-08-21 23:22:16][350417371014996][7236 ms][DEBUG] END   runCmdUntilRes#1 in 6202 ms
[2025-08-21 23:22:16][350417371014996][7236 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:26:08][354261830536199][1 ms][INFO] === Request start ===
[2025-08-21 23:26:08][354261830536199][2 ms][DEBUG] START check_frida
[2025-08-21 23:26:08][354261830536199][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:26:08][354261830536199][303 ms][DEBUG] SU: done in 301 ms; outroot         16270     1 2295852   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:26:08][354261830536199][303 ms][DEBUG] check_frida: running
[2025-08-21 23:26:08][354261830536199][303 ms][DEBUG] END   check_frida in 301 ms
[2025-08-21 23:26:08][354261830536199][303 ms][DEBUG] START check_internet
[2025-08-21 23:26:08][354261830536199][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:26:09][354261830536199][818 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.750/201.750/201.750/0.000 ms\n
[2025-08-21 23:26:09][354261830536199][818 ms][DEBUG] check_internet: online
[2025-08-21 23:26:09][354261830536199][818 ms][DEBUG] END   check_internet in 515 ms
[2025-08-21 23:26:09][354261830536199][818 ms][DEBUG] START check_scloud
[2025-08-21 23:26:09][354261830536199][818 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:26:09][354261830536199][1053 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23681456 79476 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:26:09][354261830536199][1053 ms][DEBUG] targetPkg: running
[2025-08-21 23:26:09][354261830536199][1053 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-21 23:26:09][354261830536199][1053 ms][DEBUG] rawBody.length=1161
[2025-08-21 23:26:09][354261830536199][1053 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjYxODMwNTM2MTk5IiwibW9kZWwiOiJTTS1TMTY2VkwiLCJwcm9maWxlX0lEIjoiNjg3OTcwZjNkNmNmODU1ZjlkZDM5M2JmIiwiZ3JvdXAiOiIzOTY4ZTkyMS04MjBlLTRjYTEtYTU3OS0yOWU1OTk4ZWU3YTUiLCJ0eXBlIjoiS01FIiwicmVnIjoidXMiLCJkZXZpY2VTZXJpYWxOdW1iZXIiOiJSWkNZMTBRMktaTCIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InN1cEBndXAuMzNtYWlsLmNvbSIsImNhcnJpZXIiOiJURk4iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc2OCJ9'" -e "main()" -q"
[2025-08-21 23:26:09][354261830536199][1054 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:26:09][354261830536199][1054 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjYxODMwNTM2MTk5IiwibW9kZWwiOiJTTS1TMTY2VkwiLCJwcm9maWxlX0lEIjoiNjg3OTcwZjNkNmNmODU1ZjlkZDM5M2JmIiwiZ3JvdXAiOiIzOTY4ZTkyMS04MjBlLTRjYTEtYTU3OS0yOWU1OTk4ZWU3YTUiLCJ0eXBlIjoiS01FIiwicmVnIjoidXMiLCJkZXZpY2VTZXJpYWxOdW1iZXIiOiJSWkNZMTBRMktaTCIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InN1cEBndXAuMzNtYWlsLmNvbSIsImNhcnJpZXIiOiJURk4iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc2OCJ9'" -e "main()" -q"
[2025-08-21 23:26:12][354261830536199][3740 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjYxODMwNTM2MTk5IiwibW9kZWwiOiJTTS1TMTY2VkwiLCJwcm9maWxlX0lEIjoiNjg3OTcwZjNkNmNmODU1ZjlkZDM5M2JmIiwiZ3JvdXAiOiIzOTY4ZTkyMS04MjBlLTRjYTEtYTU3OS0yOWU1OTk4ZWU3YTUiLCJ0eXBlIjoiS01FIiwicmVnIjoidXMiLCJkZXZpY2VTZXJpYWxOdW1iZXIiOiJSWkNZMTBRMktaTCIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InN1cEBndXAuMzNtYWlsLmNvbSIsImNhcnJpZXIiOiJURk4iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzc2OCJ9"\r\n
[2025-08-21 23:26:14][354261830536199][6645 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca2ce47f-8a22-4617-b9b0-5fcdf7f27e15","id":"QR_ca2ce47f-8a22-4617-b9b0-5fcdf7f27e15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:26:14][354261830536199][6645 ms][DEBUG] proc_open done in 5592 ms; code=0; res.len=3152
[2025-08-21 23:26:14][354261830536199][6645 ms][DEBUG] END   runCmdUntilRes#1 in 5592 ms
[2025-08-21 23:26:14][354261830536199][6645 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:38:37][350608753149448][1 ms][INFO] === Request start ===
[2025-08-21 23:38:37][350608753149448][2 ms][DEBUG] START check_frida
[2025-08-21 23:38:37][350608753149448][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:38:37][350608753149448][286 ms][DEBUG] SU: done in 285 ms; outroot         16270     1 2294840   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:38:37][350608753149448][287 ms][DEBUG] check_frida: running
[2025-08-21 23:38:37][350608753149448][287 ms][DEBUG] END   check_frida in 285 ms
[2025-08-21 23:38:37][350608753149448][287 ms][DEBUG] START check_internet
[2025-08-21 23:38:37][350608753149448][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:38:37][350608753149448][786 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.305/200.305/200.305/0.000 ms\n
[2025-08-21 23:38:37][350608753149448][786 ms][DEBUG] check_internet: online
[2025-08-21 23:38:37][350608753149448][787 ms][DEBUG] END   check_internet in 500 ms
[2025-08-21 23:38:37][350608753149448][787 ms][DEBUG] START check_scloud
[2025-08-21 23:38:37][350608753149448][787 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:38:38][350608753149448][1036 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23664004 79176 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:38:38][350608753149448][1036 ms][DEBUG] targetPkg: running
