[2025-08-22 00:00:10][357962505933713][1 ms][INFO] === Request start ===
[2025-08-22 00:00:10][357962505933713][2 ms][DEBUG] START check_frida
[2025-08-22 00:00:10][357962505933713][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-22 00:00:10][357962505933713][304 ms][DEBUG] SU: done in 301 ms; outroot         16270     1 2295852   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-22 00:00:10][357962505933713][304 ms][DEBUG] check_frida: running
[2025-08-22 00:00:10][357962505933713][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-22 00:00:10][357962505933713][305 ms][DEBUG] START check_internet
[2025-08-22 00:00:10][357962505933713][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-22 00:00:11][357962505933713][787 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.204/202.204/202.204/0.000 ms\n
[2025-08-22 00:00:11][357962505933713][787 ms][DEBUG] check_internet: online
[2025-08-22 00:00:11][357962505933713][788 ms][DEBUG] END   check_internet in 483 ms
[2025-08-22 00:00:11][357962505933713][788 ms][DEBUG] START check_scloud
[2025-08-22 00:00:11][357962505933713][788 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] SU: done in 265 ms; outu0_a118      16385  4994 23681680 79248 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] targetPkg: running
[2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] rawBody.length=1161
[2025-08-22 00:00:11][357962505933713][1053 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA1OTMzNzEzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDlTRlFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NSJ9'" -e "main()" -q"
[2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] START runCmdUntilRes#1
[2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA1OTMzNzEzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDlTRlFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NSJ9'" -e "main()" -q"
[2025-08-22 00:00:14][357962505933713][3724 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTYyNTA1OTMzNzEzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDlTRlFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NSJ9"\r\n
[2025-08-22 00:00:16][357962505933713][5786 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f757060c-6949-4829-8fb0-5da93dc27ad2","id":"QR_f757060c-6949-4829-8fb0-5da93dc27ad2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-22 00:00:16][357962505933713][5786 ms][DEBUG] proc_open done in 4733 ms; code=0; res.len=3152
[2025-08-22 00:00:16][357962505933713][5786 ms][DEBUG] END   runCmdUntilRes#1 in 4733 ms
[2025-08-22 00:00:16][357962505933713][5786 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-22 00:03:07][351652533532134][1 ms][INFO] === Request start ===
[2025-08-22 00:03:07][351652533532134][2 ms][DEBUG] START check_frida
[2025-08-22 00:03:07][351652533532134][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-22 00:03:07][351652533532134][312 ms][DEBUG] SU: done in 310 ms; outroot         16270     1 2294840   4416 poll_schedule_timeout 0 S frida-server\n
[2025-08-22 00:03:07][351652533532134][312 ms][DEBUG] check_frida: running
[2025-08-22 00:03:07][351652533532134][312 ms][DEBUG] END   check_frida in 310 ms
[2025-08-22 00:03:07][351652533532134][312 ms][DEBUG] START check_scloud
[2025-08-22 00:03:07][351652533532134][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-22 00:03:08][351652533532134][624 ms][DEBUG] SU: done in 312 ms; outu0_a118      16385  4994 23681712 78348 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-22 00:03:08][351652533532134][624 ms][DEBUG] targetPkg: running
[2025-08-22 00:03:08][351652533532134][624 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-22 00:03:08][351652533532134][624 ms][DEBUG] rawBody.length=1160
[2025-08-22 00:03:08][351652533532134][624 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjUyNTMzNTMyMTM0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMzFLQ0hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjEyIn0='" -e "main()" -q"
[2025-08-22 00:03:08][351652533532134][625 ms][DEBUG] START runCmdUntilRes#1
[2025-08-22 00:03:08][351652533532134][625 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjUyNTMzNTMyMTM0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMzFLQ0hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjEyIn0='" -e "main()" -q"