[2025-08-21 23:38:38][350608753149448][1036 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 23:38:38][350608753149448][1037 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:38:38][350608753149448][1037 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjA4NzUzMTQ5NDQ4IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFIxMjZKWjBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyODU0In0='" -e "main()" -q"
[2025-08-21 23:38:38][350608753149448][1037 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:38:38][350608753149448][1037 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjA4NzUzMTQ5NDQ4IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFIxMjZKWjBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyODU0In0='" -e "main()" -q"
[2025-08-21 23:38:40][350608753149448][3629 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjA4NzUzMTQ5NDQ4IiwibW9kZWwiOiJTTS1BNTE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFIxMjZKWjBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyODU0In0="\r\n
[2025-08-21 23:38:46][350608753149448][9269 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb1a649b-dc99-4265-95be-a13adf806da8","id":"QR_bb1a649b-dc99-4265-95be-a13adf806da8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:38:46][350608753149448][9269 ms][DEBUG] proc_open done in 8232 ms; code=0; res.len=3152
[2025-08-21 23:38:46][350608753149448][9269 ms][DEBUG] END   runCmdUntilRes#1 in 8233 ms
[2025-08-21 23:38:46][350608753149448][9270 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:39:05][352838650059253][0 ms][INFO] === Request start ===
[2025-08-21 23:39:05][352838650059253][1 ms][DEBUG] START check_frida
[2025-08-21 23:39:05][352838650059253][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:39:06][352838650059253][311 ms][DEBUG] SU: done in 310 ms; outroot         16270     1 2295852   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:39:06][352838650059253][311 ms][DEBUG] check_frida: running
[2025-08-21 23:39:06][352838650059253][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-21 23:39:06][352838650059253][311 ms][DEBUG] START check_scloud
[2025-08-21 23:39:06][352838650059253][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:39:06][352838650059253][545 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23681520 79752 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:39:06][352838650059253][545 ms][DEBUG] targetPkg: running
[2025-08-21 23:39:06][352838650059253][545 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-21 23:39:06][352838650059253][545 ms][DEBUG] rawBody.length=1161
[2025-08-21 23:39:06][352838650059253][545 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODM4NjUwMDU5MjUzIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MUo4RlJGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQwNyJ9'" -e "main()" -q"
[2025-08-21 23:39:06][352838650059253][545 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:39:06][352838650059253][545 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODM4NjUwMDU5MjUzIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MUo4RlJGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQwNyJ9'" -e "main()" -q"
[2025-08-21 23:39:08][352838650059253][3200 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyODM4NjUwMDU5MjUzIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c4MUo4RlJGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTQwNyJ9"\r\n
[2025-08-21 23:39:11][352838650059253][5403 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba7cd1b6-115d-4f9e-bed8-3f81c28bb196","id":"QR_ba7cd1b6-115d-4f9e-bed8-3f81c28bb196","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:39:11][352838650059253][5404 ms][DEBUG] proc_open done in 4858 ms; code=0; res.len=3152
[2025-08-21 23:39:11][352838650059253][5404 ms][DEBUG] END   runCmdUntilRes#1 in 4859 ms
[2025-08-21 23:39:11][352838650059253][5404 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:40:08][357299881706714][0 ms][INFO] === Request start ===
[2025-08-21 23:40:08][357299881706714][1 ms][DEBUG] START check_frida
[2025-08-21 23:40:08][357299881706714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:40:09][357299881706714][312 ms][DEBUG] SU: done in 311 ms; outroot         16270     1 2295852   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:40:09][357299881706714][312 ms][DEBUG] check_frida: running
[2025-08-21 23:40:09][357299881706714][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-21 23:40:09][357299881706714][312 ms][DEBUG] START check_internet
[2025-08-21 23:40:09][357299881706714][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:40:09][357299881706714][747 ms][DEBUG] SU: done in 435 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=319 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 319.679/319.679/319.679/0.000 ms\n
[2025-08-21 23:40:09][357299881706714][747 ms][DEBUG] check_internet: online