[2025-08-22 00:03:10][351652533532134][3217 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjUyNTMzNTMyMTM0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMzFLQ0hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjEyIn0="\r\n
[2025-08-22 00:03:15][351652533532134][7685 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38696e3a-25b3-47f4-9a1b-11c33801b958","id":"QR_38696e3a-25b3-47f4-9a1b-11c33801b958","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-22 00:03:15][351652533532134][7685 ms][DEBUG] proc_open done in 7060 ms; code=0; res.len=3152
[2025-08-22 00:03:15][351652533532134][7685 ms][DEBUG] END   runCmdUntilRes#1 in 7060 ms
[2025-08-22 00:03:15][351652533532134][7685 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-22 00:04:10][352247503078058][0 ms][INFO] === Request start ===
[2025-08-22 00:04:10][352247503078058][1 ms][DEBUG] START check_frida
[2025-08-22 00:04:10][352247503078058][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-22 00:04:10][352247503078058][329 ms][DEBUG] SU: done in 328 ms; outroot         16270     1 2295852   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-22 00:04:10][352247503078058][329 ms][DEBUG] check_frida: running
[2025-08-22 00:04:10][352247503078058][329 ms][DEBUG] END   check_frida in 328 ms
[2025-08-22 00:04:10][352247503078058][329 ms][DEBUG] START check_internet
[2025-08-22 00:04:10][352247503078058][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-22 00:04:10][352247503078058][892 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.045/203.045/203.045/0.000 ms\n
[2025-08-22 00:04:10][352247503078058][892 ms][DEBUG] check_internet: online
[2025-08-22 00:04:10][352247503078058][892 ms][DEBUG] END   check_internet in 562 ms
[2025-08-22 00:04:10][352247503078058][892 ms][DEBUG] START check_scloud
[2025-08-22 00:04:10][352247503078058][892 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] SU: done in 250 ms; outu0_a118      16385  4994 23681744 78904 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] targetPkg: running
[2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] rawBody.length=1161
[2025-08-22 00:04:11][352247503078058][1142 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjQ3NTAzMDc4MDU4IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dDMUUwVkhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjcxMiJ9'" -e "main()" -q"
[2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] START runCmdUntilRes#1
[2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjQ3NTAzMDc4MDU4IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dDMUUwVkhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjcxMiJ9'" -e "main()" -q"
[2025-08-22 00:04:13][352247503078058][3781 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjQ3NTAzMDc4MDU4IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dDMUUwVkhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjcxMiJ9"\r\n
[2025-08-22 00:04:16][352247503078058][6109 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3bf39c3-c17b-4ae1-8a85-e1f2e4e3153f","id":"QR_c3bf39c3-c17b-4ae1-8a85-e1f2e4e3153f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-22 00:04:16][352247503078058][6109 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152
[2025-08-22 00:04:16][352247503078058][6109 ms][DEBUG] END   runCmdUntilRes#1 in 4967 ms
[2025-08-22 00:04:16][352247503078058][6109 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-22 00:07:07][355195460736902][1 ms][INFO] === Request start ===
[2025-08-22 00:07:07][355195460736902][2 ms][DEBUG] START check_frida
[2025-08-22 00:07:07][355195460736902][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-22 00:07:08][355195460736902][301 ms][DEBUG] SU: done in 300 ms; outroot         16270     1 2295852   4412 poll_schedule_timeout 0 S frida-server\n
[2025-08-22 00:07:08][355195460736902][301 ms][DEBUG] check_frida: running
[2025-08-22 00:07:08][355195460736902][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-22 00:07:08][355195460736902][301 ms][DEBUG] START check_scloud
[2025-08-22 00:07:08][355195460736902][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] SU: done in 297 ms; outu0_a118      16385  4994 23681776 78540 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] targetPkg: running
[2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] END   check_scloud in 298 ms
[2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] rawBody.length=1160
[2025-08-22 00:07:08][355195460736902][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTk1NDYwNzM2OTAyIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxME1KUVJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzY1In0='" -e "main()" -q"
[2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTk1NDYwNzM2OTAyIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxME1KUVJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzY1In0='" -e "main()" -q"
[2025-08-22 00:07:10][355195460736902][3255 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MTk1NDYwNzM2OTAyIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxME1KUVJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzY1In0="\r\n
[2025-08-22 00:07:15][355195460736902][7566 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f26afc6-35e1-4d98-b298-1e5bd23d55d9","id":"QR_7f26afc6-35e1-4d98-b298-1e5bd23d55d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-22 00:07:15][355195460736902][7567 ms][DEBUG] proc_open done in 6967 ms; code=0; res.len=3152
[2025-08-22 00:07:15][355195460736902][7567 ms][DEBUG] END   runCmdUntilRes#1 in 6968 ms
[2025-08-22 00:07:15][355195460736902][7567 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-22 00:09:07][351103376224785][0 ms][INFO] === Request start ===
[2025-08-22 00:09:07][351103376224785][1 ms][DEBUG] START check_frida
[2025-08-22 00:09:07][351103376224785][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-22 00:09:07][351103376224785][321 ms][DEBUG] SU: done in 319 ms; outroot         16270     1 2294840   4356 poll_schedule_timeout 0 S frida-server\n
[2025-08-22 00:09:07][351103376224785][321 ms][DEBUG] check_frida: running
[2025-08-22 00:09:07][351103376224785][321 ms][DEBUG] END   check_frida in 320 ms
[2025-08-22 00:09:07][351103376224785][321 ms][DEBUG] START check_scloud
[2025-08-22 00:09:07][351103376224785][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] SU: done in 234 ms; outu0_a118      16385  4994 23805452 86692 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] targetPkg: running
[2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] rawBody.length=1160
[2025-08-22 00:09:07][351103376224785][555 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTAzMzc2MjI0Nzg1IiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTgxRldYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNDVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzY4In0='" -e "main()" -q"
[2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] START runCmdUntilRes#1
[2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTAzMzc2MjI0Nzg1IiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTgxRldYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNDVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzY4In0='" -e "main()" -q"
[2025-08-22 00:09:10][351103376224785][3195 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTAzMzc2MjI0Nzg1IiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTgxRldYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNDVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzY4In0="\r\n
[2025-08-22 00:09:14][351103376224785][6867 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_165538e4-f11a-4202-a5ed-03f77938dec5","id":"QR_165538e4-f11a-4202-a5ed-03f77938dec5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-22 00:09:14][351103376224785][6867 ms][DEBUG] proc_open done in 6312 ms; code=0; res.len=3152
[2025-08-22 00:09:14][351103376224785][6867 ms][DEBUG] END   runCmdUntilRes#1 in 6312 ms
[2025-08-22 00:09:14][351103376224785][6867 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-22 00:24:07][352288966212982][0 ms][INFO] === Request start ===
[2025-08-22 00:24:07][352288966212982][0 ms][DEBUG] START check_scloud
[2025-08-22 00:24:07][352288966212982][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-22 00:24:07][352288966212982][255 ms][DEBUG] SU: done in 255 ms; outu0_a118      21686  4994 23803044 137392 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-22 00:24:07][352288966212982][256 ms][DEBUG] targetPkg: running
[2025-08-22 00:24:07][352288966212982][256 ms][DEBUG] END   check_scloud in 255 ms
[2025-08-22 00:24:07][352288966212982][256 ms][DEBUG] START check_boot_completed
[2025-08-22 00:24:07][352288966212982][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-22 00:24:07][352288966212982][287 ms][DEBUG] ADB: done in 31 ms; out