[2025-08-21 23:40:09][357299881706714][747 ms][DEBUG] END   check_internet in 435 ms
[2025-08-21 23:40:09][357299881706714][748 ms][DEBUG] START check_scloud
[2025-08-21 23:40:09][357299881706714][748 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:40:09][357299881706714][1028 ms][DEBUG] SU: done in 280 ms; outu0_a118      16385  4994 23681552 79116 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:40:09][357299881706714][1028 ms][DEBUG] targetPkg: running
[2025-08-21 23:40:09][357299881706714][1028 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-21 23:40:09][357299881706714][1028 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:40:09][357299881706714][1028 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Mjk5ODgxNzA2NzE0IiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RCMUxFQjhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDYwIn0='" -e "main()" -q"
[2025-08-21 23:40:09][357299881706714][1028 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:40:09][357299881706714][1028 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3Mjk5ODgxNzA2NzE0IiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RCMUxFQjhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDYwIn0='" -e "main()" -q"
[2025-08-21 23:40:12][357299881706714][3668 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3Mjk5ODgxNzA2NzE0IiwibW9kZWwiOiJTTS1BMTM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RCMUxFQjhWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDYwIn0="\r\n
[2025-08-21 23:40:15][357299881706714][7136 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21183570-21a1-4daf-a231-d28e51781d4a","id":"QR_21183570-21a1-4daf-a231-d28e51781d4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:40:15][357299881706714][7137 ms][DEBUG] proc_open done in 6108 ms; code=0; res.len=3152
[2025-08-21 23:40:15][357299881706714][7137 ms][DEBUG] END   runCmdUntilRes#1 in 6109 ms
[2025-08-21 23:40:15][357299881706714][7137 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:41:42][351007067289082][1 ms][INFO] === Request start ===
[2025-08-21 23:41:42][351007067289082][2 ms][DEBUG] START check_frida
[2025-08-21 23:41:42][351007067289082][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:41:42][351007067289082][295 ms][DEBUG] SU: done in 293 ms; outroot         16270     1 2295852   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:41:42][351007067289082][295 ms][DEBUG] check_frida: running
[2025-08-21 23:41:42][351007067289082][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-21 23:41:42][351007067289082][295 ms][DEBUG] START check_scloud
[2025-08-21 23:41:42][351007067289082][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:41:43][351007067289082][608 ms][DEBUG] SU: done in 313 ms; outu0_a118      16385  4994 23681584 79668 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:41:43][351007067289082][608 ms][DEBUG] targetPkg: running
[2025-08-21 23:41:43][351007067289082][608 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-21 23:41:43][351007067289082][608 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:41:43][351007067289082][608 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDA3MDY3Mjg5MDgyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1hCMDlEREFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjA0In0='" -e "main()" -q"
[2025-08-21 23:41:43][351007067289082][608 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:41:43][351007067289082][609 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDA3MDY3Mjg5MDgyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1hCMDlEREFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjA0In0='" -e "main()" -q"
[2025-08-21 23:41:45][351007067289082][3248 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDA3MDY3Mjg5MDgyIiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1hCMDlEREFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NjA0In0="\r\n
[2025-08-21 23:41:50][351007067289082][7887 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de9a90d1-e81b-41ea-bc37-507836bf697a","id":"QR_de9a90d1-e81b-41ea-bc37-507836bf697a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:41:50][351007067289082][7887 ms][DEBUG] proc_open done in 7279 ms; code=0; res.len=3152
[2025-08-21 23:41:50][351007067289082][7887 ms][DEBUG] END   runCmdUntilRes#1 in 7279 ms
[2025-08-21 23:41:50][351007067289082][7887 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:54:09][356338111507939][1 ms][INFO] === Request start ===
[2025-08-21 23:54:09][356338111507939][1 ms][DEBUG] START check_frida
[2025-08-21 23:54:09][356338111507939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:54:09][356338111507939][307 ms][DEBUG] SU: done in 305 ms; outroot         16270     1 2294840   4384 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:54:09][356338111507939][307 ms][DEBUG] check_frida: running
[2025-08-21 23:54:09][356338111507939][307 ms][DEBUG] END   check_frida in 305 ms
[2025-08-21 23:54:09][356338111507939][307 ms][DEBUG] START check_internet
[2025-08-21 23:54:09][356338111507939][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-21 23:54:10][356338111507939][1322 ms][DEBUG] SU: done in 1015 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=715 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 715.052/715.052/715.052/0.000 ms\n
[2025-08-21 23:54:10][356338111507939][1322 ms][DEBUG] check_internet: online
[2025-08-21 23:54:10][356338111507939][1322 ms][DEBUG] END   check_internet in 1015 ms
[2025-08-21 23:54:10][356338111507939][1322 ms][DEBUG] START check_scloud
[2025-08-21 23:54:10][356338111507939][1322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:54:11][356338111507939][1619 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23664132 78956 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:54:11][356338111507939][1619 ms][DEBUG] targetPkg: running
[2025-08-21 23:54:11][356338111507939][1619 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-21 23:54:11][356338111507939][1619 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:54:11][356338111507939][1620 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzM4MTExNTA3OTM5IiwibW9kZWwiOiJTTS1BNTE2ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I0MTJKUVZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjE0In0='" -e "main()" -q"
[2025-08-21 23:54:11][356338111507939][1620 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:54:11][356338111507939][1620 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MzM4MTExNTA3OTM5IiwibW9kZWwiOiJTTS1BNTE2ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I0MTJKUVZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjE0In0='" -e "main()" -q"
[2025-08-21 23:54:13][356338111507939][4337 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MzM4MTExNTA3OTM5IiwibW9kZWwiOiJTTS1BNTE2ViIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1I0MTJKUVZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlZaVyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMjE0In0="\r\n
[2025-08-21 23:54:17][356338111507939][8071 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8bdc52ab-571f-49b0-8512-7f296d551b07","id":"QR_8bdc52ab-571f-49b0-8512-7f296d551b07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:54:17][356338111507939][8071 ms][DEBUG] proc_open done in 6451 ms; code=0; res.len=3152
[2025-08-21 23:54:17][356338111507939][8071 ms][DEBUG] END   runCmdUntilRes#1 in 6451 ms
[2025-08-21 23:54:17][356338111507939][8071 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-21 23:57:07][354432550357013][1 ms][INFO] === Request start ===
[2025-08-21 23:57:07][354432550357013][2 ms][DEBUG] START check_frida
[2025-08-21 23:57:07][354432550357013][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-21 23:57:07][354432550357013][314 ms][DEBUG] SU: done in 312 ms; outroot         16270     1 2295852   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-21 23:57:07][354432550357013][314 ms][DEBUG] check_frida: running
[2025-08-21 23:57:07][354432550357013][314 ms][DEBUG] END   check_frida in 313 ms
[2025-08-21 23:57:07][354432550357013][314 ms][DEBUG] START check_scloud
[2025-08-21 23:57:07][354432550357013][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-21 23:57:07][354432550357013][565 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23681648 78696 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-21 23:57:07][354432550357013][565 ms][DEBUG] targetPkg: running
[2025-08-21 23:57:07][354432550357013][565 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-21 23:57:07][354432550357013][565 ms][DEBUG] rawBody.length=1160
[2025-08-21 23:57:07][354432550357013][565 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDMyNTUwMzU3MDEzIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNEhHREROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzUzIn0='" -e "main()" -q"
[2025-08-21 23:57:07][354432550357013][565 ms][DEBUG] START runCmdUntilRes#1
[2025-08-21 23:57:07][354432550357013][565 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDMyNTUwMzU3MDEzIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNEhHREROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzUzIn0='" -e "main()" -q"
[2025-08-21 23:57:10][354432550357013][3236 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDMyNTUwMzU3MDEzIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNEhHREROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUUCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzUzIn0="\r\n
[2025-08-21 23:57:13][354432550357013][6766 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c75a13ae-38cb-4534-af28-cdc99e9fb559","id":"QR_c75a13ae-38cb-4534-af28-cdc99e9fb559","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-21 23:57:13][354432550357013][6767 ms][DEBUG] proc_open done in 6202 ms; code=0; res.len=3152
[2025-08-21 23:57:13][354432550357013][6767 ms][DEBUG] END   runCmdUntilRes#1 in 6202 ms
[2025-08-21 23:57:13][354432550357013][6767 ms][INFO] SUCCESS response from frida (len=3152)