[2025-08-22 00:24:07][352288966212982][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-22 00:24:07][352288966212982][334 ms][DEBUG] SU: done in 47 ms; out
[2025-08-22 00:24:07][352288966212982][334 ms][DEBUG] END   check_boot_completed in 78 ms
[2025-08-22 00:24:07][352288966212982][334 ms][DEBUG] START check_internet
[2025-08-22 00:24:07][352288966212982][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.414/200.414/200.414/0.000 ms\n
[2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] check_internet: online
[2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] END   check_internet in 500 ms
[2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] rawBody.length=1043
[2025-08-22 00:24:08][352288966212982][834 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'""
[2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] START runCmdUntilRes#1
[2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'""
[2025-08-22 00:24:11][352288966212982][4395 ms][DEBUG] frida res:res:{"id":"68a79ce4a374a659aee6cf79","href":"https://eu-kc.samsungknox.com/cc/v1/devices/enrollment/seg/devices/68a79ce4a374a659aee6cf79","management":{"agent":{"href":"https://umc-cdn.secb2b.com/kc/single/KCC.apk","appTitle":"Knox Configure","packageName":"com.sec.knox.kccagent","version":"1.4","signatures":["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"]},"payload":{"KCUri":"eu-kc.samsungknox.com","authType":"MUTUAL_SSL","feedbackUri":""}},"license":{"licenseStatus":"ACTIVE","activationStatus":null}}\r\n
[2025-08-22 00:24:12][352288966212982][4551 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=2939
[2025-08-22 00:24:12][352288966212982][4551 ms][DEBUG] END   runCmdUntilRes#1 in 3717 ms
[2025-08-22 00:24:12][352288966212982][4552 ms][INFO] SUCCESS response from frida (len=2939)
[2025-08-22 00:26:00][352288966212982][0 ms][INFO] === Request start ===
[2025-08-22 00:26:00][352288966212982][1 ms][DEBUG] START check_scloud
[2025-08-22 00:26:00][352288966212982][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-22 00:26:00][352288966212982][303 ms][DEBUG] SU: done in 302 ms; outu0_a118      21686  4994 23906504 149328 ep_poll            0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-22 00:26:00][352288966212982][303 ms][DEBUG] targetPkg: running
[2025-08-22 00:26:00][352288966212982][303 ms][DEBUG] END   check_scloud in 302 ms
[2025-08-22 00:26:00][352288966212982][303 ms][DEBUG] START check_boot_completed
[2025-08-22 00:26:00][352288966212982][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-22 00:26:00][352288966212982][350 ms][DEBUG] ADB: done in 47 ms; out
[2025-08-22 00:26:00][352288966212982][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-22 00:26:00][352288966212982][412 ms][DEBUG] SU: done in 62 ms; out
[2025-08-22 00:26:00][352288966212982][412 ms][DEBUG] END   check_boot_completed in 109 ms
[2025-08-22 00:26:00][352288966212982][412 ms][DEBUG] START check_internet
[2025-08-22 00:26:00][352288966212982][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.958/256.958/256.958/0.000 ms\n
[2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] check_internet: online
[2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] END   check_internet in 375 ms
[2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] rawBody.length=1043
[2025-08-22 00:26:00][352288966212982][787 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'""
[2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] START runCmdUntilRes#1
[2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'""
[2025-08-22 00:26:04][352288966212982][4552 ms][DEBUG] frida res:res:{"id":"68a79ce4a374a659aee6cf79","href":"https://eu-kc.samsungknox.com/cc/v1/devices/enrollment/seg/devices/68a79ce4a374a659aee6cf79","management":{"agent":{"href":"https://umc-cdn.secb2b.com/kc/single/KCC.apk","appTitle":"Knox Configure","packageName":"com.sec.knox.kccagent","version":"1.4","signatures":["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"]},"payload":{"KCUri":"eu-kc.samsungknox.com","authType":"MUTUAL_SSL","feedbackUri":""}},"license":{"licenseStatus":"ACTIVE","activationStatus":null}}\r\n
[2025-08-22 00:26:04][352288966212982][4708 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=2939
[2025-08-22 00:26:04][352288966212982][4708 ms][DEBUG] END   runCmdUntilRes#1 in 3920 ms
[2025-08-22 00:26:04][352288966212982][4708 ms][INFO] SUCCESS response from frida (len=2939)